Privacy policy

Nimexi Oy · 5 October 2026 · Version 0.2

1. Who we are

Regatta is a friendly sailing companion for the Finnish coast and archipelago. It shows your boat on a map, helps you plan a trip, keeps a log, and lets a crew talk to each other.

The organisation responsible for your personal data (the controller) is:

• Nimexi Oy
• Business ID (Y-tunnus): 2867099-7
• Sammatintie 6-8 I 74, 00550 Helsinki, Finland
• Privacy email: privacy@nimexi.com

In this policy, “we”, “us” and “Regatta” mean Nimexi Oy. “You” means the person using the app.

We have not appointed a data protection officer. That is normal for a small app. If we appoint one later, we will put the contact here.

2. The short version

We need a few things to make the app work. We do not sell your data. We do not show ads. We do not build an advertising profile of you.

• An account needs a name and an email, so boats, trips and chat stay yours.
• The map needs your phone’s location while you are using the plotter or recording a sail.
• A saved trip, a track and a logbook page stay on your account until you delete them.
• Crew on a trip can see that trip and its chat. They cannot see your other boats or private messages.
• Weather is fetched from Open-Meteo and the Finnish Meteorological Institute. They see a place and a time, not your name.
• Map pictures come from OpenStreetMap and OpenSeaMap. Those servers see the chart patch and the phone’s internet address, not your account.
• Accounts, trips and tracks are stored on a server in Finland.
• You can turn location off, export a track, and delete your account in the app. A backup may keep a deleted account for up to 30 days.

3. What Regatta is, and is not

Regatta is a planning and log companion. It is not an official nautical chart and it is not a substitute for a proper chart, a lookout, or good seamanship.

The app is not an emergency service. It does not contact the coast guard for you. If you are in danger, use the phone, VHF, or the normal distress channels.

Harbour cards, paid service pins, public harbour chat, voice calls to nearby boats, and a crew-finder are not in this first version. If we add them, we will update this policy before they go live.

4. Information we collect

Account

• Name or skipper name, email address, and a password or sign-in token.
• The language you use (Finnish, Swedish, English or French), and settings such as knots or metres per second.
• The date you joined, and the date you last signed in.

You can use the map as a guest before you make an account. A guest track stays on the phone until you save it to an account or clear the app.

Boat and trip

• Boat name, type, and anything else you type on the boat form (length, draft, fuel, sail number, home harbour). A boat is optional.
• Trip name, start, destination, planned leave time, waypoints, and the crew you add.
• Who created the trip. That person is the skipper. Only the skipper can hand the trip to a new skipper.

Location, track and logbook

• Latitude and longitude from the phone, while the map is open or a recording is on.
• Speed over ground, course, and the progress numbers we calculate from that (including VMG).
• The track of a sail, start and arrival time, distance, and the logbook page you save.
• Weather notes stored on that log page, and engine hours if you type them in. We do not read the engine.

We do not ask for your contacts, photos, microphone or health data in this version. If a later version asks, the phone will ask first, and this policy will say why.

Chat

• Messages in a trip’s crew chat, and direct messages between two accounts.
• The time of a message, and who sent it.

Chat is for the people on that trip, or the two people in a direct message. We do not read chat to sell anything. We may look at a message if someone reports abuse, or if the law requires it.

Phone and support

• App version, phone type, and language, so we can fix a fault you report to us.
• Emails you send to us.

This version has no advertising tracker, no usage-analytics kit, and no crash-report tool. We do not collect an advertising identifier. If we add a tool like that later, we will name it here and, where the law asks, ask you first.

5. Why we use it

European law asks us to name a reason for each use. The reasons below are the ones we rely on.

“Legitimate interest” means we have a real reason, and it is not outweighed by your privacy. You can ask us to explain that balance.

We do not make automated decisions that have a legal effect on you. VMG and ETA are sailing sums, not a score about you.

6. Location, tracks and the logbook

Location is the sensitive part of a sailing app. A track can show where you keep the boat, where you were overnight, and who was with you.

• The phone asks before we read location. You can allow it only while the app is open.
• We use location to put the boat on the chart, to measure speed and course, and to see when a waypoint is passed.
• A recording is on only when you start it, or when you activate a trip. Stopping the trip stops the new points.
• A saved track and log page belong to the skipper’s account. Other sailors do not see them.
• Crew you invite can see the trip they were invited to, including its route. They do not see your other trips.
• Background location, if we add it later so a recording can continue with the screen off, will be a separate phone permission. We will not turn that on quietly.

We do not sell tracks. We do not publish a live map of private boats. A public AIS layer, if we add one, is commercial ship data from Fintraffic. It is not your weekend boat, and it is not a collision alarm.

7. Boats, trips, crew and chat

The person who adds a boat is its skipper on that account. The person who creates a trip is its skipper. Only they can name a new skipper.

A sailor sees their own boats and their own trips. A crew member sees a trip only after an invite. Direct messages are visible to the two people in that conversation.

If you type another person’s name into a crew list, you should tell them. We only need the name they use in the app, or the email you use to invite them. Do not put their home address, identity number, or health notes in the log.

An unused crew invite expires after 30 days. You can cancel it sooner.

You can delete a trip, a track, or a message you sent. A message already delivered may remain on the other person’s phone until they delete it. Deleting your account removes your copy on our server after the 30-day backup window in section 11.

8. Weather, maps and public sea data

Some pictures and numbers come from outside Regatta. We send only what that service needs. We do not send your name, email or chat.

• Open-Meteo, run by OpenMeteo GmbH, Hintere Schilligmatte 6, 6463 Bürglen, Switzerland, for forecast wind and waves. We send the waypoint position and the time we need. They say they keep server logs, which can include coordinates, for up to 90 days, and that they do not sell them. Switzerland is treated as safe for European data.
• The Finnish Meteorological Institute (Ilmatieteen laitos), in Finland, for a Finnish forecast. The request is a place and a time.
• OpenStreetMap and OpenSeaMap map tiles. The tile server sees which patch of chart the phone asked for, and the phone’s internet address. That can give a rough area, not your account name.
• Finnish open data for fairways and marks: Väylävirasto, Traficom, the National Land Survey (Maanmittauslaitos), and Fintraffic fault or AIS feeds. We prefer to cache these. Your account is not sent with the download.

Chart data can be wrong or old. Regatta is not an official chart. Depth numbers, where shown, are fairway design depths, not a full survey.

9. Who else sees your data

We do not sell personal data. We do not rent lists. We share it only like this:

• People you invite onto a trip, for that trip and its chat.
• The person you send a direct message to.
• The company that hosts our database on a server in Finland. It may only process data on Nimexi Oy’s instructions. We will name that host here if you ask.
• Open-Meteo and the Finnish Meteorological Institute, as described in section 8.
• The map tile service, as described in section 8.
• Apple or Google, because you installed the app from their store. Their own privacy rules cover the store account and payments. Regatta does not sell anything inside the app in this version.
• A lawyer, insurer, or authority, if we have a real legal need.

Marina owners and service owners are not a separate live role in this version. If a place is later registered in the app, the public card shows only what that owner chose to publish.

10. Countries outside Finland

Accounts, trips, tracks and chat are stored on a server in Finland.

Open-Meteo is in Switzerland. The European Commission has decided Switzerland protects personal data at an adequate level, so that transfer does not need extra paperwork. The Finnish Meteorological Institute stays in Finland.

Map tile servers can sit outside the EU. If a request leaves the EEA and there is no adequacy decision, we use the European Commission’s standard contract clauses, or we only send data that is not personal. We will name any new outside service here before we rely on it.

We do not move your track to the United States for advertising. This version has no advertising tracker and no crash-report tool.

11. How long we keep it

• Account details: until you delete the account, then up to 30 days in backups, unless we must keep a record longer for a legal claim.
• Boats, trips, tracks and log pages: until you delete them, or until the account is deleted. Then the same 30-day backup window.
• Chat: until you or the skipper deletes the trip, or you delete the account. A direct message is deleted for you when you delete it. The other person keeps their copy unless they delete it too.
• Invite emails: until the invite is accepted, refused, cancelled, or 30 days have passed unused.
• Server security logs: 90 days.
• Support emails: up to 24 months after the last reply, then deleted.

We do not keep crash reports, because this version does not send them.

Guest data on the phone stays until you delete the app or clear its storage. We cannot delete that for you.

12. Your rights

If you are in Finland or the rest of the EEA, you can:

• Ask for a copy of the personal data we hold about you.
• Ask us to correct something that is wrong.
• Ask us to delete it. You can also delete the account in the app, under Settings.
• Ask us to limit use while a correction or objection is checked.
• Ask for your trips and tracks in a common file (GPX or a simple export) and move them elsewhere. Settings also has Download my tracks.
• Object to a use based on legitimate interest.
• Withdraw consent at any time. That does not undo use that already happened. Location permission is withdrawn in the phone settings.

Write to privacy@nimexi.com, or post to Nimexi Oy, Sammatintie 6-8 I 74, 00550 Helsinki, Finland. We may ask you to prove it is your account before we send a copy. We reply within one month. If a request is very large, we may take up to three months and we will tell you.

You can also complain to the Finnish authority:

• Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto)
• P.O. Box 800, FI-00531 Helsinki, Finland
• tietosuoja@om.fi · tietosuoja.fi

You can go to them first. You do not have to complain to us before you complain to them.

13. Children

Regatta is not made for children. In Finland, a child can consent to an app like this from the age of 13. Under 13, a parent or guardian has to agree and should be the account holder.

If we learn that we have an account for a child under 13 without a parent’s agreement, we will delete it. Write to privacy@nimexi.com if this has happened.

14. Security

We keep accounts separate. One sailor must not be able to open another sailor’s boats, trips or tracks. Crew see only the trip they were invited to. This rule is enforced on the server, not only on the phone.

Passwords are stored scrambled. The connection to our server uses encryption (HTTPS). No method is perfect. Please use a unique password and tell us if you think someone else has signed in.

Do not put emergency contacts, identity numbers, or medical details in the log or the chat.

15. Changes to this policy

If we change what we collect or why, we will update the date at the top and show a short note in the app before the change applies. A small wording fix may go up without a popup.

If a change needs consent, we will ask. Keeping the app installed after we have told you about a smaller change means the new text applies from the date we stated.

16. Agreeing to this policy

When you create an account, you confirm that you have been able to read this policy. The signup screen will link to it. The box is not pre-ticked.

Using the map as a guest means you accept the parts that apply on the phone: location if you allow it, map tiles, and weather if you open it.

This policy explains privacy. It is not the full rulebook for using Regatta. A separate short terms-of-use note can cover acceptable use, the “not an official chart” warning, and who owns the log you write.