Privacy Policy

Last updated: June 2025

This Privacy Policy describes how Amba Logbook ("I," "me," or "my") collects, uses, and shares your personal information when you use the Amba Logbook service (the "Service"). This service is operated by an individual developer.

1. Information We Collect

Personal Information You Provide

  • Account Information: Username (required), email address (optional), full name (optional), and password
  • Navigation Data: Route information including titles, start/end locations, vessel name and type
  • Waypoint Data: GPS coordinates (latitude/longitude), timestamps, course over ground, speed over ground, log distance
  • Weather Information: Wind speed and direction, sea state, visibility, precipitation, atmospheric pressure
  • Technical Data: Engine hours, navigation messages and notes
  • Images: Photos you upload in connection with your logbook entries
  • Communication Data: Messages and feedback you send to us

Information We Collect Automatically

  • Request Logs: Complete HTTP requests and responses, including IP addresses, request headers, and API calls
  • Authentication Data: JWT tokens, refresh tokens, and one-time passwords (OTP) for security
  • System Data: Timestamps, request IDs, and system-generated identifiers
  • Technical Information: Browser type, operating system, and device information

2. How We Use Your Information

I use the information I collect to:

  • Provide and maintain the maritime logbook service
  • Store and manage your navigation routes and waypoint data
  • Process and store your uploaded images
  • Authenticate your account and provide secure access
  • Send one-time password (OTP) codes via email for security verification
  • Respond to your support requests and provide technical assistance
  • Monitor system performance and troubleshoot technical issues
  • Ensure the security and integrity of the Service
  • Comply with legal obligations
  • Improve the Service based on usage patterns and feedback

3. How I Share Your Information

I may share your information in the following limited circumstances:

  • Email Service Provider: Your email address is shared with Yandex Mail service only to send OTP verification codes
  • Legal Requirements: When required by law or to protect the rights and safety of users
  • Consent: With your explicit consent for specific purposes
  • Technical Support: Anonymized data may be shared with technical service providers for system maintenance

I do not sell, rent, or trade your personal information to third parties for marketing purposes. Your navigation data, GPS coordinates, and logbook entries are never shared with third parties except as described above.

4. Data Security

I implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes secure password hashing, JWT token authentication, and encrypted data transmission. However, no internet transmission is completely secure, and I cannot guarantee absolute security.

5. Your Rights and Choices

You have the following rights regarding your personal information:

  • Access: Request a copy of the personal information we hold about you
  • Correction: Request correction of inaccurate or incomplete information
  • Deletion: Request deletion of your personal information (subject to certain exceptions)
  • Portability: Request a copy of your data in a structured, machine-readable format
  • Opt-out: Unsubscribe from marketing communications
  • Account Settings: Update your account information and privacy preferences

6. Maritime Logbook Data

This Service is specifically designed for maritime navigation and logbook keeping. Your GPS coordinates, route data, and navigation information are stored to provide you with a comprehensive electronic logbook. This data may include sensitive location information and should be considered when deciding what information to include in your logbook entries.

7. Authentication and Session Management

The Service uses JWT tokens for authentication and session management. No tracking cookies are used for marketing or analytics purposes. Session tokens are used solely for maintaining your login state and securing API access.

8. Third-Party Services

The Service integrates with Yandex Mail for sending OTP verification emails. I am not responsible for the privacy practices of Yandex. I encourage you to review their privacy policy.

9. Children's Privacy

This Service is not intended for children under 13 years of age. I do not knowingly collect personal information from children under 13. If I learn that I have collected such information, I will take steps to delete it promptly.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. I ensure appropriate safeguards are in place to protect your personal information during such transfers.

11. Retention of Information

I retain your personal information for as long as necessary to provide the Service and fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. You may delete your account and associated data at any time.

12. Changes to This Privacy Policy

I may update this Privacy Policy from time to time. I will notify users of any material changes by posting the updated policy on the website and updating the "Last updated" date. Your continued use of the Service after any changes constitutes acceptance of the updated Privacy Policy.

13. Contact Me

If you have any questions about this Privacy Policy or my privacy practices, please contact me at:

  • Email: musukvl@gmail.com

14. Additional Rights for EU Residents

If you are located in the European Union, you have additional rights under the General Data Protection Regulation (GDPR), including:

  • The right to object to processing of your personal information
  • The right to restrict processing of your personal information
  • The right to file a complaint with a supervisory authority

15. Additional Rights for California Residents

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information I collect and the right to delete your personal information.