Effective Date: November 10, 2026

SpotsWell Privacy Policy

SpotsWell ("SpotsWell", "we", "us") is a surf forecasting and surf spot discovery app for Android, operated from Agadir, Morocco. This policy explains what information the app collects, why, who can see it, how long we keep it, and how you can have it deleted.

1 Summary

  • You can browse the app as a guest. Creating an account is only needed to save spots, set alerts, post surf plans, follow surfers and send camp inquiries.
  • We use your location only on your device, to sort surf spots by distance. Your location is not sent to our servers.
  • We do not sell your personal information, and we do not show ads.
  • You can delete your account and your data at any time (see Delete your account).

If you have any question, email us at support@moroccosurfnstay.com.

2 Information we collect

2.1 Account information

When you create an account with email and password, or with Google Sign-In, we receive and store through Firebase Authentication:

  • your email address,
  • a unique user ID (Firebase UID),
  • for Google Sign-In, the basic profile details Google shares with us (such as your display name).

We never see or store your Google password. If you register with email, your password is handled by Firebase Authentication and is not readable by us.

2.2 Profile and preferences

During setup you may enter surf-related profile details, such as a display name, your surf level and preferences, and your chosen measurement units. This profile is stored in Cloud Firestore and is tied to your user ID.

2.3 Surf session plans ("Who's Surfing")

If you post a surf plan, we store what you enter: your display name and avatar (if set), your surf level, the spot, date and time slot, your notes, and a contact handle only if you choose to share it. Plans are visible to other signed-in users of SpotsWell. Guests cannot see them.

2.4 Following other surfers

If you follow a surfer, the list of the people you follow is stored in Cloud Firestore under your user ID. Other signed-in users can see follower counts.

2.5 Location (optional)

If you grant permission, SpotsWell uses your approximate and precise location (ACCESS_COARSE_LOCATION, ACCESS_FINE_LOCATION) only while the app is in use, to calculate your distance to surf spots and sort them. This calculation happens on your device. Your coordinates are not stored on our servers and we do not track your location in the background. You can revoke the permission at any time in Android Settings.

2.6 Notifications (optional)

If you allow notifications, the app can alert you about surf conditions for spots you chose. You can switch notifications off in the app or in Android Settings.

2.7 Marketing contact details ("leads")

When you sign up or sign in, we save a record containing your email address, your user ID, how you signed in (for example "email" or "Google"), and a timestamp. We may use your email to tell you about SpotsWell updates and about our surf camp, Morocco Surf & Stay. You can ask us to stop at any time by emailing support@moroccosurfnstay.com. We do not sell or rent this list.

2.8 Forecast data and local storage

Surf forecasts come from the Open-Meteo service. The requests are for the coordinates of surf spots, not for your personal location. Forecasts, your saved spots and similar app data may be cached on your device so the app works offline.

2.9 Technical data

Our service providers (see section 4) automatically process technical data needed to run the service, such as IP address, device and app identifiers, and request logs. We do not use this data to identify you for advertising.

3 How we use your information

  • to create and secure your account and sign you in;
  • to show conditions, tide and wind data and sort spots by distance;
  • to save your favourite spots and alert settings;
  • to power the community features (surf plans, following);
  • to send the notifications you turn on;
  • to contact you about SpotsWell and Morocco Surf & Stay (section 2.7);
  • to keep the service secure and fix problems.

We do not use your data for advertising and we do not make automated decisions that have legal effects on you.

4 Who we share information with

We do not sell your personal information. We use these providers to run the app:

ProviderPurposeData involved
Google Firebase (Authentication, Cloud Firestore)Accounts, profile, surf plans, follows, lead listSection 2.1 to 2.4, 2.7, technical data
Google Play services (Credential Manager, location)Google Sign-In, location resolution on deviceGoogle account sign-in, device location (on device)
Open-MeteoSurf, wind and tide forecastsSpot coordinates only
WhatsApp (Meta)Camp inquiries you choose to sendWhatever message you send

Camp inquiries. When you tap an Inquire button, the app opens WhatsApp with a pre-written message (package, room type and price) addressed to Morocco Surf & Stay. Nothing is sent until you press send in WhatsApp. Once you send it, WhatsApp's own privacy policy applies as well as this one.

Other users. Content you post in community features (section 2.3) is visible to other signed-in users.

Legal reasons. We may disclose information if the law requires it or to protect the rights and safety of users and the service.

Firebase may process data on servers outside your country, including outside Morocco and the European Economic Area, under Google's data protection terms.

5 How long we keep information

  • Account, profile, surf plans and follow data: until you delete your account.
  • Marketing contact record (section 2.7): until you ask us to remove it or you delete your account.
  • Data cached on your device: until you clear the app data or uninstall the app.

6 Delete your account

You can have your account and the data linked to it deleted at any time, without uninstalling the app.

In the app: open Settings > Delete account and confirm. For security you may be asked to sign in again.

By email, without the app: send an email to support@moroccosurfnstay.com from the address you registered with, with the subject "Delete my SpotsWell account". We will confirm by reply and complete the deletion within 30 days.

What gets deleted:

  • your authentication account (email and user ID),
  • your profile and preferences,
  • surf plans you posted,
  • your follow list,
  • your marketing contact record.

Data stored only on your device is removed when you clear the app data or uninstall the app. Temporarily deactivating or signing out is not deletion. We may keep limited information if we are legally required to, for example to resolve a dispute or meet a legal obligation.

7 Your rights

Depending on where you live, and under applicable data protection laws (including Moroccan Law 09-08 and, where it applies, the EU/UK GDPR), you may have the right to access, correct, delete or export your personal data, to object to or restrict certain uses, and to withdraw consent at any time. To use any of these rights, email support@moroccosurfnstay.com. You can also complain to your local data protection authority.

8 Security

Data sent between the app and our service providers is encrypted in transit (HTTPS/TLS). Access to our database is limited by security rules so that users can only change their own account data. No system is completely secure, so we cannot guarantee absolute security.

9 Children

SpotsWell is not intended for children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, email support@moroccosurfnstay.com and we will delete it.

10 Changes to this policy

If we change this policy, we will update the effective date above and, for significant changes, notify you in the app or by email. Continued use of the app after a change means you accept the updated policy.

Need Help?