MDONZELLI LTD ("we", "us", "our"), a company registered in England and Wales, operates the SV.GOAT application and website (together, the "Service"). This Privacy Policy explains how we collect, use, share and protect your information when you use the SV.GOAT mobile apps (Android and iOS), the web application at svgoat.app and the GOAT device.
By using the Service, you agree to the practices described in this policy. If you do not agree, please do not use the Service.
1.1 Account Information
When you create an account, we collect:
- Your email address
- Your first name and surname
- How you sign in: a password, or Sign in with Google or Sign in with Apple
- Your app PIN. Our servers keep only a one-way scrambled copy that cannot be turned back into your PIN. Your phone keeps a copy in its own encrypted storage so that you can view your PIN in Settings.
- Whether you agreed to our Terms, and whether you want marketing emails
1.2 Boat and Equipment Data
When you add a boat, we collect:
- Boat name, type, make, model and year, and optionally its MMSI, call sign and home port
- Boat dimensions (length, beam, draft)
- Equipment setup (tanks, batteries, solar, engines, sails in your sail locker)
- Your boat's @handle and logo, if it has them
- Names of crew you add to a voyage or to your crew list. These are names only. They give no access to your boat.
- A backup of what your boat has learned about its sailing performance
- GOAT device ID, software version and connection status
1.3 Sensor Data
We collect readings from your boat's instruments. On a boat with a GOAT device, the device sends them. On a boat without one, the app sends readings from a connected DataHub or Victron Cerbo, or from your phone's own barometer and motion sensors if you choose. Readings can include:
- GPS position, course and speed
- Depth
- Wind speed and direction
- Air and water temperature, humidity and air pressure
- Battery voltage, current and charge
- Solar output and shore power
- Tank levels (fuel, water, waste)
- Engine data, where your boat sends it
- Nearby ships from your AIS receiver
1.4 Location Data
Your boat's position. Your GOAT device or boat instruments report your boat's position while they are on. We use it for the anchor watch, weather for your area, remote monitoring, voyage logs and nearby ship traffic.
Your phone's location. If you allow it, the app uses your phone's location to:
- show where you are on the map;
- run the anchor watch with your phone's GPS. This can run in the background, even when the app is closed. That is why the app asks for location "all the time" (Android) or "Always" (iPhone and iPad);
- record voyages and anchor stays on a boat that has no GOAT device or other boat GPS;
- add location to photos you take in the app.
When your phone is the boat's position source, those positions are saved to your boat, just like positions from a GOAT device. You can turn off location access at any time in your phone's settings. The anchor watch and phone voyage logging stop working without it.
The Service is not a collision-avoidance system and must not be used as one. See the Terms of Service.
Who can see your boat's position: you, and people you share the boat with (section 5.4). Beyond that, only through features you control: followers you approve, who see it by default unless you switch it off for them (section 5.5), voyages you share to Community (section 5.6) and Nearby, if you turn it on (section 5.7). No one else sees it, and your boat's position is never shown on its public page.
1.5 Technical and Usage Data
We collect:
- Your app version, device type and operating system
- A push-notification token for each phone or tablet
- The devices and browsers signed in to your account, their IP address and when they were last used. This lets you see and end your sessions, and helps protect your account.
- When you last opened the app for a boat
- Your alert settings and notification preferences
- How much data your GOAT device uses each day
1.6 Photos and Media
Photos you take in the app stay on your phone, in its gallery or Photo Library. We do not upload them.
If you share a voyage to Community, the app uploads up to 6 of its photos as smaller copies, with their location data removed. Other SV.GOAT users can see them for as long as the voyage is shared. Your boat logo is stored by us and shown wherever your boat appears, including its public page.
We do not scan or analyse your photos, and use them only to show them in the Service.
1.7 Community and Social Content
If you use these features, we store:
- Voyages you share: route, map image, photos, distance, times and the crew names you add
- Comments and reactions
- Anchorages you add, and ratings and reviews you write
- Your sailor profile, if you create one
- People you follow, boats you follow, and reports or blocks you make
1.8 Feedback and Support
When you send feedback or ask for help, we keep your message, any screenshots, your app version and device type, and our replies.
We use your information to:
- Provide and run the boat monitoring service
- Show live and past data from your boat
- Send alerts about your boat (anchor drag, wind, depth, batteries, tanks and similar)
- Run the anchor watch and other position-based safety features
- Provide weather forecasts for your boat's area
- Let you watch your boat remotely
- Share your boat with crew, family and guests you choose
- Record and show voyages and sailing logs
- Show your boat, voyages or profile to other sailors, but only through the features you choose (section 5)
- Let you connect your own AI app to your boat data (Captain Data-beard, section 5.3)
- Handle account requests (password and PIN resets, account deletion)
- Send service emails (account checks, password and PIN resets, alerts)
- Send marketing emails, only if you said yes
- Keep accounts safe, block automated sign-ups and prevent abuse
- Fix problems and improve the Service
- Answer support requests
- Meet legal obligations
If you are in the European Economic Area (EEA) or the United Kingdom, our legal bases are:
- Performance of a contract: to provide the Service under our Terms of Service, including any GOAT device registered to your account
- Consent: where you choose to turn something on. Examples: phone and background location, marketing emails, listing in the Sailors Network, Nearby, sharing voyages to Community, and sharing anonymous sail-performance data. You can withdraw consent at any time.
- Legitimate interests: keeping the Service secure, preventing fraud and abuse, cookieless website statistics and error reports, and improving the Service, where your rights do not override these interests
- Legal obligation: where the law requires it
- Distress alerts: to protect the vital interests of the people on board (GDPR Art. 6(1)(d)), together with your own decision to share the boat with the recipients.
4.1 Infrastructure
Your data is stored with Supabase (PostgreSQL database) on Amazon Web Services (AWS) in the EU (Ireland, eu-west-1). Files and media are stored in Supabase Storage.
4.2 Encryption
- Data is encrypted in transit (TLS 1.2 or higher).
- Data is encrypted at rest by our database provider.
- Remote connections to your GOAT device go through encrypted tunnels.
- Your PIN is never stored in a readable form on our servers.
4.3 Security Measures
Access controls limit each account to its own data and to boats shared with it. Sign-in attempts are limited, and we check sign-ups for automated abuse. Only a small number of people can access our production systems.
4.4 Data Retention
- Boat data, sensor history and voyages are kept while your account is active, so your boat's history stays available to you.
- The Captain Data-beard activity log is kept for 30 days.
- When you delete your account, your account, boats, sensor history, voyages, shared voyages, comments, ratings and access tokens are deleted from our live systems at once. Stored files such as photos, covers and logos are removed by a daily clean-up. Everything is gone from our live systems within 30 days.
- Some things stay, with no link to you: anchorages you added to the shared catalog, feedback you sent, anonymous sail-performance averages, and the GOAT device's own record, so that the device can be set up again.
- Backup copies (section 4.5) are replaced in our normal backup cycle.
4.5 Backups
To recover from a disaster, we keep backup copies of our database in secure cloud storage that only we can access.
5.1 We Do Not Sell Your Data
We do not sell, rent or trade your personal data. We will never sell your boat's location, sensor data or personal information.
5.2 Service Providers
We use these services to run SV.GOAT. Each receives only what it needs to do its job:
- Supabase (database, sign-in, file storage): stores your account data, sensor data and media. Supabase Privacy Policy
- Cloudflare (secure tunnels, DNS, protection, Turnstile): provides encrypted remote access to your GOAT device. At sign-up, Turnstile checks that you are not an automated program. Cloudflare Privacy Policy
- Vercel (website hosting and Web Analytics): hosts svgoat.app. Vercel Web Analytics counts page visits without cookies (section 6). Vercel Privacy Policy
- Google (Sign in with Google): we receive your name and email address. Google Privacy Policy
- Apple (Sign in with Apple): we receive your name, if you share it, and your email address or an Apple relay address. Apple Privacy Policy
- Google Firebase Cloud Messaging and Apple Push Notification service (push notifications): receive a device token and the text of the alert. Firebase Privacy · Apple Privacy Policy
- Open-Meteo (weather): receives your boat's coordinates to return a forecast, with no account details. Open-Meteo Terms
- OpenStreetMap Foundation (maps and place names): your phone or browser loads map tiles for the area on screen. Our server sends the start and end points of a voyage, with no account details, to find the nearest town's name. OSMF Privacy Policy
- Apple Maps (maps on iPhone and iPad): your device loads map images for the area on screen. Apple Privacy Policy
- Esri (satellite map tiles): your device loads tiles for the area on screen. Esri Privacy
- Sentry (error reports for the website and our servers): receives technical error details. We do not send personal data to it by default, and screen recording is off. Sentry Privacy Policy
- Telegram (feedback and support): if you message our Telegram bot, your messages, screenshots and Telegram display name pass through Telegram, and our replies reach you there. When you send feedback or a support message by any route, the first few hundred characters are sent to our team through Telegram as an alert. For the web support form, this can include the name and email address you entered. Telegram Privacy Policy
- Resend (email): sends account, password and PIN emails, alerts, replies to the support form and, if you opted in, marketing emails. It receives your email address and the message. Resend Privacy Policy
5.3 Captain Data-beard Connector (Optional)
SV.GOAT does not run its own AI assistant, and we do not send your data to any AI provider. Instead, you can connect SV.GOAT yourself to an AI app you already use, currently Claude (Anthropic) or ChatGPT (OpenAI), as a "connector".
- Who can turn it on: only you, by signing in to SV.GOAT and approving access on our consent screen.
- What it can read: only boats your account owns. It never sees boats shared with you or boats you follow. It can read your boat's name and setup, position and navigation, batteries and energy, tank levels, alerts, anchor-watch status, voyages, fuel range, recent weather trend and sail-performance learning.
- What it never receives: network addresses, remote-access links, device serial numbers, activation codes, MMSI or call sign.
- Read-only: it cannot change settings, arm an anchor watch or send anything to your boat.
- Where your data goes: once connected, the data it reads goes to the AI app you chose. That company handles it under its own privacy policy, and we are not responsible for it.
- What we keep: access uses short-lived passes that we store only in scrambled form. We keep a 30-day log of which tool was used, for which boat, and whether it worked. We never log your questions or the answers.
- Turning it off: remove the connector in Claude or ChatGPT, or change your SV.GOAT password, which disconnects every connector. Deleting your account removes all connector data.
5.4 Sharing Your Boat
When you invite crew, family or guests by email, they can see your boat's live data and position. You decide who has access. Guests cannot change your boat's setup or share your data further. When you remove a guest, their access ends at once and the boat is cleared from their app.
5.5 Discover, Followers and Your Boat's Public Page
- Discover: boats that can use Discover are listed by default, so other SV.GOAT users can find and follow them. The listing shows the boat's name, @handle, logo, home port, your name and the number of followers. You can hide your boat in its settings at any time, and it stays hidden until you list it again.
- Public page: a listed boat has a page at svgoat.app/b/your-handle. Anyone with the link can open it. It shows the same details as the Discover listing, never the boat's position or sensor data. We ask search engines not to index these pages.
- Followers: you approve each follower. Followers see voyages you share. By default, an approved follower also sees your boat's position on their map, with its speed, course, heading and wind (true wind speed and direction, apparent wind speed and angle). You can switch this off for any follower at any time. If you turn off Show exact position, followers see the position rounded to about 1 nautical mile. Followers never see anything else from your boat: not its batteries, tanks, anchor watch or other sensors, and not its dashboard.
5.6 Community
Voyages you share to Community can be seen by other signed-in SV.GOAT users. That includes the route, map image, photos, crew names and stats. Comments, reactions, anchorages you add and anchorage reviews are also visible to other users. You can stop sharing a voyage or delete your comments at any time. You can report content and block people. A blocked person and you can no longer see each other.
5.7 Sailors Network and Nearby
- Sailors Network is opt-in. If you list yourself, other users can see your sailor profile. If you also share your presence, they see only a rough distance to you, about 10 km. They never see a map position.
- Nearby is opt-in, with separate switches for sharing and for receiving. When it is on, people you are connected with get a heads-up when your boats are close, using your boat's position.
5.8 Victron VRM (Optional)
If you connect Victron VRM, you enter your VRM portal ID, email and password in the app. The app sends them, encrypted, to your GOAT device, which keeps them on board to read your Victron data. We do not store them on our servers. Victron handles your VRM data under its own privacy policy.
5.9 Buying the GOAT Device or Plus
SV.GOAT sells nothing on this website. The GOAT device and the Plus plan are sold by our partner EasySea, on its own terms. When you buy from EasySea, EasySea handles your order and payment under its own privacy policy. We do not receive your payment details.
5.10 Anonymous Sail-Performance Data (Optional)
If you turn it on, your boat contributes anonymous sail-performance averages for its boat class, to help similar boats. They carry no name, boat, owner or position. A class average is only shown once at least three boats have contributed.
5.11 Legal Disclosure
We may disclose your information if the law requires it, or in response to valid requests from public authorities (for example a court order). We may also disclose it if we believe that is necessary to protect our rights, your safety or the safety of others.
5.12 Distress Alerts
If you own a boat, you can send a distress alert from the Emergency View in the SV.GOAT app. You choose to send it: you hold the button and wait out a 10-second countdown.
Who receives it. Everyone who has accepted an email invitation to that boat, and your own other signed-in phones and tablets. Followers and people whose invitation is still pending do not receive it. People who don't have the SV.GOAT app, or who are signed out, are not reached; the app shows you who was.
What is shared with them.
- The boat's name, model, length, MMSI and call sign.
- Your name as the owner.
- What you say is happening and how many people are on board.
- Your note, if you write one.
- The boat's position and track since the alert started.
- Its latest readings: course, speed, heading, wind, air pressure, battery and depth.
- The coast guard contact for the area.
These readings come from your GOAT device and/or the phone you sent the alert from. They are updated every few minutes until you end the alert, until 7 days pass, or until both the phone and the GOAT device stop sending.
What SV.GOAT does and does not do. The alert is delivered only inside the SV.GOAT app. SV.GOAT does not contact rescue services or any coast guard. It does not send the alert by email, SMS or phone call. It does not share it with anyone outside the boat's accepted share list.
How long we keep it. We keep the position and reading updates sent during an alert, and the delivery status for each person who received it, for 90 days after the alert ends. We keep the alert record itself (when it was sent, by whom and how it ended, plus a log of who received and acknowledged it) for 1 year, so a real emergency can be reviewed afterwards. Deleting the boat, or your account, deletes them.
Test alerts. A test alert goes only to your own devices, is clearly marked TEST, and ends by itself after 15 minutes.
The SV.GOAT website uses only strictly necessary cookies:
- Keeping you signed in
- Security protections
We use Vercel Web Analytics to count visits to our website. It sets no cookies and does not follow you to other websites. It records the page address, the referring site, your country, and your browser, operating system and device type. It does not store your IP address. Visits are counted with a short-lived anonymous code that changes every day.
Your browser also stores a few settings for the website on your own device, such as your display preferences.
We do not use advertising cookies or social media tracking pixels, and we do not track you across sites or show behavioural advertising.
Embedded YouTube videos load from YouTube (youtube-nocookie.com) only when you press play. See the Google Privacy Policy.
Your data is stored in the EU (Amazon Web Services, Ireland, eu-west-1). Personal data leaves the UK and the EU only to the service providers listed in section 5.2, and only as far as each needs it. These transfers are made under standard contractual clauses or other safeguards required by the UK GDPR and EU GDPR.
Depending on where you live, you may have these rights:
- Access: ask for a copy of your personal data
- Correction: ask us to fix wrong or incomplete data
- Erasure: ask us to delete your personal data
- Portability: get your data in a machine-readable format
- Restriction: ask us to limit how we use your data
- Objection: object to processing based on legitimate interests
- Withdraw consent: at any time, where we rely on consent
8.1 How to Use Your Rights
- Delete your account: in the app, go to Settings → Delete Account. On svgoat.app, go to Settings → Delete Account. This permanently removes your account and data as described in section 4.4.
- Download your data: on svgoat.app, go to Settings → Export All Data to download everything in your account as one file. In the app, you can export any voyage as a GPX or KML file.
- Marketing emails: turn them off at any time in Settings on svgoat.app.
- Location and notifications: turn them off at any time in your phone's settings.
- Contact us: for any other request, email privacy@svgoat.app. We will reply within 30 days.
8.2 Complaints
In the UK, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk. In the EEA, you can contact your local data protection authority.
The Service is not intended for anyone under 13. We do not knowingly collect personal data from children under 13. If we learn that we have, we will delete it promptly. If you believe a child under 13 has given us personal data, please email privacy@svgoat.app.
The GOAT device on your boat reads data from your boat's instruments and NMEA 2000 network. How data flows:
- The GOAT device connects your boat's instruments to the SV.GOAT cloud service.
- It sends data to our cloud over encrypted connections.
- On the same local network as your GOAT device, the app talks to it directly, without the cloud.
- If you connect Victron VRM, your VRM login is kept on the GOAT device (section 5.8).
- It reports how much mobile data it uses each day, so you can see it in the app.
- It receives software updates over the internet for security and new features.
- You can disconnect the GOAT device at any time to stop all data collection from your boat.
With your permission, we send push notifications for alerts about your boat, such as anchor drag, wind, depth, batteries and tanks. You choose which alerts you get and their limits in the app. You can turn notifications off at any time in your phone's settings or in the app. To deliver them, we send a device token and the alert text to Google Firebase Cloud Messaging (Android) or Apple Push Notification service (iPhone and iPad).
We may update this policy to reflect changes in our practices, technology or the law. We will post the updated policy on this page and change the "Last updated" date. For significant changes, we may also email you. If you keep using the Service after a change, you accept the updated policy.
For questions about this policy or your data, or to use any of your rights, contact us: