Kompas — Privacy Policy
Last updated: 27 September 2026
Kompas is an app for sailors, their crews and their coaches to track how their sailing skills develop. Many of our users are between 11 and 18. We wrote this policy so that a sailor and their parent can both read it.
1. Who we are
Kompas is run by Dünya Cengiz, a sole proprietorship registered in Türkiye, Küçükbakkalköy Mah. Dereboyu Cad. R5 Blok No: 3A, Flat 48, Ataşehir, İstanbul, Türkiye. We are the data controller for the personal data described here.
Contact: dunyacengiz@gmail.com
2. What we collect, and why
| What | Why | Where it lives |
|---|---|---|
| Email address and password | To sign you in. The password is stored only as a secure hash by our database provider; we never see it | Server |
| First name, last initial | Shown to your coaches and squad-mates, so they know who you are | Server |
| Your boat class and position (e.g. helm, crew) | To show the right skills for your boat | Server |
| Scores, sessions and training notes | This is the app: how you rate your skills, when you sailed, in what wind, and what you wrote about it | Your phone first, then the server |
| Boats, sails, rig settings, kit and stock | Your equipment records | Your phone first, then the server |
| Plans, calendar entries, attendance | Training schedules you make or are invited to | Server |
| Squad and crew memberships | Who you train and race with | Server |
| Language and app preferences | So the app looks the way you set it | Your phone, and the server |
| Block and report records | To keep people safe | Server |
We do not ask for your date of birth, phone number, home address, photos, or contacts.
We do not have advertising, advertising trackers, or analytics services that follow you. We do not sell your data, and we never will.
Things your phone uses but we never receive
- Your location. Only if you allow it, and only while you are adding a sailing place, to sort the list by what is near you. Your location never leaves your phone and is never saved.
- The camera. Only to scan a squad's QR code to join it. Nothing is recorded or saved.
- Crash reports. If the app crashes, a report is saved on your phone. It is sent to us only if you choose to share it.
How we collect it, and on what legal basis
Your data is collected electronically through the mobile app: what you enter, and what the app records automatically as you use it. What we process, why, and on which legal basis (KVKK Art. 5/2; for users in the EU, GDPR Art. 6(1)):
| Purpose | Data | Legal basis |
|---|---|---|
| Creating your account and signing you in | Email, password, first name and last initial, language | (c) Performance of a contract · GDPR (b) |
| Providing the app: the wheel, session log, equipment, plans | Scores, sessions, notes, boat and equipment records, plans | (c) Performance of a contract · GDPR (b) |
| Sharing with the coaches of squads you join, and your crew | Scores; notes if you chose to share them | (c) Performance of a contract · GDPR (b). You choose what is shared |
| Writing to Google Calendar | Dates, times, places, session types | (c) Performance of a contract · GDPR (b); only if you connect it |
| Keeping the service safe and preventing misuse | Block and report records, technical logs (IP address) | (f) Legitimate interest · GDPR (f) |
| Legal obligations and possible disputes | The records these require | (ç) Legal obligation; (e) establishing, exercising or defending a right · GDPR (c), (f) |
We do not collect special categories of personal data (health, biometric data and the like).
3. Who can see your data
- You. Everything of yours.
- Coaches of a squad you joined. They see your scores. They also see your training notes if, when joining, you chose to share scores and notes. You choose this, not the coach. The moment you leave a squad, its coaches lose access.
- Your crew. People you race with in the app share one boat's scores and plans.
- Squad-mates. Your first name and last initial, and anything the squad shares, such as plans and attendance.
- Nobody else. Other users cannot see your scores. This is enforced by the database itself, not just by the app.
4. Services we use
| Service | What it does | What it receives |
|---|---|---|
| Supabase (servers in Frankfurt, Germany) | Our database and sign-in | Everything in §2 marked "Server" |
| Expo | Delivers app updates | Your device's IP address and app version |
| Open-Meteo | Wind forecasts | The rough location (about 1 km) of a sailing place, never of you, sent by our server |
| OpenStreetMap and unpkg | The map when you pick a sailing place | Your device's IP address, as with any web page |
| Google Calendar | Only if you connect it: puts your plans and sessions in your calendar | Dates, times, places and session types. Never scores, notes, or other people's names |
| Apple App Store / Google Play | Installing the app. Later, subscriptions | What those stores collect under their own policies |
Transfers outside Türkiye (KVKK Art. 9)
- Supabase: Your data is stored on the Frankfurt, Germany servers of Supabase, which processes it on our behalf. That is a transfer abroad.
- Expo, OpenStreetMap and unpkg: These receive only your device's IP address.
- Google Calendar: If you connect it, what you choose is sent to Google at your request. You confirm this when connecting, and can disconnect at any time.
5. How long we keep it
As long as you have an account. If you delete your account, everything of yours on our server is deleted with it: scores, sessions, notes, equipment, memberships and calendar entries. Backup copies held by our database provider are overwritten within 7 days.
You can also delete everything of yours for one boat without deleting the account: Me → Settings → Your boat, then remove it altogether.
Scores saved on your phone stay there until you delete the app.
6. Your rights
You can see, export, correct and delete your data:
- Export: Me → Settings → Privacy and account → Export my history.
- Delete: Me → Settings → Privacy and account → Delete my account. Or follow the steps at https://kompas-sailing.vercel.app/en/delete-account/.
- Anything else: email dunyacengiz@gmail.com.
Under Türkiye's Personal Data Protection Law (KVKK, Article 11), and for users in the EU under the GDPR, you also have the right to know whether your data is processed, to learn the purpose, to know who it is shared with, to object, and to complain to the data protection authority (KVKK Kurumu in Türkiye).
Send requests in writing to our address above, or by email to dunyacengiz@gmail.com from the address registered with us. We answer within 30 days, free of charge; if a request involves a separate cost, the Board's fee schedule may apply.
7. Children
Kompas is used by young sailors. We ask that a parent or guardian agrees before a child under 18 creates an account. We collect only what the app needs to work (§2), show no ads, and let no stranger see a child's scores. A parent who wants their child's data exported or deleted can email dunyacengiz@gmail.com.
8. Security
Data travels encrypted (HTTPS). Access to every record is checked by the database itself, so a bug in the app cannot show your scores to the wrong person.
9. Changes
If we change this policy in a way that matters, we will tell you in the app before it takes effect.