Privacy Policy

1. Data controller

PlaYa! is a free mobile application developed independently. For any privacy-related inquiries, you can contact us at hola@playaya.xyz.

2. Data we collect

PlaYa! works without user accounts: there is no registration, no login required, and we do not collect your name, email address, phone number, usage data, or diagnostic information.

The only data that may leave your device are: (a) your location, only if you enable it (see section 3); and (b) if you turn on beach alerts, an anonymous device identifier (a UUID generated within the app), together with a push notification token, the beaches you have subscribed to, and your language. This identifier is not linked to your name, email, or any account, and is not used to track you or for advertising.

You can review and delete this data at any time from our Data Deletion page or by writing to hola@playaya.xyz.

3. Use of location

The application may request permission to access your location. This permission is completely optional and is only activated when you choose to enable it. Your location is used mainly on your own device to sort beaches by proximity; that calculation never leaves your phone.

If you check the weather for your current position, your coordinate is sent to our server for the sole purpose of fetching the forecast for that area. It is rounded to a grid of about 5.5 km for the query, used only for that request (we do not store it), and is never shared with third parties or linked to your identity. When you close the app or disable location, the data is removed from device memory.

4. Local storage

PlaYa! stores certain information locally on your device to improve the experience:

• Custom alerts: the alert conditions you configure for your favorite beaches.
• Notifications: the history of generated notifications, which are automatically deleted after 7 days.
• Dismissed weather alerts: the warnings you have marked as read.

Read notifications and dismissed weather alerts reside solely on your device. The beach alerts you configure are stored on your device and, if you enable push notifications, are also synced to our server so we can notify you when conditions are met (see section 2). You can delete all local data by uninstalling the application.

5. Third-party services

PlaYa! uses the following external services to obtain weather and cartographic data:

• Open-Meteo: open-source weather data. No account or API key required. Does not track users.
• AEMET (Spanish Meteorological Agency): official government weather data and alerts.
• Government of the Canary Islands: regional weather alerts.
• MapLibre / OpenStreetMap: map rendering. Does not track users.

These external services do not receive your name, your device identifier, or any information that identifies you. For the forecast of your current position, Open-Meteo receives only a rounded coordinate (~5.5 km), never your exact location. Beach weather lookups use only each beach's public coordinates.

6. Cookies and analytics

The PlaYa! mobile app does not use cookies or any form of tracking, and includes no analytics SDK (no Firebase Analytics, no Google Analytics, or similar). If you enable push notifications, on Android they are delivered through Google's Firebase Cloud Messaging (FCM), which acts solely as the technical transport for the message: it processes your device token and notification content only to deliver it to you, never to track you or for advertising.

The playaya.xyz website uses Vercel Web Analytics, a cookieless solution with no personal identifiers that only measures aggregated visit counts, pageviews, and download-button clicks. No information that could identify you is stored, and no data is shared with third parties. GDPR-compliant without requiring cookie consent.

7. GDPR compliance

PlaYa! processes a minimal amount of data (an anonymous device identifier and, if you enable them, your location and your alerts) for the sole purpose of providing the service, in compliance with the European Union's General Data Protection Regulation (GDPR). We do not build profiles, show advertising, or sell data. You can exercise your rights of access and erasure by writing to hola@playaya.xyz or from our Data Deletion page.

If this policy is modified in the future, we will update this page and indicate the new date of the update.

8. Applicable law

This privacy policy is governed by Spanish law and the General Data Protection Regulation (EU) 2016/679.

9. Contact

For any questions about this privacy policy, write to hola@playaya.xyz.