Updated 23rd February, 2026
This privacy policy outlines how nextSurf (“we”, “our”, “the App”) handles personal data, in compliance with Apple App Store Privacy Guidelines, the New Zealand Privacy Act 2020, and applicable privacy laws in the United States and Canada.
Data We Collect
We collect only minimal, non-identifiable data necessary for providing app functionality and performance. When you use the optional AI surf report feature, we also send the data described in AI-Powered Surf Reports (OpenAI) below to OpenAI, only with your permission.
Categories of Data Collected
| Data Type | Collected | Linked to User | Used for Tracking |
|---|---|---|---|
| Approximate Location | Yes | No | No |
| Usage Data (App interactions) | Yes | No | No |
| Purchase History | Yes | No | No |
| Diagnostics (Crash logs) | Yes* | No | No |
| Surf spot details & custom info (AI report feature only) | Yes** | No | No |
** Only if enabled via iOS system settings
** Only when you use the AI surf report feature and have given permission; see “AI-Powered Surf Reports (OpenAI)” below.
Location Data
nextSurf may request access to your device’s approximate location to:
- Suggest nearby tide stations
- Load default forecasts for your area
This location data:
- Is used in real time only (not stored)
- Is not linked to your identity
- Can be disabled in iOS Settings
In-App Purchases & Subscriptions
We use Apple’s StoreKit to manage in-app purchases. We do not collect, process, or store any personal billing or payment data. All transactions are managed through your Apple ID and the App Store.
Usage & Performance Data
We may collect anonymised usage data to improve the app, such as:
- Tab interactions
- Time spent in app
- Feature engagement
We do not use third-party analytics SDKs (e.g. Google Analytics, Firebase). Any diagnostic or crash data is collected by Apple and shared with us only if you opt in.
Third-Party APIs
To deliver tide, ocean, and weather forecasts, the App uses third-party APIs, including:
- NIWA
- MetOcean
- Stormglass
- WillyWeather
- WorldTides
We do not transmit personally identifiable information to these services.
For our AI surf report feature, we send the data described in AI-Powered Surf Reports (OpenAI) below to OpenAI, only with your permission.
AI-Powered Surf Reports (OpenAI)
nextSurf can generate written surf reports using an optional feature that sends data to OpenAI (https://openai.com) so their AI can produce a surfer-friendly report.
What data is sent to OpenAI
When you use the AI surf report feature, the app sends the following to OpenAI’s API:
- Surf spot details: The name, address, and coordinates (latitude/longitude) of the spot you have selected.
- Custom information: Any notes or description you have added for that surf spot in the app (“Location Info” / custom spot details).
- Forecast data: Non-identifiable weather, ocean, tide, and surf data (e.g. wave height, period, wind, tides) used only to generate the report.
- Technical context: Device type, operating system version, and app version (to help format the report correctly).
We do not send your name, email, Apple ID, or any other account identifiers to OpenAI.
We do not sell personal information. Data sent to OpenAI is used only to generate your surf report and is not used for advertising or profiling.
Who receives this data
This data is sent to OpenAI (OpenAI, L.L.C. / OpenAI Opco, LLC) via their API. OpenAI’s use of data is governed by their Privacy Policy and API usage policies. We do not control how OpenAI stores or processes data once it is sent; we rely on OpenAI to provide the same or equivalent protection for this data as described in their policies.
How we collect this data
- Surf spot and coordinates: From the spot you select in the app (built-in or saved locations).
- Custom spot information: From any text you voluntarily add to a surf spot in the app.
- Forecast data: Generated by the app from the same third-party weather/ocean APIs we use for forecasts (see “Third-Party APIs” above).
How this data is used
The data is used only to generate your personalised surf report. It is sent to OpenAI solely for that purpose.
Your choice and permission
The AI surf report feature is optional. We only send data to OpenAI after you have been informed and have agreed. The app explains what data is sent and asks for your permission before sending any data to OpenAI (e.g. when you first use the feature or in a clear consent step). You can choose not to use the AI report feature and still use all other app features. You can also revoke consent at any time in the app’s Settings.
Data Linking & Tracking
We do not link any collected data to your identity.
We do not track you across other apps or websites.
Your Privacy Choices
You may:
- Disable location access in iOS Settings
- Use the app without granting location (it will default to a saved or fallback tide spot)
- Opt out of Apple sharing diagnostics data with us
- Choose not to use the AI surf report feature (no data is then sent to OpenAI)
- Revoke AI surf report consent at any time in the app’s Settings
We do not offer user accounts or collect names, emails, or personal identifiers.
Privacy Rights for US Users
If you are in the United States (including California and other states with privacy laws):
- Categories of data: We collect and use the categories of data described in this policy, including approximate location, usage data, purchase history, and (when you use the AI report feature) surf spot details, custom spot information, and forecast data sent to OpenAI.
- We do not sell your personal information.
- We do not share your personal information for cross-context behavioral advertising. Data is sent to OpenAI only to generate the AI surf report, with your permission.
- You may have the right to know what we collect and how it is used, delete your data, correct inaccuracies, and opt-out of sale or certain sharing. To exercise these rights, contact us at the email below. We will not discriminate against you for exercising your privacy rights.
Privacy Rights for Canadian Users
If you are in Canada:
- You have the right to access the personal information we hold about you, correct inaccuracies, and withdraw consent (for example, by not using the AI surf report feature or revoking consent in the app’s Settings).
- Data sent to OpenAI may be processed in the United States. We take steps so that this data is protected in a manner consistent with applicable Canadian privacy law (including contracts and OpenAI’s privacy policy).
- To exercise your rights or ask questions, contact us at the email below. You may also have the right to complain to your provincial or federal privacy commissioner.
Contact Us
If you have questions, want to exercise your privacy rights, or have requests related to your privacy, contact us at:
Email: apps@rocketdata.co.nz
Website: https://www.rocketdata.co.nz
Surf smart. Know before you go.
– The nextSurf Team