Privacy Policy

1. Data we collect

• Account data — when you sign in with Google, we receive your name and email address and a user ID, via Google and our authentication provider.
• Profile data — your display name and your WhatsApp number, which you provide.
• Trip data — the break, date, and time of trips you post.
• Consent record — the version of these policies you accepted and when.

We do not collect payment information, and there are no seat or cost fields anywhere in the Service.

2. How we use it

To run the noticeboard: to show your posted trips and display name to other users, to let you sign in, to maintain your profile, and to keep the Service working and safe.

After a trip you posted has departed, we may send a single email to your account address asking how it went, so we can tell whether the board is helping surfers connect. Every such email includes a one-click unsubscribe link, and you can opt out at any time without affecting the rest of the Service.

3. Sharing your WhatsApp number

Your WhatsApp number is not shown publicly. It is released to another user only when there’s a clear intent to coordinate — i.e. when you message a surfer about their trip, or when someone messages you about yours — so the conversation can move to WhatsApp. Your display name and posted trips are visible to anyone browsing the Service. Please don’t post anything in your display name you don’t want to be public.

4. Legal basis & consent

We process your data on the basis of your consent, which you give when you accept these policies at sign-up, and as necessary to provide the Service you’ve asked for. You can withdraw consent by deleting your account (see below). Depending on where you live, laws such as the EU/UK GDPR or Indonesia’s Personal Data Protection Law may give you additional rights — see “Your rights”.

5. Service providers

We rely on a few processors to run the Service:

• Google — sign-in (you authenticate with your Google account).
• Supabase — database and authentication (stores your profile and trips).
• Vercel — application hosting.
• WhatsApp / Meta — when you choose to message, the conversation happens in WhatsApp under their own terms and privacy policy.

These providers process data on our behalf and may store it on servers outside your country.

6. Retention & deletion

We keep your data while your account is active. You can delete individual trips, or your entire account, from your profile at any time — deleting your account removes your profile and pulls all your trips off the board.

7. Your rights

Subject to your local law, you may have the right to access, correct, or delete your data, to withdraw consent, and to object to or restrict certain processing. You can exercise most of these directly in the app (edit your profile, delete trips, delete your account), or contact us using the details below.

8. Children

The Service is not intended for anyone under 18, and we don’t knowingly collect their data.

9. Changes

We may update this policy. Material changes will be reflected in the effective date, and we may ask you to accept the updated version.

10. Contact

For privacy questions or requests, contact support@jukung.com.