Yacht Swipe Privacy Policy

Last updated: July 9, 2026

Yacht Swipe helps yacht crew find work and helps captains, recruiters, agencies, vessel programs, and management teams discover and manage crew. This Privacy Policy applies to Yacht Swipe websites, web apps, mobile apps where available, location-based discovery, crew social features, bill split tools, Yacht Swipe Ops, support, billing, notifications, and related services. It explains what personal information we collect, how we use it, and the choices and rights you may have.

Who We Are

Yacht Swipe is operated by Nautiq Labs OÜ, an Estonian private limited company. Registered address: Harju maakond, Tallinn, Kesklinna linnaosa, Jõe tn 3-406, 10151, Estonia. For privacy questions, account requests, safety concerns, or review requests, contact support@nautiqlabs.com.

For GDPR purposes, Nautiq Labs OÜ is generally the controller of personal data processed through Yacht Swipe. Some workspace customers, employers, recruiters, or agencies may also be independent controllers for information they decide to collect or use outside Yacht Swipe.

Information We Collect

We collect information you provide directly, information created when you use the app, and limited technical information needed to run and protect the service.

Account information: name, email address, login method, user role, account status, profile verification status, authentication identifiers, onboarding state, invite and team membership status, suspension state, and user preferences.
Crew profile information: profile photo, bio, current or preferred location, nationality or right to work details if provided, preferred positions, departments, availability, experience, yacht history, skills, qualifications, CVs, references, languages, lifestyle fields, visas, certificates, uploaded media, and visibility settings.
Location and nearby discovery data: location permission choices, device location when you choose to update your location while the app is open, manually selected places, geocoded place details, approximate coordinates, radius or nearby search preferences, location visibility settings, location update dates, and nearby-search results used to show relevant jobs, crew, social content, or area summaries.
Recruiter and workspace information: recruiter profile, company or vessel name, company type, team workspace details, invited members, member roles, permissions, billing plan status, subscription limits, and audit records.
Job, matching, and application data: job posts, parsed job text, vessel details imported into jobs, swipes, matches, match scores, 85% job match alerts, saved crew or jobs, applications, shortlists, hire workflow states, and related notes.
Certificates and verification documents: uploaded certificates, passports, visas, medical fitness documents, seaman books, files, images, issue dates, expiry dates, no-expiry selections, certificate numbers, AI extraction results, verification status, rejection reasons, review history, and admin notes. Some documents may contain sensitive personal data. Only upload documents needed for Yacht Swipe.
Visa tracker data: manual Schengen stays, U.S. B1/B2 stays, I-94 admit-until dates, countries, entry and exit dates, notes, passport reminders, and related status calculations entered or confirmed by you.
Yacht Swipe Ops and compliance tool data: vessel profiles, crew lists, crew documents, tasks, maintenance records, watch schedules, hours of rest entries, day status labels, crew leave or rotation planning, vessel-scoped crew visa records, PDF exports, and operational notes.
Messages, support, and moderation data: direct messages, support messages, admin replies, moderation reviews, profile photo checks, reports, appeals, safety flags, and related attachments or metadata.
Crew social and bill split data: posts, replies, plan messages, social location links you add, bill groups, bill titles, members, expenses, payer information, currencies, totals, settlement status, archive status, notes, and related audit or support records.
AI-assisted feature data: prompts, extracted fields, AI-generated drafts, summaries, certificate review signals, job parsing results, moderation signals, confidence and risk indicators, and human review outcomes.
Device and usage information: IP address, browser and device data, app logs, diagnostic events, approximate region, crash reports, performance data, app version, platform, app distribution channel where available such as iOS, Android, or web, cookies, local storage, session data, push notification tokens, and notification delivery records.
Daily and coarse activity status: one daily active-use record per signed-in account per UTC date, plus a throttled app-level last active date/time used to show admins coarse status such as Active today, Last 7 days, Last 30 days, or Inactive. User detail views may show the last active date. We do not use this feature to show live presence, page-by-page behavior, or an exact online timeline.
Payment and billing information: package type, subscription status, Stripe customer IDs, subscription IDs, price IDs, invoice IDs, invoice URLs, trial and renewal dates, cancellation status, billing portal activity, payment error summaries, billing contact details, tax IDs, VAT, sales tax, GST, reverse charge, or zero-rate metadata where provided or calculated. We do not store full payment card details in Yacht Swipe.

How We Use Information

We use personal information to:

provide the app, create accounts, authenticate users, and keep sessions secure;
show crew profiles to recruiters and jobs to crew according to app settings;
power nearby crew, nearby job, and crew social discovery according to user settings, selected places, and chosen radius filters;
support swiping, matching, applications, saved items, messaging, alerts, and job management;
operate crew social and bill split tools, including showing shared bill records to bill participants and allowing the bill creator to manage or archive a bill;
verify profiles, recruiters, certificates, documents, and company workspaces;
process certificate review, including AI-assisted extraction and admin review;
run Yacht Swipe Ops, hours of rest, watch schedule, visa tracker, PDF export, leave planning, crew visa management, and related compliance-support tools;
send service emails, push notifications, team invitations, account alerts, match alerts, billing notices, and support replies;
operate recruiter workspaces, seats, subscriptions, billing status, Stripe integration, package limits, add-ons, manual admin overrides, tax settings, and audit records;
detect spam, unsafe behavior, suspected fraud, illegal job posts, fake documents, prohibited fees, trafficking risks, and other abuse;
show admins coarse last active status/date for support, security, abuse prevention, account operations, and product operations;
improve product quality, support workflows, moderation, certificate knowledge, matching relevance, crash diagnostics, performance monitoring, and aggregate usage reporting;
comply with legal, regulatory, safety, accounting, tax, and dispute-resolution obligations.

Legal Bases

Where GDPR or similar privacy law requires a legal basis, we rely on one or more of these bases:

performance of a contract, such as creating an account, showing profiles, operating workspaces, processing applications, sending service messages, and providing paid package features;
legitimate interests, such as protecting users, preventing fraud, improving matching, supporting customers, maintaining security, and operating analytics;
consent, such as optional marketing emails, selected push notifications, optional document uploads, and some sensitive document processing;
compliance with legal obligations, such as accounting, tax, security, fraud, dispute, and regulatory requirements;
protection of users, the service, or others where safety, fraud, abuse, or legal risk is involved.

For sensitive information, such as medical fitness documents, identity documents, passport data, visa data, or special-category data that may appear in uploads, we rely on consent, explicit user action, legal claims, employment or social protection context where applicable, or another lawful basis available for the specific purpose.

AI-Assisted Processing

Yacht Swipe uses AI-assisted tools to help with certificate reading, certificate expiry interpretation, document matching, job post parsing, profile text, support drafts, moderation, matching signals, summaries, and admin triage. AI may be wrong, especially when a document shows issue dates, renewal dates, course dates, planned stays, or no-expiry certificates.

Human admins may review, approve, reject, correct, or re-check AI-assisted results. We do not intend to make solely automated decisions that produce legal or similarly significant effects without a meaningful human review option. You can ask support to review an AI-assisted certificate, moderation, or account result.

We share information only where needed for the service or allowed by law:

with crew, recruiters, captains, agencies, yacht programs, employers, workspace members, social participants, and bill split participants according to app features, user actions, permissions, and visibility settings;
with service providers that help us host data, authenticate users, store files, send email or push notifications, process payments, analyze errors, provide AI tools, generate PDFs, monitor crashes and performance, support app distribution, monitor security, and protect the service;
with payment providers such as Stripe for checkout, subscriptions, invoices, billing portal access, taxes, and payment handling;
with admins and support staff who need access to resolve verification, moderation, safety, billing, or account issues;
with legal, safety, regulatory, or law-enforcement recipients when required or reasonably necessary;
in connection with a business transfer, merger, financing, acquisition, or reorganization, subject to appropriate safeguards.

Location-based features may use your chosen place, approximate coordinates, and radius to calculate nearby results. Recruiters should only see crew inside a selected nearby radius when that filter is active; if no nearby crew are available, the app may ask whether the recruiter wants to clear the nearby filter and see crew outside that area.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising.

International Transfers

Yacht Swipe and its providers may process information in countries other than where you live. When required, we use appropriate safeguards for international transfers, such as contractual protections, standard contractual clauses, adequacy decisions, or other legally recognized transfer mechanisms.

Retention

We keep information for as long as needed to provide Yacht Swipe, maintain account and verification records, comply with legal or accounting duties, resolve disputes, prevent abuse, and improve safety. You can request account deletion. Some records may remain for a limited period where retention is required or reasonably necessary, including audit, safety, billing, tax, fraud-prevention, legal, and dispute records.

Daily active-use analytics records are retained for up to 180 days unless a shorter period is required or the record is deleted earlier with the account. Billing and invoice records may be retained for the period required for accounting, tax, and dispute purposes. Certificate, verification, moderation, bill split, social, diagnostic, and safety records may be retained where needed to provide shared features, prevent misuse, debug service issues, or document past decisions.

Your Choices and Rights

You can update much of your profile in the app. You can manage selected email and push notification preferences in the app or through your browser/device. Some service messages, such as security, account, billing, verification, or support notices, may still be sent.

You can contact support@nautiqlabs.com to request access, correction, deletion, export, objection, restriction, withdrawal of consent, or review of an AI-assisted result where those rights apply. We may need to verify your identity before acting on a request.

If GDPR applies, you may also have the right to complain to a supervisory authority. For Estonia, the supervisory authority is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon).

Depending on where you live, you may have additional rights. For example, California privacy laws give eligible residents rights to know what categories of personal information are collected, to request deletion or correction, to opt out of sale or sharing, to limit certain sensitive information uses, and to not be discriminated against for exercising privacy rights. Yacht Swipe does not sell personal information or share it for cross-context behavioral advertising.

Cookies, Local Storage, and Similar Technologies

The web app uses cookies, local storage, session storage, and similar technologies for essential app functions such as login sessions, authentication state, preferences, security, app recovery, billing flow continuity, routing, notifications, diagnostics, and app performance. Mobile apps may use device storage, push-notification tokens, app store services, crash reports, performance diagnostics, and platform APIs needed to run the app. Blocking essential storage may stop parts of Yacht Swipe from working.

Yacht Swipe does not currently use advertising cookies or retargeting pixels. If we later add optional analytics, advertising pixels, retargeting, or similar non-essential tracking technologies, we will use the required consent controls before enabling them. More detail is available in the Yacht Swipe Cookie & Local Storage Notice.

Marketing emails require consent where required by law and include opt-out controls where offered.

Safety, Moderation, and Reports

Yacht Swipe may process reports, moderation signals, profile photo reviews, certificate review data, support messages, and admin notes to detect illegal or harmful content, prohibited crew fees, fake documents, harassment, spam, fraud, trafficking risks, unsafe jobs, and platform misuse.

You can report illegal or harmful content or ask for review of a moderation decision by contacting support@nautiqlabs.com.

Security and Breach Response

We use technical and organizational measures designed to protect personal information, including authentication, role-based access controls, storage controls, audit records, and service-provider safeguards. No online service can guarantee perfect security.

If a personal data breach creates a risk that legally requires notification, we will take appropriate steps, which may include notifying the Estonian Data Protection Inspectorate within the required timeframe and informing affected users where required.

Keep your login details safe and contact support@nautiqlabs.com if you believe your account or documents have been accessed without permission.

Children

Yacht Swipe is for users aged 18 and over. It is not intended for children or minors. Do not create an account or upload personal information if you are under 18.

Changes

We may update this Privacy Policy as Yacht Swipe develops, including when we add mobile apps, new AI-assisted tools, new recruiter workspace features, location features, crew social tools, bill split tools, activity visibility, payment options, tax handling, visa trackers, Ops tools, watch schedules, crew leave planning, or legal requirements change. The updated version will show a new last updated date. Where appropriate, we may ask signed in users to acknowledge updated Terms or Privacy versions before continuing.