Privacy Policy

ReefWise ("we", "us") operates reefwise.org and the ReefWise web application. This policy describes what we collect, why, and what choices you have. We keep it short because we keep the data small.

What we collect

• Your email address when you create an account. We use it to send sign-in magic links and occasional product updates you can opt out of.
• Your display name if you choose to set one on the account page.
• Your tanks, test readings, and dosing log entries — the data you explicitly enter. This is your reef journal; we store it so we can show it back to you.
• Subscription status (free / pro / lifetime) and the Stripe customer ID associated with your account if you purchase Pro.
• Aggregate usage data via Vercel Analytics — page views and anonymous performance metrics. No cookies are set and no individual users are identified.

What we don't collect

• We don't track you with third-party advertising cookies.
• We don't sell your email, tank data, or any other information to anyone.
• We don't train AI models on your data.
• We don't collect your card details — those go directly to Stripe.

Who we share data with

• Supabase hosts the database and handles authentication (supabase.com/privacy).
• Stripe processes payments and stores card details on our behalf (stripe.com/privacy).
• Resend delivers the magic-link and transactional emails we send (resend.com/legal).
• Vercel serves the website and collects the aggregate analytics mentioned above (vercel.com/legal).

Cookies

We use a single cookie set by Supabase to keep you signed in. It's strictly necessary for the app to work and does not track you across sites.

Your rights

You can export your data at any time (CSV export on the logging page) and delete your account entirely from the account settings page. Deleting your account immediately removes your profile, tanks, readings, and dosing log. If you have an active subscription it will be cancelled and pro-rated by Stripe. You can also email us at privacy@reefwise.org for any data request.

If you're in the UK or EU, you have additional rights under GDPR including access, correction, portability, and erasure. Contact us and we'll respond within 30 days.

Data retention

Account data is kept for as long as your account exists. Billing records are kept for 7 years to meet tax and accounting obligations. Everything else is deleted with your account.

Changes

If we change this policy materially we'll notify you by email before the change takes effect. Minor clarifications may be made without notice; the "Last updated" date at the top will always reflect the current version.

Contact

Questions about this policy? Reach us at /contact or email privacy@reefwise.org.