Privacy Policy – CoastNav

Effective Date: April 19, 2026 Last Updated: April 19, 2026 Developer: Vinh Nguyen Contact: customerservice@melove.io Applies to: CoastNav iOS App v1.0+

📋

1. Overview

This Privacy Policy describes how CoastNav ("we," "us," or "our") handles information when you use the CoastNav iOS application (the "App"). We are committed to protecting your privacy and being fully transparent about our data practices.

CoastNav is an offline-first maritime navigation app that provides global coastline maps for sailors, boaters, and coastal navigators. The App is designed to operate without requiring any user account, and the vast majority of its functionality requires no internet connection after the initial map data download.

      Plain-English Summary: CoastNav collects almost nothing about you. We do not
      create accounts, do not track your movements, do not serve ads, and do not sell or share any
      data with third parties. The only personal data the App accesses is your device location —
      and only when you explicitly tap the "center map" button.
    

📊

2. What Data We Collect

2.1 Data We Collect

Category	Data	Storage	Purpose	Shared?
Device Location	Approximate GPS coordinates (±1 km accuracy)	Not stored — used in real time only	Center map on current position	Never
App Preferences	Theme, distance units, map zoom level	On-device (UserDefaults)	Remember your settings	Never
Trial Status	First launch date (local timestamp)	On-device (UserDefaults)	Manage 30-day free trial	Never
Purchase Status	Premium unlock flag (boolean)	On-device (UserDefaults)	Enable premium features	Never — verified by Apple only
Map Tile Files	OpenStreetMap coastline data (public dataset)	App Documents folder on device	Offline map display	Never

2.2 Data We Do NOT Collect

Name or email address

User accounts / passwords

Background location

Location history / tracking

Camera or photos

Microphone / audio

Contacts

Calendar / reminders

Health or fitness data

Advertising identifier (IDFA)

Device fingerprinting

Crash reports / analytics

Behavioral analytics

Usage analytics

Biometric data

Financial / payment data

2.3 Legal Bases for Processing (GDPR / UK GDPR)

For users in the European Economic Area (EEA), United Kingdom, and Switzerland, we process data under the following legal bases:

Legitimate Interests (Art. 6(1)(f) GDPR) — Storing app preferences and trial status to provide core app functionality.
Performance of a Contract (Art. 6(1)(b) GDPR) — Processing in-app purchase status to fulfil the premium unlock you purchased.
Consent (Art. 6(1)(a) GDPR) — Accessing device location only when you explicitly grant permission and trigger the action.

📍

3. Location Data

CoastNav may request access to your device's location for the sole purpose of centering the interactive coastline map on your current position. Here is exactly how it works:

🔵 When Location Is Accessed

Only when you tap the "center on my location" button within the App. The App never accesses location in the background, never tracks your movement, and never stores a history of your positions.

🎯 Precision Used

Location is requested at 1-kilometer accuracy — coarser than maximum precision — as exact coordinates are not needed for coastline display. The App stops receiving location updates immediately after the first successful reading.

🔒 How Long Location Is Retained

Location coordinates are never written to storage. They are used momentarily to update the map viewport and then discarded. We have no record of where you have been.

✅ Your Permission

The App requests "While Using the App" location permission only (iOS NSLocationWhenInUseUsageDescription). It never requests "Always" (background) location access. You may deny this permission at any time in iOS Settings → Privacy & Security → Location Services → CoastNav without affecting any other app feature.

⚓ Note for mariners: CoastNav does not log waypoints, routes, or tracks on our servers. Any navigation history remains entirely on your device.

💳

4. In-App Purchases & Payments

CoastNav offers a single non-consumable in-app purchase (CoastNav Premium, one-time lifetime unlock) processed exclusively through Apple's App Store using StoreKit 2.

We never receive or store your payment card number, billing address, or any financial information.
All payment processing, receipts, and refund handling are managed by Apple Inc. under their own Privacy Policy (apple.com/legal/privacy).
We receive only a boolean confirmation (purchased / not purchased) from StoreKit to enable or disable premium features.
This confirmation is stored locally on your device. We do not maintain any purchase database on our servers.
Restore Purchases is available and re-queries Apple's servers to verify your purchase history — no data passes through our infrastructure.
The premium purchase supports Family Sharing — Apple handles eligibility determination entirely.

🔗

5. Third-Party Services & Data Sharing

5.1 Third-Party SDKs

CoastNav uses no third-party SDKs. The App is built exclusively with Apple's native frameworks (SwiftUI, CoreLocation, StoreKit, Foundation, SQLite3). There is no analytics SDK, no advertising network, no crash reporter, and no social media integration.

5.2 Network Connections

Endpoint	Purpose	Data Sent	When
`tiles.kidneydietfood.com`	Download offline map tile files (MBTiles format, OpenStreetMap coastlines)	Standard HTTPS GET request (no personal data, no device ID)	Only when you choose to download a map dataset
Apple App Store (`buy.itunes.apple.com`)	In-app purchase verification	Handled by StoreKit; we do not control this connection	Only during purchase or restore

No personal information (name, email, device ID, IP address correlation, or location) is ever transmitted to our map tile server. The server logs standard web server access logs (IP address + timestamp) as required for server operation; these are not linked to any personal identity and are deleted within 30 days.

5.3 Data Sharing

We do not sell, rent, lease, or share your personal data with any third party for:

Advertising or marketing purposes
Analytics or profiling
Data brokering
Any commercial purpose

Data may only be disclosed if required by applicable law, court order, or governmental authority, and only to the minimum extent required.

5.4 Map Data Attribution

Coastline data is sourced from OpenStreetMap (openstreetmap.org), licensed under the Open Database License (ODbL). This is publicly available geographic data; no personal information is involved in its use.

⚖️

6. Your Rights & Choices

Because CoastNav collects only minimal, locally stored data, most rights are exercisable directly on your device without needing to contact us. The table below summarises your rights by jurisdiction.

Right	Description	How to Exercise
Access	Know what data we hold about you	Contact us — in practice, no personal data leaves your device
Deletion / Erasure	Delete all app data	Delete the App from your device (Settings → General → iPhone Storage → CoastNav → Delete App)
Portability	Export your data	All data (preferences) is stored in standard iOS UserDefaults on your device; iCloud backup applies if enabled
Rectification	Correct inaccurate data	Change preferences directly in app Settings
Withdraw Consent (Location)	Revoke location permission	iOS Settings → Privacy & Security → Location Services → CoastNav → Never
Restrict Processing	Limit how data is used	No server-side processing exists; delete the app to fully restrict
Object	Object to legitimate interest processing	Contact us at customerservice@melove.io
Non-Discrimination (CCPA)	Not be discriminated against for exercising rights	We will never penalise you for exercising any privacy right

To submit a data subject request, email customerservice@melove.io with the subject line "Privacy Request – CoastNav". We will respond within 30 days (or as required by applicable law).

👶

7. Children's Privacy

CoastNav is a general-audience navigation utility app. It is not directed at children under 13 (or under 16 in EEA jurisdictions where a higher age threshold applies under national law).

Because the App does not collect any personally identifiable information (no accounts, no email, no name), it inherently complies with children's privacy laws including:

COPPA (U.S. Children's Online Privacy Protection Act)
GDPR Article 8 (age of digital consent in EU)
UK GDPR / Age Appropriate Design Code

If we become aware that a child's personal data has been collected contrary to applicable law, we will promptly delete it. Contact us at customerservice@melove.io if you have concerns.

🔒

8. Data Security

We implement appropriate technical measures to protect the limited data the App handles:

All network communication uses HTTPS/TLS 1.2+ (App Transport Security enforced).
Local data is stored in iOS UserDefaults and the App's sandboxed file container, protected by iOS device encryption when the device is locked.
No cloud database stores your personal information, so there is no centralised data breach risk.
In-app purchases are verified via Apple's cryptographically signed StoreKit receipts.

No method of data storage or transmission is 100% secure. However, given the minimal and non-sensitive nature of data in CoastNav, the risk to your privacy is very low.

🌍

9. Regional & Jurisdiction-Specific Information

9.1 European Union & EEA — GDPR

🇪🇺 GDPR

CoastNav processes personal data in compliance with the EU General Data Protection Regulation (Regulation 2016/679). Key points:

Data Controller: Vinh Nguyen, reachable at customerservice@melove.io.
No EU Representative Required: We do not systematically monitor or process special category data of EU residents, and our processing is minimal and non-systematic.
International Transfers: Map tile downloads are served from a server that may be located outside the EEA. Standard HTTPS connections are used; no personal data is transmitted in these requests.
Supervisory Authority: You have the right to lodge a complaint with your local Data Protection Authority (e.g., CNIL in France, BfDI in Germany, ICO in the UK).
Retention: Local app data persists until you delete the app. Location data is never stored.

9.2 United Kingdom — UK GDPR

🇬🇧 UK GDPR

Post-Brexit, the UK GDPR and Data Protection Act 2018 apply. Our practices under UK GDPR mirror those described for EU GDPR above. You may contact the Information Commissioner's Office (ICO) at ico.org.uk to raise a complaint.

9.3 California — CCPA / CPRA

🇺🇸 CCPA/CPRA

Under the California Consumer Privacy Act and California Privacy Rights Act, California residents have the right to:

Know what personal information is collected and how it is used.
Delete personal information we hold about you.
Opt-Out of Sale / Sharing: We do not sell or share personal information. No opt-out mechanism is required.
Non-Discrimination: We will not discriminate against you for exercising CCPA rights.
Limit Use of Sensitive Personal Information: We do not collect sensitive personal information as defined under CPRA.

"Sharing" under CPRA: We do not share personal information for cross-context behavioural advertising. We do not have actual knowledge of selling or sharing personal information of consumers under 16 years of age.

To submit a CCPA request, email customerservice@melove.io. We will respond within 45 days as required.

9.4 Brazil — LGPD

🇧🇷 LGPD

Brazilian users are protected under the Lei Geral de Proteção de Dados Pessoais (Law 13.709/2018). We process data under the bases of legitimate interest (preferences, trial tracking) and contract performance (purchase status). You may exercise your LGPD rights by contacting customerservice@melove.io.

9.5 Canada — PIPEDA / Provincial Laws

🇨🇦 PIPEDA

For Canadian users, we comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws. Our practices are consistent with PIPEDA's 10 fair information principles. You may contact our Privacy Officer at customerservice@melove.io.

9.6 Australia — Privacy Act 1988

🇦🇺 Privacy Act

We comply with the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs). Given the minimal personal information collected, CoastNav's practices inherently align with the APPs. Contact us at customerservice@melove.io for any privacy queries.

9.7 Japan — APPI

🇯🇵 APPI

For Japanese users, we comply with the Act on the Protection of Personal Information (APPI) and its 2022 amendments. We do not transfer personal information to third parties without consent. Contact us at customerservice@melove.io.

9.8 South Korea — PIPA

🇰🇷 PIPA

We comply with the Personal Information Protection Act (PIPA) of South Korea. Given that we collect no personal information on our servers, no cross-border transfer notification is applicable. Contact us for any inquiry.

9.9 Vietnam — Decree 13/2023/NĐ-CP

🇻🇳 Decree 13

We comply with Vietnam's Personal Data Protection regulations under Decree 13/2023/NĐ-CP effective from July 1, 2023. No sensitive personal data as defined under Vietnamese law is collected. Contact us at customerservice@melove.io.

9.10 Singapore — PDPA

🇸🇬 PDPA

We comply with the Personal Data Protection Act 2012 (PDPA) of Singapore, including the 2021 amendments. We do not transfer personal data outside Singapore for processing without adequate protection standards in place.

9.11 Apple App Store Requirements

🍎 Apple Guidelines

CoastNav complies with Apple's App Store Review Guidelines and App Privacy requirements:

The App's App Store Privacy Nutrition Label accurately reflects data collection practices described in this policy.
Location access is declared under "Location — Precise Location / Coarse Location" with purpose "App Functionality".
No data is collected for the purpose of tracking as defined by Apple's App Tracking Transparency framework. The App does not call ATTrackingManager.requestTrackingAuthorization.
All permission usage descriptions (Info.plist NSLocationWhenInUseUsageDescription) accurately describe the purpose of access.

🗓️

10. Data Retention

Data Type	Retention Period	Deletion Method
Device location	Not retained — used momentarily and discarded	Automatic (never written to disk)
App preferences	Until app is deleted from device	Delete the App, or iOS Settings reset
Trial start date	Until app is deleted from device	Delete the App
Premium unlock flag	Until app is deleted from device	Delete the App (can be restored via "Restore Purchases")
Downloaded map files	Until you delete them in-app or delete the App	In-app dataset manager or delete the App
Server access logs (IP only)	Maximum 30 days	Automatic server log rotation

🔄

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the App's features, applicable law, or our practices. When we make material changes, we will:

Update the "Last Updated" date at the top of this page.
Display a notice within the App or on the App Store page where required by law.

We encourage you to review this policy periodically. Continued use of the App after the effective date of a revised policy constitutes your acceptance of the changes. For significant changes affecting your rights, we will provide more prominent notice.

The current version of this Privacy Policy is always accessible from within the App (Settings → Privacy Policy) and at marssd.com/coastnav/privacy_policy.html .

✉️

12. Contact & Data Requests

For any questions about this Privacy Policy, to exercise your privacy rights, or to submit a data subject request:

📧 Privacy Contact

Developer: Vinh Nguyen
Email: customerservice@melove.io
Subject Line: Privacy Request – CoastNav
Response Time: Within 30 days (GDPR) / 45 days (CCPA)

If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority (see Section 9 for jurisdiction-specific contacts).