Last updated 19 October 2026

Privacy policy

SurfIQ is a surf forecasting app and website for Australia. This page explains what we collect, why, who processes it for us and how you can have it deleted. SurfIQ is in beta and this policy will change as the product does; we will change the date above when it does.

What we collect

If you join the early access list

• Your email address, used only to tell you when SurfIQ is ready for you.

If you create an account in the app

• Your email address and, if you choose a password, a one-way hash of it (we cannot read it). If you sign in with Google or Apple we receive your email and the account identifier they give us.
• Your nickname, skill level and profile photo, if you set them.
• Your favourite breaks, reviews, posts, photos and break submissions.
• A push notification token for your phone, if you allow notifications, so we can send you alerts.

Automatically

• Your IP address, used for security and to limit abuse (for example repeated sign-in attempts).
• Technical logs from our servers.

Location

If you allow location access, the app uses your position on your phone to help you find breaks near you. We do not store it. If you submit a new break, the coordinates you submit are saved with it.

Who processes data for us

• Our hosting provider, which runs the servers and the database.
• Cloudflare, which stores and delivers the photos you upload.
• Google Firebase Cloud Messaging, which delivers push notifications using your device token.
• Google and Apple, if you choose to sign in with them.
• Open-Meteo, which supplies weather and wave data. We send it the coordinates of breaks, never anything about you.

We do not sell your personal information and we do not run advertising or tracking on the website or in the app.

What other people can see

Your nickname, profile photo, reviews, posts and photos are visible to other people in the app. Your email address is not.

Deleting your data

In the app, go to Profile, then Settings, then Delete account. This permanently deletes your account and the content it made. To be removed from the early access list, or for any other request about your data, contact [email protected].

Retention

We keep your data while your account exists. Uploads that are never attached to a post or profile are deleted after a day.

Contact

Questions about this policy: [email protected].