Privacy Policy & Cookie Notice

Swimmer AI (swimmerai.moisisv.com) is an AI-powered coastal conditions reference tool. References to "we", "us", or "our" in this policy refer to the Swimmer AI service and its operators.

When you use Swimmer AI, the following data may be processed:

• IP address — collected server-side for rate-limiting only; not stored permanently.
• GPS coordinates / location — only when you click 'Use my location'; used solely to fetch wave data for that point; not stored.
• Usage analytics — aggregate, anonymous app performance data via AnoSys AI.
• Cookie consent preference — stored in your browser's localStorage only.
• Terms agreement timestamp — stored in your browser's localStorage only.
• Last searched map position & search history — stored 100% locally in your browser's localStorage for up to 7 days (only if cookies/preferences are accepted) to prepopulate your map and provide convenient history. Never sent to external servers.
• Interface preferences (Language & Dark/Light mode) — stored locally in your browser's localStorage (even with basic/essential cookies) to remember your chosen theme and language.

We use privacy-friendly analytics to measure app usage and performance:

We process data under the following legal bases per GDPR Article 6:

• Legitimate interest (Art. 6(1)(f)) — IP-based rate limiting to protect API availability, and aggregate essential telemetry.
• Consent (Art. 6(1)(a)) — analytics cookies, active only when you click 'Accept All'.

The following services process data on our behalf:

• AnoSys AI — analytics provider (anosys.ai)
• Open-Meteo — marine weather forecasts; no personal data is sent.
• Meteo.gr — live weather data; no personal data is sent.
• Vercel — hosting; may process server request logs including IP addresses per their privacy policy.

Under GDPR you have the right to: access, rectify, erase, restrict, or port your data; withdraw consent at any time (use 'Essential Only' in the cookie banner); and lodge a complaint with your supervisory authority (e.g., Hellenic DPA — dpa.gr for Greek residents).

IP addresses used for rate limiting are not persisted beyond the request cycle. Cookie consent preferences are stored in localStorage for 1 year (accepted) or 1 day (declined), then cleared automatically. Local search history is retained for up to 7 days, after which it is automatically cleared on load. Analytics data retained by AnoSys is subject to their retention policies.

For any privacy-related enquiries or to exercise your rights, contact us at: swimmeraiapp@gmail.com