Clavys privacy policy

1. Who we are

Clavys is a mobile app for boat owners. Clavys is provided by Operiq (Marcello Valentini), Sydney, NSW, Australia ("Operiq", "we", "us").

We handle personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Contact for privacy questions, access or correction requests, and complaints: marcello@valentini.email

2. Clavys and the businesses you use

Clavys lets you keep your own boat records. It also connects you with marine service businesses that run on the Operiq platform, such as My Vessel.

When you use one of those businesses, that business holds its own records about you and your boat, such as quotes, job records, invoices and payments. It handles them under its own privacy obligations. We store and process those records for the business as its platform provider.

You hold one Operiq account. If you sign in to a business's website or portal with the same email, it is the same account.

3. What we collect

Name, email address, password (stored only as a one-way hash)

When: When you create an account

Why: To run your account and sign you in

Your Apple or Google account identifier, name and email (Apple may give a private relay address)

When: When you choose Sign in with Apple or Google

Why: To sign you in

Boat details, maintenance, documents, certificates, safety equipment, checklists, notes, trip logs, expenses and budgets

When: When you enter or upload them

Why: To give you the app's features

Photos and files

When: When you take or choose a photo, or attach a file

Why: To store them with your records and, if you ask, to read details from them (for example a receipt or a certificate)

Precise location

When: Only while the app is open, and only if you allow it

Why: To show local weather. If you start trip tracking, we also record your trip's route and start and end points in your logbook. The app works without location.

Messages to the AI assistant (First Mate), and any photo you attach

When: When you use the assistant

Why: To answer your question

Quotes, approvals, job updates, invoices and payments with a business you use

When: When that business sends them or you respond

Why: So you can see and act on them

We do not collect

Your contacts or microphone.
Advertising identifiers.
Analytics or crash-tracking data from the app.

Payments: card details are entered on Stripe's secure checkout page. They never pass through the Clavys app, and we do not store them.

4. How we use it

We use your information to:

provide and secure your account
show and keep your boat records
connect you with the businesses you choose
answer your AI assistant questions
send you service emails about your account, for example password resets
meet our legal obligations

We do not sell your personal information. We do not use it for advertising, and we do not track you across other apps or websites.

5. Who we share it with

The businesses you use

We share the information you choose to share with them, for example a quote approval.
We also share boat information you link to them.
A boat passport link you share can be opened by anyone who has the link until it expires or you revoke it.

Service providers who process data for us

Cloud hosting and file storage: Replit and Google Cloud.
AI: OpenAI, for assistant answers and for reading photos and documents. Anthropic, for some boat-details lookups.
Weather: WeatherAPI.com. It receives map coordinates only.
Payments: Stripe, for checkout.
Sign-in: Apple and Google, if you use them.
Email delivery: Amazon Web Services (Amazon SES) and the email accounts of the businesses you deal with.

Insurance partners

Your boat's condition card may show an insurance partner. If you tap it, Clavys records the referral in your account (the boat, the partner, your region and the boat's condition score) and then opens the insurer's website. Clavys does not send your boat or personal details to the insurer. Anything you enter on the insurer's website is covered by the insurer's own privacy policy.

Others

Only if the law requires it, or to protect someone's safety.

6. Overseas disclosure (APP 8)

Some of our service providers store or process data outside Australia, including in the United States. This includes OpenAI, Anthropic, Google Cloud, Stripe and WeatherAPI.com. We take reasonable steps to make sure they protect it consistently with the APPs.

7. Security (APP 11)

Data travels over encrypted connections (HTTPS).
Passwords are stored as hashes.
Access tokens expire, and you can lock the app with Face ID or your fingerprint.
No system is perfectly secure. If a data breach is likely to cause you serious harm, we will tell you and the OAIC as the Notifiable Data Breaches scheme requires.

8. How long we keep it

While your account is open: we keep your information.
When you delete your account: see section 9.
Records businesses must keep: businesses must keep tax and business records, such as invoices and payments, generally for 5 years under Australian law. Those records stay with the business for that time.

9. Deleting your account

How to delete

In the app, go to Profile, then Delete account, and type DELETE.
Or use the form at https://operiq.io/clavys/delete-account, or email marcello@valentini.email.

What happens

Your login is closed and you are signed out on every device.
Your password and your Apple or Google sign-in links are removed.
Your private notes, expense descriptions, receipt links, profile photo and app settings are cleared.
Passport links you shared stop working.

What businesses keep

The businesses you used keep the records the law requires, such as invoices, quotes, job records and payments. Your boats stay on their records so they can keep servicing them.

If you come back

If you sign in with Apple or Google again later, you start a fresh account.

10. Your rights (APP 12 and 13)

You can ask to see or correct the personal information we hold about you by emailing marcello@valentini.email. We will respond within 30 days.
You can correct most details yourself in the app.

11. Complaints

Contact us first at marcello@valentini.email. We will reply within 30 days.

If you are not satisfied, you can complain to the Office of the Australian Information Commissioner (OAIC): www.oaic.gov.au, phone 1300 363 992.

12. Children

Clavys is intended for adults (18+). We do not knowingly collect information from children.

13. Changes

We will update this policy when the app changes. If a change is significant, we will tell you in the app or by email.