1. Who we are
Lineup is operated by Lineup App. You can reach us at hello@lineupspot.com.
2. What data we collect
- Account data — email address, display name, username, profile photo (avatar). Collected when you sign up.
- Social handles — Instagram, X/Twitter, TikTok, Facebook (optional, only if you add them).
- Check-in data — which surf spot you checked in at, and the time you checked in and out. Used to show who's in the water.
- Location — your device location is requested only at the moment you check in, to verify you're within 1 km of the spot. We do not track or store your location continuously.
- Chat messages — messages you send in a spot's chat are stored and visible to other users checked in at that spot.
- Device preferences — language, units (metric/imperial), and auto-checkout duration are saved in your browser's localStorage. These never leave your device.
3. Why we collect it
- To provide the service: show who's surfing, enable check-ins, display forecasts, and run spot chats.
- To keep your session active and your preferences saved.
Legal basis (GDPR Article 6): performance of a contract (providing the service you signed up for) and legitimate interests (maintaining app security and preventing abuse).
4. Who we share data with
We do not sell your data. We use the following sub-processors:
- Supabase Inc. (database, authentication, file storage) — servers in the EU. Supabase Privacy Policy.
- Vercel Inc. (hosting and CDN). Vercel Privacy Policy.
- Google LLC — if you choose "Continue with Google", Google processes your sign-in. Google Privacy Policy.
- Open-Meteo (surf forecast data) — no personal data is sent to this service.
5. How long we keep your data
- Account and profile data: retained while your account is active.
- Check-in history and messages: retained while your account is active.
- On account deletion: all personal data is deleted within 30 days.
6. Cookies and local storage
We use browser localStorage to store your session token and UI preferences (language, units). We do not use tracking cookies, analytics cookies, or third-party advertising cookies.
7. Your rights (GDPR)
As a user in the EU/EEA you have the right to:
- Access — request a copy of the data we hold about you.
- Rectification — correct inaccurate data (you can update most data directly in the app).
- Erasure — request deletion of your account and all associated data.
- Portability — receive your data in a machine-readable format.
- Restriction / Objection — restrict or object to certain processing.
- Lodge a complaint — with Spain's data protection authority, the AEPD.
To exercise any of these rights, email us at hello@lineupspot.com.
8. Children
Lineup is not directed at children under 16. If you believe a child has created an account, contact us and we will delete it promptly.
9. Changes to this policy
We may update this policy from time to time. We'll notify you via the app for any material changes. The date at the top of this page shows when it was last updated.
10. Contact
Questions about your privacy? Email hello@lineupspot.com.