Privacy Policy

Effective July 22, 2026

433 LLC (“we,” “us,” or “our”) operates the Spicoli Surf Guide mobile application (“Spicoli” or the “App”). This policy explains what information we collect, why we use it, and the choices available to you.

1. Information We Collect

Account information. We collect your verified phone number, email address, securely hashed password, and optional display name when you create an account.

Preferences and content. If you create an account, we store your selected surf regions, notification preferences, chat conversations, and other settings so they remain available across sessions. Guest chats are not saved to an account and remain only in the App's current in-memory session.

Device and notification information. If you enable notifications, we store a push token and basic device/platform information needed to deliver and troubleshoot notifications.

Usage and diagnostic information. We may collect app lifecycle events, feature usage, error messages, stack traces, app version, device type, operating system, and a pseudonymous or account identifier through PostHog. We configure monitoring to diagnose reliability and understand aggregate product usage; we do not intentionally include passwords or full chat messages in diagnostic events.

Location. Spicoli does not currently collect or store precise GPS location. Region selections are entered manually. If a future feature requests device location, the App will ask permission first and this policy will be updated.

2. How We Use Information

3. Artificial Intelligence

Before your first AI chat, the App explains this data flow and asks for your permission. If you agree, your chat prompts, recent chat context, and selected surf region are sent to OpenAI’s API to generate responses. If you choose “Not Now,” the prompt is not sent. AI output may be inaccurate and should not replace firsthand observation, lifeguard guidance, or your own judgment. We do not use your personal data to train our own general-purpose AI model.

4. Service Providers

We use service providers only as needed to operate Spicoli:

These providers process information under their own privacy terms. We do not sell your personal information and do not use your information for third-party targeted advertising.

5. Retention and Deletion

We retain account data while your account is active and for only as long as reasonably necessary to provide the App, comply with law, resolve disputes, and protect the service. Operational logs and de-identified analytics may remain for a limited period according to provider retention settings.

You can permanently delete your account from Profile → Delete Account. This removes your profile, authentication account, saved conversations, messages, preferences, and registered push tokens. See our account-deletion instructions, or submit a request from our Privacy Choices page if you cannot access the App.

6. Security

We use encrypted network connections, secure authentication, on-device secure storage where appropriate, and database row-level access controls. No internet service can guarantee absolute security.

7. Children

Spicoli is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Contact us if you believe a child has provided personal information.

8. Your Rights

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, or object to certain processing. Submit a request through Privacy Choices. We may need to verify your identity.

9. Changes

We may update this policy as the App changes. We will post the updated date here and provide additional notice when required.

10. Contact

433 LLC
support@spicolisurf.com