Privacy Policy
Your privacy is important to ASTONISHING and the ShakaLog service. We developed this Privacy Policy to provide you with information on how we process your personal data when you use the ShakaLog mobile application.
"Personal data" is information relating to an identified or identifiable natural person.
Categories of personal data processed by ShakaLog.
Personal data that is processed when you create an account:
When you create a ShakaLog account, we ask you to provide your email address, full name, and password. You may optionally provide a profile photo.
Purposes and Legal Grounds:
(a) ShakaLog processes your email address and password because you use your email address and password to sign in to your account. The legal ground for processing your email address and password for this purpose is based on our legitimate interest in protecting the security of your account.
(b) ShakaLog also processes your email address for the purpose of sending you important information about your ShakaLog account or the service, such as important safety information or material changes to this Privacy Policy. The name you provide is associated with your account profile. The legal ground for processing your email address and name for these purposes is ShakaLog's legitimate interest in providing you important safety or other information about your ShakaLog account or material changes to this Privacy Policy.
(c) ShakaLog may process your email address to associate it with your account when you interact with our customer support representatives. The legal ground for this processing is our legitimate interest in providing quality customer support.
(d) ShakaLog does not send marketing communications. If this changes in the future, you will have the option to opt-in to receive marketing emails, which you may unsubscribe from at any time.
Additional personal data that is processed if you choose to provide it when you create a ShakaLog account or add information to your profile:
If you wish, you can add a profile photo to your account.
Purpose and Legal Ground:
If you choose to provide it, your profile photo is stored in your account for display within the application. The legal ground for this processing is our legitimate interest in allowing you to personalize your account.
Personal data that is processed when you communicate with ASTONISHING:
When you interact with our customer support representatives by email, we collect personal data, such as your name and email address, and information about your issue or question. We may also capture information relating to the support issue, such as notes or screenshots you provide.
Purposes and Legal Grounds:
We use this information to provide you with customer and product support and to monitor the quality and types of customer support we provide. The legal ground for processing this information for these purposes is ShakaLog's legitimate interest in providing quality product support.
Personal data that is processed when you create and log surf sessions:
When you create surf sessions within ShakaLog, you provide information about your surf session including date and time, session duration, wave conditions (size, surface conditions, quality), tide information, water temperature, wind conditions, weather, crowd level, and a session rating. You may optionally provide a session journal title and journal entry.
Purposes and Legal Grounds:
(a) This information is processed to provide you with the core functionality of the application: storing and displaying your personal surf session history. The legal ground for processing this information for this purpose is performance of a contract.
(b) Session data is stored in your personal account and is not shared with other users, used for marketing purposes, or sold to third parties. The legal ground for processing this information is our legitimate interest in providing the service you signed up for.
Personal data that is processed when you create surf spots:
When you create surf spots within ShakaLog, you provide a spot name, select a geographic region, select a break type, and provide geographic coordinates (latitude and longitude) for the spot. You may optionally provide notes about the spot. ShakaLog also stores which spots you have designated as "public" or "private."
Purposes and Legal Grounds:
(a) This information is processed to provide you with the ability to associate your surf sessions with specific locations and to view spots on a map. The legal ground for processing this information for this purpose is performance of a contract.
(b) Spots you create are stored in your personal account. Private spots are only visible to you. Public spots are only visible to you. ShakaLog does not share spot locations with other users or display them on any public map. The legal ground for processing this information is our legitimate interest in protecting the privacy of surf spot locations.
Personal data that is processed when you upload photos and videos:
When you upload photos or videos to a surf session, we collect and store these media files along with metadata such as upload date and display order. Photos and videos are stored in Firebase Cloud Storage.
Purposes and Legal Grounds:
(a) This information is processed to provide you with the ability to document your surf sessions with visual media. The legal ground for processing this information for this purpose is performance of a contract.
(b) Photos and videos you upload are associated with your sessions and stored in your personal account. They are not shared with other users, used for marketing purposes, or sold to third parties. The legal ground for processing this information is our legitimate interest in providing the service you signed up for.
Personal data that is processed when you add gear information:
When you add surfboards, fins, or wetsuits to your gear collection, you provide information such as board dimensions, maker, nickname, fin models and specifications, and wetsuit thickness. You may optionally upload photos of your gear.
Purposes and Legal Grounds:
(a) This information is processed to allow you to track which gear you used for specific surf sessions. The legal ground for processing this information for this purpose is performance of a contract.
(b) Gear information is stored in your personal account and is not shared with other users, used for marketing purposes, or sold to third parties. The legal ground for processing this information is our legitimate interest in providing the service you signed up for.
Personal data that is processed when you purchase a subscription through the apps:
If and when ShakaLog offers paid subscriptions, and you purchase a subscription on the iOS App Store or Google Play Store, those platforms will collect your payment information. ShakaLog receives subscription status information (active/expired) and subscription type from these platforms but does not directly collect or store payment information.
Purposes and Legal Grounds:
(a) We process subscription status information to provide you with access to premium features. The legal ground for processing this information is performance of a contract.
(b) Payment processing is handled entirely by Apple App Store or Google Play Store. Please refer to their respective privacy policies for information on how payment information is processed.
Personal data that is processed when you use the ShakaLog application:
When you use ShakaLog, we collect device information such as device type, operating system version, and app version. We also collect usage information such as which features you use and how frequently you use the app. We collect crash reports and diagnostic data to identify and fix technical issues.
Purposes and Legal Grounds:
(a) This information is processed to provide you with the requested services and to ensure the application functions correctly on your device. The legal ground for processing this information for this purpose is performance of a contract.
(b) Usage data and crash reports are processed to improve the quality and functionality of ShakaLog and to identify and fix technical issues. This data is processed in an aggregated, anonymized manner. The legal ground for processing this information for this purpose is our legitimate interest in providing you with quality products and services.
Personal data that is processed regarding location:
ShakaLog only processes location data when you explicitly create or select a surf spot. The application does not track your real-time location or collect background location data. Location coordinates are only stored when you create a new surf spot or select an existing spot for a session.
Purposes and Legal Grounds:
(a) Location data is processed solely for the purpose of allowing you to associate your surf sessions with geographic locations and to display spots on a map within the application. The legal ground for processing this information is performance of a contract.
(b) ShakaLog does not continuously track your location, does not collect location data in the background, and does not share location data with third parties or other users. The legal ground for this processing is our legitimate interest in protecting your privacy while providing core application functionality.
Categories of recipients of personal data.
Other users:
ShakaLog does not share your personal data with other users. Your profile information, surf sessions, spots, photos, and gear information are private to your account. ShakaLog does not have social features, does not display user information publicly, and does not operate any public maps showing user data.
Service providers:
ShakaLog uses Google Firebase and Firestore to provide cloud hosting, database services, authentication, and file storage. Firebase may process your account information, session data, spot data, and uploaded media files as necessary to provide these infrastructure services. Google Firebase operates under its own privacy policy, which can be found at https://policies.google.com/privacy.
ShakaLog may use third-party services to provide customer support tools, crash reporting, and analytics. These services receive only the minimum data necessary to provide their specific functions.
If and when subscriptions are offered, Apple App Store and Google Play Store may process subscription data as necessary to manage subscriptions. Please refer to Apple's and Google's privacy policies for information on their data processing practices.
Other disclosures:
We may disclose personal data about you to others: (a) if we have your valid consent to do so; (b) to comply with a valid subpoena, court order, judicial proceeding, or other valid legal process; (c) to enforce any of our terms and conditions or policies; or (d) as necessary to pursue available legal remedies or defend legal claims.
We may also transfer your personal data to a third party in the event of any reorganization, merger, sale, joint venture, assignment, transfer, or other disposition of all or any portion of ASTONISHING's business or assets, including in connection with any bankruptcy or similar proceeding, provided that any such entity that we transfer personal data to will not be permitted to process your personal data other than as described in this Privacy Policy without providing you notice and, if required by applicable laws, obtaining your consent.
International transfers of personal data
ASTONISHING is based in the United States. To offer ShakaLog, we may need to transfer your personal data to servers in other countries.
When you create an account or upload data to your account, your personal data will be collected and stored on servers in the United States of America operated by Google Firebase.
Personal data may be processed on our behalf by third-party companies to provide support, infrastructure, security, and other key functions.
Retention of personal data
We will retain your personal data as long as your account is active. When you delete your account, we will delete your personal data within 30 days. Some data may remain in backups for up to 30 days after account deletion before permanent removal.
In addition, see below under "Your Rights" for a description of your right of erasure.
Data protection, monitoring, and security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. These measures include:
• Password encryption using industry-standard methods
• Data transmission using SSL/TLS encryption
• Firebase security rules that prevent unauthorized access to user data
• User data scoped to individual accounts (other users cannot access your data)
We may use third-party services to monitor application performance, detect errors, and diagnose technical issues. These services may receive technical information such as request information (e.g., anonymized IP address) and error logs. The legal ground for processing this information is our legitimate interest in ensuring ShakaLog functions correctly and securely.
ShakaLog collects anonymous usage data to understand how users interact with the application. This includes information about which features are used and how frequently. This data is processed in aggregate form and cannot be used to identify individual users. The legal ground for processing this analytical information is our legitimate interest in understanding how users interact with ShakaLog so we can enhance the user experience and functionality.
Automated decision-making
ShakaLog does not make any decisions based on algorithms or other automated processing that significantly affect you.
Children's privacy
ShakaLog is not intended for use by children under the age of 13. We do not knowingly collect personal data from children under 13. If we discover that we have collected personal data from a child under 13, we will delete that information immediately. If you believe a child under 13 has created an account, please contact us immediately.
Privacy Policy updates
We may update this Privacy Policy from time to time as we add new features, improve our offerings, and as technologies and laws change. Any changes will become effective upon our posting of the revised Privacy Policy.
We will provide notice to you if these changes are material and, where required by applicable law, we will obtain your consent. This notice will be provided by email or by posting notice of the changes within the ShakaLog application.
Data controller and contact information
The data controller for ShakaLog is ASTONISHING.
For privacy-related inquiries, please contact us at:
• Email: privacy@shakalog.com
• Website: https://astonishingwork.com
Your rights
You have the right, subject to the conditions set out in the General Data Protection Regulation ("GDPR") or other applicable law, to:
• Request access to your personal data
• Request rectification or correction of your personal data
• Request erasure of your personal data
• Request restriction of processing of your personal data
• Request data portability
• Object to processing of your personal data
• Lodge a complaint with a supervisory authority
For more information about these rights, please visit the European Commission's "My Rights" page relating to GDPR.
To request access to or rectification, portability, or erasure of your personal data, or to delete your account, you may do so by:
• Navigating to Profile → Settings → Account within the ShakaLog application and selecting "Delete Account"
• Contacting us at privacy@shakalog.com
To exercise your right to restriction of processing or to object to processing, please contact us at privacy@shakalog.com.
When you delete your account through the application or by contacting us, all of your personal data will be permanently deleted, including:
• Account information (email, name, password, profile photo)
• All surf session data
• All surf spot data
• All uploaded photos and videos
• All gear information
Deletion is typically completed within 30 days.
Notice for California residents of privacy practices and rights
If you are a California resident, California law provides you with additional rights regarding your personal data under the California Consumer Privacy Act (CCPA).
Your Rights:
You have the right to:
• Know what personal information we collect about you
• Know whether we sell or share your personal information (we do not)
• Access your personal information
• Request deletion of your personal information
• Non-discrimination for exercising your privacy rights
Information We Collect:
We collect the following categories of personal information:
• Identifiers (email address, name)
• Internet or network activity information (app usage, device information)
• Geolocation data (surf spot coordinates you provide)
• Visual information (photos you upload)
• Inferences drawn from your information (session statistics)
How We Use Your Information:
We use personal information for the following purposes:
• Providing the ShakaLog service
• Maintaining and improving the application
• Communicating with you about your account
• Providing customer support
We Do Not Sell Your Personal Information:
ShakaLog does not sell your personal information to third parties. We do not share your personal information for monetary or other valuable consideration.
To exercise your California privacy rights, please contact us at privacy@shakalog.com or delete your account directly within the application.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
Effective Date: January 8, 2026
Last Updated: January 8, 2026
© 2026 ASTONISHING
