SeafarerKit — Privacy Policy

Last updated: 29 October 2026

1. Who we are

SeafarerKit is operated by Marine Solutions SD Group, Ukraine.
Address: 3–7 Kyianivskyi Lane, Office 110A, Kyiv, 04053, Ukraine.
Email: support@msdmarine.com

Marine Solutions SD Group is responsible for the personal information it processes in connection with SeafarerKit, purchase verification and customer support. This policy covers the mobile application and these related services. General browsing of our website is subject to the website's own privacy and cookie notices where applicable.

2. Local records and your seafarer profile

You can use SeafarerKit without registering an online SeafarerKit account. Your seafarer profile is a local record, not a server account.

Information you enter or import may include your name, rank, profile photograph, vessel and contract details, salary and financial transactions, certificates, document numbers and expiry dates, attachments, notes, and personal or crew work/rest records. Documents you choose to attach may contain identity, employment, financial or health information.

These ordinary records and attachments are stored on your device. They are not automatically uploaded to us, Expo or the purchase-verification service. We do not maintain a cloud copy of your seafarer journal and cannot remotely read or recover it.

If you record information about crew members or other people, you are responsible for having an appropriate legal basis, providing any required information and following applicable privacy and employer requirements. Do not send crew or sensitive document information to support unless necessary for a specific request.

3. Purchases and purchase verification

Apple or Google processes payments through the account you use with the store. We do not receive your full payment-card number, card security code or store password.

To activate, restore and check Pro, the application sends purchase-verification information to our server function hosted by Supabase. Depending on the store, this includes the store name, product identifier, a signed transaction or purchase token, and transaction information needed to establish the plan, purchase status, expiry, renewal or revocation.

Our service checks this information with Apple or Google to validate access and prevent fraud. We do not create a server database of your seafarer records as part of this process. Purchase proofs are processed to verify access; infrastructure may retain technical request and security logs.

The application stores an encrypted purchase-verification cache separately on your device. This supports access based on the latest verified purchase status. It is not included in your personal backup and is not a transferable Pro licence.

4. Updates and technical information

SeafarerKit uses Expo Application Services, including EAS Update, to check for and deliver compatible application updates.

Update requests may include a random installation identifier, operating-system/platform information, application runtime and update identifiers, request times, and update or error diagnostics. As with other internet requests, service infrastructure may process your IP address and connection metadata.

This information is used to deliver the correct update, assess delivery and reliability, investigate errors and protect the service. The random installation identifier is not derived from your seafarer profile or an advertising identifier. A pseudonymous identifier can nevertheless be personal information under applicable law.

We do not upload your contracts, salary records, documents or Rest Hours journal for update delivery. The application does not contain advertising SDKs or use your local records for advertising tracking.

5. Permissions and device features

Camera and selected photographs/files: used when you choose a profile photograph or attach a document or image. Choosing content does not by itself upload it to us. Originals in your photo library or other applications remain outside SeafarerKit's storage controls.

Notifications: used for reminders scheduled locally on your device. SeafarerKit does not use Expo's remote push service to send your reminder content. Notification details may be visible on the lock screen according to your device settings.

Device authentication: if you enable protection, the operating system handles available biometric authentication or device-passcode verification. We do not receive fingerprint or facial-recognition templates.

You can manage permissions through your operating-system settings. Refusing an optional permission may prevent the related feature but does not require you to send personal records to us.

6. Backups, exports and sharing

SeafarerKit can create a password-encrypted local backup file. You decide where to save it and whether to share it through another application or service. Creating a backup does not automatically send it to us or create a developer-hosted cloud backup.

When you export a PDF, image or other document, it may contain personal or crew information. Ordinary exported reports are not automatically protected by your backup password. Check the file and recipient before sharing.

Files you place in email, cloud storage or other applications are handled by those services under their terms. Deleting a local SeafarerKit record does not delete exported copies or copies held by recipients.

7. Support information

If you contact us, we receive your email address, correspondence and any information you choose to provide, such as an application version, screenshot or redacted order reference. We use it to answer your request, investigate the issue and maintain appropriate support records.

Do not send passwords, backup passwords, payment-card details or account security codes. We do not need your backup password for routine support and cannot reset it.

8. Purposes and legal grounds

Where a legal basis is required, we process information as necessary to provide the application, verify purchases and respond to support requests; to pursue legitimate interests in reliable operation, security, fraud prevention and resolving claims; or to comply with applicable legal obligations. Where processing requires consent, we will obtain it and you may withdraw it without affecting earlier lawful processing.

Giving this policy to you does not itself constitute consent to unrelated processing. We do not make employment, credit or similar legally significant decisions about you using automated processing.

9. Recipients and service providers

Relevant recipients include Apple or Google for store purchases and verification; Supabase for hosting purchase-verification functions; Expo for update delivery and related technical processing; and service providers necessary to operate support, communications and infrastructure.

Providers processing information on our behalf are subject to applicable data-protection, confidentiality and security obligations. Stores and some providers may also act independently for processing covered by their own notices. We may disclose information where legally required or necessary to establish or defend legal claims, or to a recipient you choose through export or sharing.

We do not sell your personal information or disclose it for cross-context behavioural advertising.

Provider information:
Apple: https://www.apple.com/legal/privacy/
Google: https://policies.google.com/privacy
Expo: https://expo.dev/privacy
Supabase: https://supabase.com/privacy

10. International processing

Service providers may process limited online information outside Ukraine or your country, including in the United States and other countries where their infrastructure operates. Local journal records remain on your device unless you export, share or otherwise transfer them.

Where applicable law requires safeguards for international transfers, we rely on applicable provider data-protection arrangements and transfer mechanisms, such as standard contractual clauses or a relevant adequacy framework. You may contact us for information about the safeguards applicable to your information.

11. Retention and deletion

Local records remain under your control until you remove them, replace them through an intentional restore/reset, or remove the application's storage. Use the application's Delete personal data control to remove the main journal dataset. Follow any cleanup warning if a file could not be removed. This is not a forensic-erasure guarantee for a device or exported copies.

Purchase-verification information is kept separately from the journal. Deleting personal records does not cancel a subscription or erase store purchase history.

We retain support correspondence and information under our control only for as long as reasonably needed to resolve the request, maintain relevant support/security records, meet legal obligations or establish and defend claims. The period depends on the nature of the request, its resolution and applicable legal retention or limitation periods.

Technical provider logs are subject to the relevant service's configuration and retention arrangements. We do not promise an unverified fixed deletion period for provider-held logs. Contact us for information about the periods applicable to a specific request. Where information is no longer needed, we delete it or arrange deletion or anonymisation, subject to lawful retention requirements.

You must separately remove backups, reports and other copies saved outside SeafarerKit. We cannot erase copies held by recipients or delete store records controlled by Apple or Google.

12. Security

The application encrypts its main local records, stored attachments and purchase cache using device-protected keys. Local backup files use password-based encryption. Network connections for purchase verification and updates use HTTPS.

Viewing, printing and sharing may require temporary readable files. Protect your device and exported files, use available device authentication and keep backup passwords secure. No storage or transmission system can be guaranteed completely secure. If a reportable personal-data breach occurs, we will make notifications required by applicable law.

13. Your rights

Depending on the law applicable to you, you may request information about processing, access, correction, deletion, restriction or portability of information we hold, and object to certain processing. Where processing relies on consent, you may withdraw it. You may complain to a competent data-protection authority, including the appropriate authority in Ukraine or, where applicable, your EEA/UK supervisory authority.

Email support@msdmarine.com with the subject “SeafarerKit privacy request”. We may need proportionate information to verify and locate your request and will respond within applicable legal deadlines. Do not send identity documents unless necessary and specifically requested.

We cannot identify or retrieve a journal that exists only on your device. Rights concerning your store account or independently held provider records may also be exercised with the relevant provider. We will assist with requests concerning processing for which we are responsible.

14. Children

SeafarerKit is intended for seafarers and maritime professionals and is not directed to children under 16. We do not knowingly seek online personal information from children under 16. If you believe such information has been provided to us, contact support so we can assess and address it.

15. Changes and contact

We will update this policy when relevant practices change and revise the date above. Material changes will be brought to users' attention through an appropriate application or website notice. Where additional consent is legally required, a policy update alone will not replace it.

Marine Solutions SD Group
3–7 Kyianivskyi Lane, Office 110A
Kyiv, 04053, Ukraine
support@msdmarine.com