Seaworthy Family

Seaworthy Family is a small app for families, made by one person. We collect what’s needed for a family to share a map across their phones, and nothing to sell, advertise with or track you.

Who has an account

• The main parent signs up on seaworthyfamily.com with an email address. We email a temporary password, which you replace with your own the first time you sign in. Sign-in is handled by Amazon Cognito, so we never see or store your password.
• A second parent, and teens 13 and older, join by scanning or typing a one-time code from the main parent’s phone. Their device gets its own key. We don’t ask them for an email address or a phone number. We store only the name given to the device (for example “Sam’s iPhone”) and when it was last used.

What we store

• What your family types in: parents’ names, each teen’s name, birth month and year (if added), graduation date, territories, expectations, consequences, freedoms, the things your teen enjoys, check-ins and ratings, notes, events, ship parts and bank entries, and a history of those changes.
• Account details: the main parent’s email address (held by Amazon Cognito), which devices are linked to the family, and your plan or trial status. If you signed up through a referral or partner link, we keep that link’s code with your signup.
• Technical logs: the server records which request was made, when, and whether it worked. It never records what you typed, your email or a phone number.

We don’t collect location, contacts, photos, microphone, screen time or browsing data. The app doesn’t use the camera. A link code is scanned with your phone’s own Camera app.

Where it’s kept and who can see it

• Storage: your family’s data is stored with Amazon Web Services in the United States (Oregon), encrypted in transit (TLS) and at rest.
• Who can see it at Seaworthy: access is limited to the person who runs Seaworthy, for keeping the service working and for answering your requests. We don’t read families’ content otherwise.
• On your phone: a copy is kept so the app opens quickly and works read-only offline. The parent PIN, if you set one, stays on that phone as a salted hash and is never uploaded.

Who else is involved

• Amazon Web Services: hosting, the database, sign-in (Cognito) and the sign-up email.
• Cloudflare: hosts this website. The sign-up page uses Cloudflare Turnstile to check that you’re a person, not a bot; Turnstile sees your IP address and browser details for that check and isn’t used for advertising.
• Apple: TestFlight during testing (see below), and the App Store later.
• Not used yet: Stripe for payments, once paid plans launch; a lifecycle email service for the main parent only, never teens; and a text-message service for confirming the main parent’s phone number, if we add that. We’ll update this policy before any of them is turned on.

We don’t sell or share your data for advertising, and there are no analytics, advertising or tracking tools in the app. Nothing a teen writes or has written about them is ever used for marketing.

Children and teens

• Teen devices are 13 and up. The age check uses the birth month a parent entered for that teen. If we learn a linked device belongs to someone under 13, we remove it.
• Children under 13 may appear in the app only because a parent typed in their name and details. We don’t collect anything directly from them.
• What a teen writes is visible to their parents. The app says so next to every place a teen can write. Nothing in Seaworthy is private from the family’s parents.
• We don’t monitor what families write. The teen view always shows a link to the 988 Suicide & Crisis Lifeline and Crisis Text Line.

How long we keep it, and deleting it

We keep your family’s data while your family uses Seaworthy, including if a trial or plan lapses, so you can come back to it.

• Delete your family: the main parent can choose Delete family in the app. Every linked device is signed out straight away. The family is deleted 7 days later, unless you sign in and keep it. Deleting removes your maps, history, notes, devices and sign-in.
• Remove a teen: a parent can remove a teen. That teen’s map, history and linked devices are deleted, and their name is removed from the family’s history.
• Unlink a device: any linked device can unlink itself, and parents can remove any device. That deletes the device’s key.
• Backups: deleted data can remain in encrypted backups for up to 14 days before they expire.

What we keep after deletion, and why:

• A scrambled (hashed) copy of the main parent’s email address, and whether that address ever paid. We keep this so a free trial can’t be claimed twice and to prevent abuse. It isn’t your readable email and isn’t used to contact you.
• Anonymous statistics, such as how long a family used Seaworthy, how many teens it had and how often features were used. They’re stored with no names, text, email or anything that links back to your family, and we won’t try to re-identify them.
• Billing records, once paid plans launch. We keep what tax and accounting law requires (about 7 years), kept separately from the statistics. Our payment provider keeps its own records too.

Your copy and your choices

• Download your data: Download family data (or Download my data on a teen’s device) saves everything you can see in the app as a file.
• Questions or requests: to correct or delete your data, or anything else, email us. We’ll answer within 30 days.

TestFlight

During testing the app is distributed through Apple’s TestFlight. TestFlight may send Apple crash logs, and any feedback or screenshots you choose to submit; that data is governed by Apple’s terms and privacy policy. Apple shares crash reports and your feedback with us.

Changes

We’ll update this page before we change how your data is used, and tell you in the app when the change matters.

Contact

Dylan Lee · [email protected]