Privacy Policy

1. Introduction

Marine Keeper ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application at thewrench.co ("the Service").

2. Information We Collect

2.1 Information You Provide

• Account information: email address, password, and profile details (name, experience level, role)
• Boat and fleet data: vessel details, engine information, maintenance records, trip logs
• Financial data: savings goals, expense records, budget information (we do not store credit card numbers, payment processing is handled by Stripe)
• Documents and images: uploaded manuals, receipts, and photos
• Calendar and reminder data: events, maintenance schedules, and reminders you create
• Waitlist signups: email address and the interest category you selected when you tap a Coming Soon tile or submit a category suggestion. We use this to email you a confirmation link, send you a one-time notification when the category launches, and (if you stay subscribed) keep you on the The Wrench announcement list. You can unsubscribe at any time via the link in the confirmation email.

2.2 Information Collected Automatically

• Usage analytics: page views and feature usage (via PostHog)
• Session recordings (website only): a replay of your visit, covering the pages you move through and where you click. Text you type into forms is masked before it leaves your browser
• Error reports (website only): when something breaks, the error message, its technical stack trace and the page path you were on
• Device information: browser type, operating system, screen resolution
• Log data: IP address, access times, referring URLs

Product analytics. We use PostHog to understand how The Wrench is used. On the website that covers named product events (for example: account created, boat or bike added, a plan limit reached), a recording of your session, the clicks and form interactions you make, anything the site writes to your browser console and an automatic report when the app hits an error. In the iPhone app it is only the named product events: the app does not record your screen and does not report errors automatically.

Text you type into forms is masked in recordings before it is sent. Values that can appear in a web address and would be sensitive, such as an invite code or a sign-in code, are stripped out, and an error report carries only the page path rather than the full link. We never sell or share this data with advertisers. Analytics data is deleted with your account.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process your subscription and payments via Stripe
• Power advanced features (receipt scanning, document analysis, and the in-app help assistant). Your data is sent to third-party processing services and is not used to train their models
• Send transactional emails (account confirmation, payment receipts)
• Analyze usage patterns to improve the product experience
• Respond to your support requests
• Comply with legal obligations

4. Third-Party Services

To provide the Service, we use trusted third-party providers for functions including, but not limited to, database hosting and authentication, payment processing, automated features, product analytics, email delivery, feedback collection, and application hosting. These providers receive only the data necessary to perform their specific function and are bound by their own privacy policies and data protection obligations.

Key categories of third-party services include:

• Database and authentication: Your account and application data is stored with our database provider, secured with row-level access controls
• Payment processing: Subscription payments are handled by our payment processor. We never see or store your full credit card number
• Document processing: When you use automated features (receipt scanning, manual analysis, the in-app help assistant), your uploaded content and questions are sent to our processing provider for analysis and are not used to train their models
• Analytics: We use product analytics and web analytics tools to understand usage patterns and improve the Service
• Email delivery: Transactional emails (account confirmations, payment receipts, notifications) are sent through our email service provider
• Hosting and infrastructure: The Service is hosted on cloud infrastructure providers that may process your data as part of delivering the application

We reserve the right to engage additional or replacement third-party service providers as reasonably necessary to operate and improve the Service. We do not sell, rent, or trade your personal information to third parties for marketing or advertising purposes.

5. Data Storage and Security

Your data is stored securely on Supabase's infrastructure with row-level security policies ensuring users can only access their own data. We use HTTPS encryption for all data in transit and follow industry-standard security practices.

While we take reasonable measures to protect your information, no method of electronic storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or compliance purposes. Anonymized analytics data may be retained indefinitely.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Request that we correct inaccurate data
• Deletion: Request that we delete your personal data
• Export: Request an export of your data in a portable format
• Objection: Object to the processing of your data for certain purposes

To exercise any of these rights, contact us at taylor@thewrench.co.

8. Cookies and Tracking

We use essential cookies for authentication and session management. Our analytics tools (PostHog, Google Analytics) may use cookies or similar technologies to collect usage data. You can control cookie preferences through your browser settings.

9. Children's Privacy

The Service is not intended for users under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 18, we will delete it promptly.

10. Changes to This Policy

We reserve the right to modify this Privacy Policy at our discretion. We will notify you of material changes by email or through the Service. The "Last updated" date at the top indicates when the policy was last revised.

11. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at taylor@thewrench.co.