Privacy Policy

Last updated: 20 July 2026

1. Who We Are

Fetch ("we", "us", "our") operates this website, the Fetch Club portal, and the Fetch mobile application. For privacy enquiries, contact us at privacy@fetchthemark.com.

2. Data We Collect

We collect the following categories of personal data:

• Information you provide — name, email address, and message content submitted via contact or waitlist forms.
• Usage data — pages visited, session duration, referral source, and UTM parameters, collected via PostHog analytics.
• Technical data — browser type, device type, and approximate location (country/city level) derived from IP address. We do not store raw IP addresses.

3. How We Use Your Data

• To respond to your enquiries and notify you when the App launches.
• To send newsletters or product updates you have opted into.
• To understand how visitors use the Service and improve it.
• To comply with our legal obligations.

4. Analytics — PostHog

We use PostHog for product analytics. Website and club-portal events such as page views and form interactions are not linked to your Fetch account. In the mobile app, PostHog uses your Supabase account UUID as a pseudonymous identifier so account-linked analytics can be found for deletion; it is not anonymous. We do not send GPS coordinates, email addresses, race tracks, boat IDs, or race IDs to PostHog. We operate PostHog in EU data-residency mode.

PostHog's privacy policy is available at posthog.com/privacy.

5. Form Submissions — Supabase and Resend

Contact and waitlist form submissions are stored in Supabase, a managed database platform with data hosted in Sydney, Australia. Supabase processes data on our behalf.

When you submit a form we send a confirmation or acknowledgement email via Resend, an email delivery provider based in the United States. Resend receives your name and email address (and, for contact messages, your message content) solely to deliver these emails on our behalf. Resend's privacy policy is available at resend.com/legal/privacy-policy.

6. Error Monitoring — Sentry

We use Sentry to detect and diagnose crashes and errors. When something goes wrong, Sentry receives technical diagnostics such as an error message, stack trace, and limited browser or device context. Sentry is configured to minimise personal data: default PII is disabled, and known account, user, email, GPS, club, boat, race, position and navigation identifiers are stripped before sending. Session Replay and application-log capture are disabled. This processing is operational and is not used for marketing or profiling.

Sentry's privacy policy is available at sentry.io/privacy.

7. The Fetch Mobile App

The Fetch app collects additional data to provide race navigation:

• Location (GPS) — used in real time to calculate bearing, distance, and VMG to race marks. During an active race your position track (latitude, longitude, speed, heading, timestamp) is recorded and uploaded to Supabase (AWS Sydney). Your track is private to you by default and only visible to other entrants in a race if you choose to share it for that race. Offline points are queued in the app's private on-device storage: uploaded points are removed within 7 days, and points that never upload are removed after 30 days. Outside an active race, location is processed on your device only and never stored.
• Profile and account data — boat name, sail number, helm name, home club, racing class, and your email address, stored in Supabase with row-level security.
• Purchases — App Store / Google Play subscriptions are validated by RevenueCat using your Supabase account UUID as a pseudonymous identifier; your card details are handled by Apple or Google and never reach us. Club portal subscriptions are processed by Stripe.
• Maps and weather — nautical chart tiles are served by Mapbox, which receives standard tile requests (your IP address and the viewed map area, never your identity). Wind forecasts come from Open-Meteo, queried with an area-level bounding box — never your precise personal location.
• Diagnostics — mobile PostHog usage events use the pseudonymous account UUID described above so they can be deleted with the account. Sentry is configured not to attach your Fetch identity and to remove known navigation/account fields before sending diagnostics. Your GPS coordinates are never intentionally sent to either service, and we do not use session recording or screen replay.

8. Data Retention

We retain personal data only as long as necessary for the purposes described above, or as required by law. Contact and waitlist data is retained for up to 2 years, website analytics events for 12 months, and server-side race tracks for up to 24 months or until account deletion. Local subscription records remain until account deletion; payment providers may retain minimum transaction records for their legal and financial obligations.

Official club race entries and results may remain for the club's operational period after an account is deleted, but without the deleted Fetch account/profile link and without that person's GPS track. Deleting a sailor or Club administrator does not delete the Club, its courses, or its past official races.

9. Your Rights

This service is operated under Australian law. Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Withdraw consent to communications at any time.
• Lodge a complaint with the Office of the Australian Information Commissioner at oaic.gov.au.

Signed-in users can permanently delete their Fetch account from Settings in the mobile app or the club portal. This immediately removes the Fetch identity, profile, private practice data, and attributable GPS tracks. Cleanup requests to processors may continue securely in the background for up to 30 days. Deleting Fetch does not cancel an Apple App Store or Google Play subscription; cancel store billing separately in the relevant store subscription settings. See our account deletion instructions.

If you cannot sign in, or to exercise another privacy right, contact us at privacy@fetchthemark.com. We will respond within 30 days.

10. Children's Privacy

The Service is not directed at children under 16. We do not knowingly collect personal data from children. If you believe we have done so, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision.

12. Contact

Privacy enquiries: privacy@fetchthemark.com