Privacy Policy

Effective: June 28, 2026 · Last updated: June 28, 2026

BarrelFare ("BarrelFare", "we", "us") is operated by BarrelFare LLC. This policy explains what data the BarrelFare iOS app collects, why, and your choices. We built BarrelFare to need as little of your data as possible.

The short version

We do not ask for your name, email, password, or phone number.
We do not collect your device location.
We do not use third-party analytics, advertising, or tracking SDKs.
We do not sell or share your personal data.
The data tied to you is an anonymous account ID, the surf spots you follow, your chosen home airport, and anonymous in-app usage events (which screens and features you use) — used solely to run and improve the app.

What we collect

Anonymous account identifier. On first launch the app creates an anonymous account through our authentication provider (Supabase). This is a randomly generated identifier (a UUID). It is not linked to your name, email, Apple ID, or any other real-world identity.

Your in-app preferences. When you use the app we store, against that anonymous ID:

the surf spots you add to your watchlist (stored as spot IDs);
your selected home airport (an airport code such as LAX).

Anonymous usage events. To understand how the app is used and where to improve it, we log first-party usage events against your anonymous account ID — for example, opening the app, viewing a deal or spot, changing your home airport, applying a filter, saving a spot, or tapping a "check fare" booking link. These events record interaction types and the identifiers involved (such as an airport or spot code); they never contain your name, contact details, location, or any free-text you enter. This is our own logging stored in our Supabase database — we do not use any third-party analytics or tracking SDK, and the data is used only in aggregate to operate and improve BarrelFare.

Push notification token (only if you enable notifications). If a future version of the app offers deal alerts and you opt in, iOS provides a device push token that we store to deliver those notifications. You can turn notifications off at any time in iOS Settings.

Diagnostic data from Apple. If you opt in through iOS, Apple may share standard crash and performance diagnostics with us. This is controlled by your device settings, not by us.

We do not collect: your name, email address, phone number, precise or coarse location, contacts, photos, advertising identifiers, or browsing history.

How we use it

To sync your watchlist and home airport across app sessions and (in future) devices.
To rank and display surf-and-flight "deals" relevant to your chosen home airport.
To understand, in aggregate, how the app is used so we can improve it (anonymous usage events).
To deliver push notifications you have explicitly enabled.
To diagnose crashes and improve reliability.

We do not use your data for advertising or profiling, and we do not make automated decisions that produce legal effects about you.

Third-party services

BarrelFare relies on a small number of service providers. We share only what each needs:

Supabase — hosts our database and the anonymous authentication described above. Your anonymous ID and preferences are stored here.
Open-Meteo and WorldTides — provide surf, weather, and tide forecast data. We send requests for forecast data; we do not send them any information about you.
Travelpayouts / Aviasales — powers flight price estimates and the optional "book this flight" link. Tapping a booking link opens Aviasales, which has its own privacy policy and may set a referral identifier so any booking is attributed to BarrelFare. We do not share your personal data with them; we receive only aggregate referral/commission reporting.
Apple — App Store distribution, push notification delivery (APNs), and optional crash diagnostics, governed by Apple's privacy policy.

Data retention and deletion

We keep your anonymous account and preferences until you delete them. You can:

Reset in the app — "Sign out & reset" clears your local data and starts a fresh anonymous account.
Delete your account and data — tap Delete account in the app's "You" tab. This permanently removes your account and all associated records (watchlist, home airport, push token) from our servers immediately. You can also email [email protected] to request deletion.

Children

BarrelFare is not directed to children under 13 (or the equivalent minimum age in your country) and we do not knowingly collect data from them.

Your rights

Depending on where you live (e.g., the EU/UK under GDPR, or California under the CCPA/CPRA), you may have rights to access, correct, delete, or port your data, and to object to certain processing. Because the only personal data we hold is an anonymous ID and your preferences, you can exercise most of these directly in the app, or contact us at [email protected].

Changes to this policy

We may update this policy as the app evolves. Material changes will be reflected by the "Last updated" date above and, where appropriate, noted in the app.

Contact

Questions about this policy or your data: [email protected].
BarrelFare LLC, Florida, United States.