Updated October 14, 2026
433 LLC (“we,” “us,” or “our”) operates the Spicoli Surf Guide mobile application (“Spicoli” or the “App”). This policy explains what information we collect, why we use it, and the choices available to you.
Account information. We collect your verified phone number, email address, securely hashed password, and optional display name when you create an account.
Preferences and content. If you create an account, we store your surf regions, notification preferences, chat conversations, saved surf preferences, conversation summaries, and other settings so they remain available across sessions. Live voice transcripts can be saved with your conversation. Forecast browsing is available without an account; AI questions require a verified phone number.
Subscriptions and usage. Apple and RevenueCat process subscription purchases and restoration. We receive your app account identifier, product and transaction identifiers, purchase and expiration dates, and subscription status to provide Pro access. We also record feature usage, voice-session timing, and estimated audio costs to enforce introductory, weekly, and daily usage limits. We do not receive your payment card details.
Optional SMS. If you opt in to Texts with Spicoli, we record your verified phone number, the disclosure version you accepted, the time and source of your consent, changes to your opt-in, your alert preference, and your time zone. We use your surf interests and region to select alerts and choose appropriate delivery times. We also process messages you send to our number, opt-out and help commands, and message delivery information. Message frequency varies. Message and data rates may apply.
Device and notification information. If you enable notifications, we store a push token and basic device/platform information needed to deliver and troubleshoot notifications.
Usage and diagnostic information. We may collect app lifecycle events, feature usage, error messages, stack traces, app version, device type, operating system, and a pseudonymous or account identifier through PostHog. We configure monitoring to diagnose reliability and understand aggregate product usage; we do not intentionally include passwords or full chat messages in diagnostic events.
Location. If you choose “Use my location” and grant permission, the App uses your device location to select a nearby forecast region. This region selection happens on your device; we do not send those coordinates to our backend or save them to your account. The resulting region is sent for forecasts and surf guidance and may be saved with your preferences or conversation. You can also select a region manually and manage location permission in your device settings.
Reply recovery. We temporarily cache AI responses to recover interrupted connections without generating another answer. These caches are inaccessible for recovery after 10 minutes, cleared during subsequent chat traffic, and removed when the account is deleted.
Before your first AI chat, the App explains this data flow and asks for your permission. If you agree, your questions, relevant conversation context and summaries, saved surf preferences, and selected region are sent to OpenAI’s API to generate responses. Cancelling the consent step prevents that request from being sent.
Dictation sends your recording to OpenAI through our backend to create a transcript. Live voice streams microphone audio to OpenAI and uses relevant conversation context and surf preferences to respond. Spicoli does not save your microphone recordings in your account or chat history; transcripts may be saved as part of your conversation. For read-aloud, assistant text is sent to OpenAI to generate synthetic speech, which our backend may temporarily cache. These features require the applicable in-app consent and microphone permission. Provider processing and retention are subject to the provider's terms and settings.
AI output may be inaccurate and should not replace firsthand observation, lifeguard guidance, or your own judgment. We do not use your personal data to train our own general-purpose AI model.
We use service providers only as needed to operate Spicoli:
These providers process information under their own privacy terms. We do not sell your personal information and do not use your information for third-party targeted advertising.
We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes. Mobile information and SMS consent are not shared with affiliates for marketing or promotional purposes. Service providers may process this information only as needed to operate, secure, or support the messaging service.
SMS consent is optional and separate from phone verification, account creation, and subscription purchase. You can withdraw it in Profile → Manage SMS opt-in, or reply STOP to opt out or HELP for support. See the SMS Terms. Please do not send sensitive information by text.
We retain account data while your account is active and for only as long as reasonably necessary to provide the App, comply with law, resolve disputes, and protect the service. Operational logs and de-identified analytics may remain for a limited period according to provider retention settings.
You can permanently delete your account from Profile → Delete Account. This removes your profile, authentication account, saved conversations, messages, preferences, and registered push tokens. See our account-deletion instructions, or submit a request from our Privacy Choices page if you cannot access the App.
To prevent repeated free-question grants, we retain a protected fingerprint of your verified phone number, introductory-trial dates and usage, and your weekly allowance and reset schedule, and daily feature/audio usage after account deletion. These allowance records do not contain your phone number, account identifier, chat messages, or profile details. Signing up again with the same verified number resumes the remaining allowance; it does not restart the trial or refill the current week.
Account deletion also removes the SMS preferences and consent history stored in our application database. Messaging-provider records and opt-out suppression records may remain under the provider's retention policies or where necessary to honor opt-outs or legal obligations.
Deleting your Spicoli account does not cancel an Apple subscription. Manage or cancel it separately in your Apple Account settings. Apple, RevenueCat, and other service providers may retain transaction or operational records under their own retention policies.
We use encrypted network connections, secure authentication, on-device secure storage where appropriate, and database row-level access controls. No internet service can guarantee absolute security.
Spicoli is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Contact us if you believe a child has provided personal information.
Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, or object to certain processing. Submit a request through Privacy Choices. We may need to verify your identity.
We may update this policy as the App changes. We will post the updated date here and provide additional notice when required.
433 LLC
[email protected]