Last updated: Apr 28, 2026

At Surfr B.V. (“Surfr”, “we”, “our” or “us”), we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and protect personal information of users (“you”, “your”) who use the Surfr mobile app and web services (collectively, the “Services”), including the associated online shop.

1. Information We Collect

Account and Profile Information

When you create a Surfr account, we collect the following information:

• Required: First and last name, email address

• Optional: gender, date of birth, nationality, profile picture, home spot, weight

In addition, you can complete your Surfr Profile by adding more information:

• Optional: Profile banner image, username, language, leaderboard preference, preferred spot, skill level, minimum jump height, preferred units (metric/imperial), social media handles (Instagram, Facebook), gear details (e.g., kites size and brand used).

Some profile fields are essential for app functionality (e.g. gender for leaderboard grouping), while others are optional to enhance personalization.

Session and Device Data

When you use Surfr to track a session, we collect certain information from your device. This includes:

• GPS location data – We collect your real-time and recorded location data to map your sessions and support features like Live tracking. We only access this data if you’ve granted permission on your device (iOS, Android, watchOS, Wear OS, Garmin).

• Health and fitness data – With your explicit consent, we may access health and fitness data from connected apps or services (such as Apple Health or Google Fit), including heart rate and, where available, body-related metrics such as weight. We use this data to provide performance insights during your sessions (such as heart rate zones) and to enhance your experience within the Services.

  You can choose whether to connect these services and can withdraw your consent at any time through your device or app settings. If you revoke access, we will no longer collect new health data from these sources.

• Sensor data (accelerometer and gyroscope) – We use motion sensor data during your sessions to detect jumps and improve measurement accuracy. Depending on your device and integrations, this data may be processed locally on your device or included as part of session data that is uploaded to our systems. Retention of such data is described in Section 6 (Data Retention).

• Jump metrics and session statistics – We collect performance data such as jump height, airtime, and speed to help analyze and improve your sessions.

• Device settings and system data – We collect limited device information (e.g. version type, calibrated, device information) in order to provide better support.

• Connected devices and integrations (e.g. Garmin) – If you connect third-party devices or services such as Garmin, we may receive activity and session data generated by those devices. The data we receive depends on the mode you use, the device, your settings, and the permissions you grant. For Surfr AI mode, we may receive sensor data, such as accelerometer and gyroscope data, together with activity and session data. This may include GPS location data, performance metrics, timestamps, device information, and device-generated activity data, such as data contained in activity files. For Surfr Light mode, we do not receive sensor data. We may receive GPS location data, jump statistics, timestamps, and device information needed to import, display, and analyze your session.

  We use data received from connected devices to import and display your sessions, calculate performance metrics, and provide insights within the Services.

  Data received from connected devices is treated as session data and retained in accordance with Section 6 (Data Retention).

Content You Upload

You may choose to upload: Profile pictures, session photos, comments, likes, spot reviews and spot requests. These are shared with other users only if you choose to publish them.

E-commerce Information

When placing orders in our shop, we collect: Name, shipping address, and email.
We do not store payment information. Payments are processed by Stripe, and shipping is handled by Sendcloud.

2. How We Use Your Information

We process your personal data only when there is a lawful basis to do so under the GDPR and we use it in the following ways:

To Provide and Improve the Services

We use your data to operate, personalize, and improve our app. This includes:

• Recording and analyzing your sessions: We use GPS, accelerometer, and other sensor data to measure performance metrics such as jump height, airtime, distance, and speed. This helps you track your progression and analyze past efforts.

• In-App and Public Leaderboards: Your session data – including profile name, profile picture, and performance metrics (e.g., jump height) – may be used to create and display rankings in the app and on digital displays or webpages showcasing top-performing users (e.g., by gender, discipline, or spot). If you do not wish to appear in public leaderboards, you can opt out at any time in the app: Profile > Settings > Privacy > Leaderboard Visibility.

• Improving Live activity and safety features: We use real-time location and session data to support safety features, live map features, display activity at spots, and associate sessions with specific locations. Your activity may be visible to other users depending on your Location Visibility settings. You can change these settings at any time in the app: Profile > Settings > Privacy > Location Visibility

To Power Community and Social Features

Surfr is built to support a passionate community of water sports athletes. We use your information to:

• Enable interaction with other users: You can follow others, view their sessions, like their activity, and comment (depending on your privacy settings).

• Make profiles and sessions discoverable: Others may see your profile name, photo, and PR stats (e.g. highest jump) and (live) sessions in the Sessions and Live overview. By default, your profile is public. If you wish your profile and sessions to be private, you can change this at any time in the app: Profile > Settings > Privacy > Profile.

• Share user-generated content: Photos, reviews, and session media that you choose to publish can be seen by other users and may appear on spot pages in and outside of the app. Photos submitted to sessions may also be selected and used as spot images to illustrate locations. To help protect privacy, Surfr applies automated filtering intended to detect and exclude images containing recognizable faces before such photos are used on spot pages.

• Display leaderboard data on public spot dashboards and the Surfr Discover webpage: We may showcase leaderboards on public digital displays and on our public Discover webpage. These displays may include your username, profile photo, performance metrics, and session location. You can control whether you appear in these rankings via: Profile > Settings > Privacy > Leaderboard Visibility.

To Support Communications and Customer Service

We use your information to:

• Send out notifications about sessions, such as whenever you start or end a session.

• Send service communications, such as login codes and send newsletters.

• Respond to support requests, including troubleshooting or technical assistance.

• Send marketing communications (e.g., product updates or promotional offers). You can opt out at any time.

To Fulfill Orders in the Surfr Shop

When you place an order via our online shop, we process your personal data to:

• Handle order confirmation, shipping, and customer support;

• Work with third parties like Stripe (payment processing) and Sendcloud (logistics).

We do not store your payment details.

To Analyze, Research, and Improve the Services

We use aggregated and anonymized data to:

• Understand feature usage;

• Improve app performance and stability;

• Develop new features and insights;

• Train algorithms (e.g., for jump detection accuracy).

This supports continuous improvement and innovation, in line with data minimization principles.

3. How we Share your Information

Surfr does not sell or commercially share your personal data.

We only share personal data where necessary to provide, secure, operate, or improve the Services. Depending on how you use the Services, we may share personal data with the following categories of recipients:

• Hosting, infrastructure, and data storage providers, to operate and secure the Services.

• Payment service providers, to process payments in the Surfr shop.

• Shipping and logistics providers, to handle shipping, customs, and delivery.

• Device, platform, and connected service providers, where you choose to connect or use integrations such as wearable devices, health apps, app stores, or subscription platforms.

• Communication providers, to send service messages, login codes, push notifications, and newsletters.

• Analytics, crash reporting, and diagnostics providers, to understand app performance, troubleshoot issues, improve reliability, and detect errors.

• Customer support, IT, and security service providers, to respond to support requests, maintain the Services, and protect our systems.

We require service providers to process personal data only where necessary for the relevant service and, where applicable, in accordance with our instructions, confidentiality obligations, and appropriate security measures.

Where personal data is transferred outside the European Economic Area, we use appropriate safeguards, such as adequacy decisions, Standard Contractual Clauses, or other lawful transfer mechanisms.

Publicly Available Information

By default, certain parts of your Surfr profile and session data may be visible to other users and, in some cases, to the general public. When you create an account and begin using the Surfr app, the following data may be public unless you adjust your privacy settings:

• Your username, profile picture, and selected profile details (e.g., nationality, preferred discipline)

• Session location and associated spot

• Session statistics, such as jump height, speed, airtime, and distance

• Uploaded content, such as photos, reviews, and spot information you choose to publish

This information may appear:

• In the app (e.g., discover, leaderboards, spot pages)

• On Surfr managed website (e.g., Discover)

• On public digital displays at affiliated surf locations (e.g., Spot Dashboards)

• In search engine results, where technically possible

Once information is made public, it may be accessed, shared, copied, cached, or indexed by other users or third parties. Changes to your privacy settings or deletion of content within Surfr may not immediately remove copies from search engines, external platforms, or systems outside our control.

4. Privacy Controls and Visibility Settings

Surfr provides a range of privacy settings to help you manage how your personal data and session information are shared. These settings are available to all users, regardless of their geographic location.

You can adjust your privacy preferences directly in the app: Profile > Settings > Privacy

The available options include:

• Profile visibility: Choose whether your profile is visible to everyone or followers only (via follow requests).

• Location visibility: Control how your location and activity appear to other users during an active session.

Location visibility settings determine how your presence is displayed on the live map. Depending on your selected settings, other users may see:

• Your exact live location together with your profile identity

• Your presence associated with a spot rather than your precise location

• An anonymous presence that contributes to spot activity indicators without revealing your identity

Location visibility settings may allow you to configure how your activity appears to:

1. Users connected as Friends, meaning users you follow and who also follow you back

2. Other users of the application

You remain in control of how your activity appears to others while using the Services. Privacy settings can be changed at any time within the application.

• Leaderboard participation: Opt in or out of public leaderboards within the app and across digital displays.

5. Your Rights and Choices

You have full control over your data and can:

• View, update, or delete your profile data at any time via the app

• Revoke location permissions or disable GPS tracking

• Remove uploaded content

• Request a full data export or account deletion by contacting [[email protected]]

• Disable social media integrations at any time

You also have rights under GDPR, including:

• Right to access

• Right to correction

• Right to erasure

• Right to data portability

• Right to object to processing

6. Data Retention

We retain personal data only for as long as necessary to provide our Services and fulfill the purposes described in this Privacy Policy.

When you request account deletion, we will delete or irreversibly remove direct identifiers such as your name and email address without undue delay.

Certain data associated with your activity, such as session data, performance metrics, and uploaded content, may be retained in a form that is no longer directly linked to your identity, for purposes such as analytics, service improvement, and maintaining community features such as leaderboards.

If you would like all associated data, including sessions and uploaded content, to be fully deleted, you can request this by contacting us at [email protected]. We will process such requests in accordance with applicable data protection laws.

Some data may be retained for longer where necessary to:

• comply with legal obligations, such as tax or accounting requirements;

• resolve disputes or enforce agreements; or

• where data is stored in secure backups or logs and cannot be immediately deleted.

Such data will be securely stored and deleted or anonymized as soon as reasonably possible.

Sensor and device data retention

For smartphones and smartwatches, motion sensor data, such as accelerometer and gyroscope data, is primarily processed locally on your device and may be stored temporarily to support session recording and analysis. Retention of this data on your device may vary depending on your device and operating system.

For connected devices and integrations, such as Garmin, sensor and activity data may be included as part of recorded session data that is uploaded to our systems. In such cases, this data may be retained together with your session data in accordance with this Section.

7. Data Hosting and Security

We aim to store personal data in infrastructure located in the European Union where possible, including through hosting providers that offer EU data storage options.

Some processing may take place outside the European Economic Area where necessary to provide, secure, support, or improve the Services, for example where service providers, support tools, analytics providers, app platforms, or connected integrations operate internationally.

Where personal data is transferred outside the European Economic Area, we use appropriate safeguards, such as adequacy decisions, Standard Contractual Clauses, or other lawful transfer mechanisms.

8. Permissions and Device Access

To function correctly, the Surfr app may request access to certain device features. You can enable or revoke permissions at any time through your device settings.

Depending on your device and how you use the Services, these permissions may include:

• Location access – to record sessions, support live GPS tracking, display activity at spots, and enable safety-related features.

• Notification permission – to send service notifications, such as session updates, login codes, and relevant app alerts.

• Camera access – to take session photos or profile images.

• Photos or media access – to upload images you choose to add to your profile, sessions, reviews, or spot content.

• Local app storage – to store temporary data needed for session recording, app functionality, and offline or reliability features.

• Battery and device status information – such as battery level, storage availability, app version, device model, operating system version, and recording status, to support reliable session tracking and troubleshooting.

• Motion sensor access – such as accelerometer and gyroscope data, to detect jumps and improve measurement accuracy during sessions.

• Connected device or health integration permissions – where you choose to connect services such as wearable devices or health apps.

9. Use by Minors

Surfr is designed for users aged 16 and older. If you are under 16, please only use the app with permission from a parent or guardian. We do not intentionally collect personal information from children. If we become aware that data from a user under 16 was collected without proper consent, we will take steps to delete it.

10. International Users

Surfr is based in the Netherlands and our Services are used by users worldwide. Where personal data is processed or transferred outside the European Economic Area, we use appropriate safeguards, such as adequacy decisions, Standard Contractual Clauses, or other lawful transfer mechanisms.

11. Changes to This Policy

We may update this policy from time to time. Changes will be posted within the app or at www.surfr.app/privacy. Continued use of our Services means you accept the updated terms.

12. Contact

For questions, requests, or concerns, contact us at  [email protected]