Privacy Policy

Saltmarsh Apps LLC (“Saltmarsh Apps,” “we,” “us,” or “our”) builds local-first consumer utility software. We designed Boat Maintenance Log (Total Cost & Service Log) so that your vessels, maintenance records, USCG safety gear checklists, vessel registrations, personal fishing and diving licenses, crew trip guest passes, and ownership expenses remain stored on your device under your direct control.

1. 100% On-Device SQLite Storage (No Mandatory Cloud Accounts)

All records you create or import in Boat Maintenance Log are stored locally on your device inside a sandboxed 13-table on-device SQLite database (boats, engines, log_entries, log_photos, reminders, expense_schedules, expenses, csv_import_rules, safety_compliance, vessel_credentials, people, trips, and fuel_price_overrides):

• No Mandatory Sign-In: We do not require you to create an account, sign in, or upload your logbook to any cloud server to use the app.
• People, Crew & Trip Guest Pass Records Stay Local: Any contact or identity details you optionally enter for Registered Vessel Owners, Passengers, or Charter Guests (such as names, email addresses, or phone numbers in the local people table, linked fishing/diving licenses in vessel_credentials, or shared trip expenses in trips and expenses) are stored strictly in on-device SQLite.
• User-Initiated Sharing Only: When you invite a crew member via SMS or Email or export a harbor-guest-pass JSON bundle, full JSON backup, or PDF Service History Binder, the app opens your operating system’s native share sheet, SMS composer, or email client. Data leaves your device only when you explicitly send or save that file.
• Encrypted OS Device Backups: If your device has system backups enabled (such as Apple iCloud Device Backup or Google Android Backup), your local SQLite database and sandboxed photos may be included in your personal encrypted device backup managed by Apple or Google.

2. Foreground-Only Location for On-Water Fuel Dock Finder

Boat Maintenance Log Pro includes an optional On-Water Fuel Dock Finder (/fuel-docks) to help captains locate nearby marina fuel docks selling ethanol-free Rec-90 gasoline and marine diesel:

• Store Listing Foreground Location Disclosure (Exact Match): “Boat Maintenance Log uses your location while using the app to find the nearest on-water marina fuel docks and marine fuel prices. Your location is never tracked in the background or linked to your identity.” Foreground location (NSLocationWhenInUseUsageDescription / ACCESS_FINE_LOCATION / ACCESS_COARSE_LOCATION) is used only on demand when you open the Fuel Dock Finder or tap Use My GPS (or Use Current GPS Position) to find nearby on-water fuel docks. It is never tracked in the background, never linked to your identity, and never stored on Saltmarsh servers. A live search sends the coordinates you chose to OpenStreetMap’s public Overpass API (https://overpass-api.de/api/interpreter) and to Waterway Guide (https://www.waterwayguide-data.com/api/v2/navaids) only when a commercial token (EXPO_PUBLIC_WATERWAY_GUIDE_TOKEN) is configured.
• Foreground-Only Permission (NSLocationWhenInUseUsageDescription / ACCESS_FINE_LOCATION): If you tap Use Current GPS Position on the Fuel Dock Finder screen, the app requests foreground-only location access strictly while the app is open on screen. The app never requests or uses background location tracking.
• How Location Coordinates Are Used: Your current latitude and longitude are used on your device to calculate nautical-mile (NM) distance and 8-point compass bearing to fuel docks, and to query nearby public marine fuel dock points of interest from the public OpenStreetMap Overpass API (https://overpass-api.de/api/interpreter) and public Waterway Guide marine POI endpoints.
• No Location History or Analytics Profiling: Saltmarsh Apps LLC does not store your GPS coordinates on any Saltmarsh server, does not build location histories, and never transmits GPS coordinates to PostHog, Sentry, or RevenueCat.
• Works Without Location Permission: Granting location permission is completely optional. If you decline or revoke location permission, the Fuel Dock Finder works seamlessly using built-in curated harbor presets (such as Tampa Bay / St. Petersburg, Miami / Biscayne Bay, Key West, Charleston, Chesapeake Bay, Newport, San Diego, and Seattle) and offline fuel dock records, and custom pump price overrides are saved locally in on-device SQLite (fuel_price_overrides).

3. Local Bank & Credit Card CSV Import

Boat Maintenance Log Pro includes an optional feature allowing you to import transaction rows from CSV statements exported from your bank or card issuer:

• CSV files you select via the system file picker are parsed 100% locally on your device.
• Your CSV files, merchant rules (csv_import_rules), and transaction rows are never uploaded to Saltmarsh Apps LLC servers or transmitted to any third party.
• The app never asks for bank login credentials and does not connect to Plaid or external financial aggregators.

4. Photos, Credentials, USCG Boarding Binder & PDF Exports

When you attach photos of parts, hulls, service receipts, state vessel registration decals, USCG Certificates of Documentation (CG-1270), or personal fishing/diving licenses, those images are stored locally on your device within the app’s sandboxed storage (or encoded inside user-exported backup/Guest Pass files when you choose to share them). When you open Boarding & Docs mode or generate a Sale-Ready PDF Service & Ownership History Binder, the view or PDF file is rendered locally on your device and shared only when you explicitly select a destination in your device’s native share sheet.

5. Local Notifications

Calendar-based maintenance reminders, USCG safety gear expiration alerts (such as 12-year fire extinguishers and 42-month pyrotechnic flares), and registration/license renewal dates are scheduled locally on your device using native operating system notification APIs. We do not operate a remote push-notification server or collect push tokens.

6. Subscriptions & In-App Purchases

Optional Pro upgrades (Boat Log Pro: $4.99/month billed monthly, $34.99/year with a 7-day free trial, or $34.99 one-time Lifetime Unlock) are billed and processed directly by Apple (App Store) or Google (Google Play). Saltmarsh Apps LLC never receives or stores your credit card number or billing address.

We use RevenueCat (react-native-purchases) to validate anonymized App Store and Google Play purchase receipts and manage your active pro entitlement across renewals and restores. RevenueCat receives only the store receipt token and an anonymous app user identifier necessary to verify subscription status.

7. Strict Telemetry Scrubbing, Crash Diagnostics & Zero Advertising

Boat Maintenance Log contains no third-party advertising SDKs, never sells user data, and never tracks you across other companies’ apps or websites.

To keep the app reliable, the shipping build sends strictly scrubbed, anonymous diagnostics that are never linked to your identity:

• Anonymous Product Interaction (PostHog — Strictly Allowlisted): Our analytics wrapper enforces a strict code-level property allowlist (SAFE_PROPERTY_KEYS = ['plan', 'template', 'kind']) sent to https://us.i.posthog.com. Any non-allowlisted property is stripped before transmission. Vessel names, Hull Identification Numbers (HINs), registration numbers, license numbers, person/owner/guest names, emails, phone numbers, notes, photos, GPS coordinates, financial dollar/cent amounts, and CSV rows are never transmitted to PostHog.
• Scrubbed Crash Diagnostics (Sentry): Crash and error diagnostics are configured with sendDefaultPii: false and custom beforeSend / beforeBreadcrumb scrubbers that strip user objects, request headers, cookies, and breadcrumb data payloads before any crash report leaves the device.
• Purchase Receipt Validation (RevenueCat): Anonymous App Store and Google Play receipt validation for the pro entitlement, as described in Section 6.

8. Data Retention & Instant In-App Deletion (“Erase All Data”)

Because your records live locally on your device, you remain in full control of retention and deletion at all times:

• One-Tap In-App Erasure (Settings → Erase All Data): Open the Settings tab inside the app and tap Erase all data. Confirming this action runs an immediate SQLite transaction that permanently wipes all 13 local database tables (boats, engines, log_entries, log_photos, reminders, expense_schedules, expenses, csv_import_rules, safety_compliance, vessel_credentials, people, trips, and fuel_price_overrides) and cancels all scheduled local notifications on your device.
• Uninstalling the App: Deleting the application from your iPhone, iPad, or Android device also removes its local SQLite database and sandboxed files from the device.

9. Children’s Privacy

Our websites and applications are utility tools intended for adult vessel and property owners and are not directed to children under the age of 13. We do not knowingly collect personal information from children.

10. Changes to This Privacy Policy

If we update this Privacy Policy, we will post the revised version at https://saltmarshapps.com/privacy and update the “Last Updated” date at the top of the page.

11. Contact Us

If you have any questions about this Privacy Policy, our privacy practices, or our applications, please contact us:

Publisher / Legal Entity	Saltmarsh Apps LLC
Mailing Address	7901 4th St N, STE 300, St. Petersburg, FL 33702, United States
Privacy Email	privacy@saltmarshapps.com
Support Email	support@saltmarshapps.com