This privacy policy applies to the VesselFlow app (hereby referred to as "Application") for mobile devices that was created by Caseadri LLC. (hereby referred to as "Service Provider") as a Freemium service. This service is intended for use "AS IS".

When you use the Application, the Service Provider and the service providers listed below may process your device's Internet Protocol address, app and operating-system version, app launches, screens and features used, interactions such as opening a vessel or paywall, subscription status, and diagnostic information such as crash reports. This information is used to operate, secure, troubleshoot, and improve the Application.

Location Information

The Application may request access to your device's location to center the map on your position when you tap the locate button. Location access is optional, is only used while the Application is in use, and is handled on your device to improve the map experience. The Application does not track or store your location on its servers. You can grant or revoke location access at any time in your device settings.

Information Collection and Use

The Application creates a pseudonymous identifier derived from Apple's identifier for the app vendor and stores it in the device Keychain. The identifier may remain available after the Application is reinstalled. It is used as the Application's user identifier with Firebase Analytics, Firebase Crashlytics, RevenueCat, and customer-support submissions so events, subscription access, diagnostics, and support requests can be associated with the same installation. It does not contain your name or email address, but because records are associated with this persistent identifier, this data is not represented as fully anonymous.

The categories of information the Application may collect are:

• Identifiers: the pseudonymous Application user/device identifier described above;
• Usage information: app launches, feature interactions, vessel and paywall views, and whether the Application reports a free or paid tier;
• Purchase information: subscription products, entitlement status, purchase and restoration results, and related subscription history provided by Apple and processed by RevenueCat;
• Diagnostics: crash reports, app and operating-system version, device characteristics, and related performance or troubleshooting information;
• Customer support information: the message and optional email address you choose to submit, together with the Application identifier, app version, operating-system version, and subscription tier needed to investigate the request; and
• Network information: Internet Protocol address and request metadata that may be processed by the Service Provider's hosting and backend providers when the Application contacts them.

Your saved vessels and places are stored on your device. If iCloud Key-Value Storage is available, those lists and deletion history are also synced through your Apple iCloud account so they can appear on your other devices. The Service Provider does not receive your Apple ID through this feature.

The Service Provider does not use this information for third-party advertising and does not sell it. The Application does not use the collected information to track you across apps or websites owned by other companies.

Third Party Access

Please note that the Application utilizes third-party services that have their own Privacy Policy about handling data. Below are the links to the Privacy Policy of the third-party service providers used by the Application:

• Google Analytics for Firebase
• Firebase Crashlytics
• Firebase (Firestore, Functions & App Check)
• RevenueCat
• Apple (App Store purchases and iCloud sync)

Google Firebase and Google Cloud process analytics, diagnostics, application-security tokens, backend requests, and customer-support submissions. RevenueCat processes the pseudonymous Application identifier and subscription information to determine paid-feature access and restore purchases. Apple processes App Store purchases and, when enabled on your device, iCloud synchronization. These providers process information under their own privacy policies and the Service Provider's agreements with them.

The Service Provider may disclose User Provided and Automatically Collected Information:

• as required by law, such as to comply with a subpoena, or similar legal process;
• when they believe in good faith that disclosure is necessary to protect their rights, protect your safety or the safety of others, investigate fraud, or respond to a government request;
• with their trusted services providers who work on their behalf, do not have an independent use of the information we disclose to them, and have agreed to adhere to the rules set forth in this privacy statement.

Opt-Out Rights

You can stop future collection by uninstalling the Application. You can disable location access in device settings and iCloud synchronization through your Apple account settings. Uninstalling does not by itself delete information already held by the Service Provider or its service providers. To request deletion of information associated with your Application identifier or a support email address, contact [email protected]. Some purchase records remain under Apple's control and must be managed through your Apple account.

Data Retention Policy

The Service Provider retains support messages, pseudonymous identifiers, analytics, subscription records, and diagnostics only for as long as reasonably necessary to provide and secure the Application, resolve support requests, understand product usage, comply with legal obligations, and enforce agreements. Retention by Firebase, RevenueCat, Apple, and other processors is also governed by their respective policies and the Service Provider's settings and agreements with them.

You may request access to or deletion of information that the Service Provider can associate with your Application identifier or support email address by contacting [email protected]. The Service Provider may ask for information reasonably necessary to locate and verify the relevant records and will respond as required by applicable law. Information may be retained when required for legal, security, fraud-prevention, or accounting purposes.

Children

The Service Provider does not use the Application to knowingly solicit data from or market to children under the age of 13. The Application does not address anyone under the age of 13. The Service Provider does not knowingly collect personally identifiable information from children under 13 years of age. In the case the Service Provider discover that a child under 13 has provided personal information, the Service Provider will immediately delete this from their servers. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact the Service Provider ([email protected]) so that they will be able to take the necessary actions.

Security

The Service Provider is concerned about safeguarding the confidentiality of your information. The Service Provider provides physical, electronic, and procedural safeguards to protect information the Service Provider processes and maintains.

Changes to This Privacy Policy

This Privacy Policy may be updated from time to time for any reason. The Service Provider will notify you of any changes to the Privacy Policy by updating this page with the new Privacy Policy. You are advised to consult this Privacy Policy regularly for any changes, as continued use is deemed approval of all changes.

This privacy policy is effective as of Jul 23, 2026

Your Consent

By using the Application, you are consenting to the processing of your information as set forth in this Privacy Policy now and as amended by us.

Contact Us

If you have any questions regarding privacy while using the Application, or have questions about the practices, please contact the Service Provider via email at [email protected].