The SurfCore

Privacy Policy

Last updated: [October, 2025]

When you use SurfCore, we may ask you for information such as your name, email, height, weight, fitness level, and areas you’d like to improve. Depending on which of our features you use, we might also ask a few other onboarding questions — for example, about your training goals or food preferences. You can usually skip some of these by selecting Skip or a similar option.

We also automatically receive some basic technical information from your device — like language settings, IP address, time zone, device model, operating system, and app version. We use this data to make the app work properly (for example, load the right content), understand how people use SurfCore, and continuously improve our experience. You can usually adjust how much of this information we collect through your device or app privacy settings.

This document explains in detail what information we collect, how we use it, who we share it with, and what rights you have.
You can always reach us at help@thesurfcore.com if something isn’t clear or if you want to exercise any of your privacy rights.

Using SurfCore means you agree to this Privacy Policy

By using SurfCore, you confirm that (i) you have read, understood, and agree to this Privacy Policy and how we process data, and (ii) you are over 18 years of age.

If you do not agree — or cannot make this promise — you should not use the Service. In that case, please:
(a) delete your account and contact us to request permanent deletion of your data;
(b) cancel any subscriptions using Apple (iOS), Google (Android), or the app store you used, or via SurfCore directly if you subscribed on our website; and
(c) uninstall the app from your device.

1. What data we collect

We collect three types of information:

  1. Data you share with us directly (for example, during sign-up, onboarding, or when you email us)
  2. Data we receive from third-party sources (such as sign-in providers or Apple Health/Google Health Connect)
  3. Data collected automatically when you use the app (for example, through cookies, SDKs, or analytics tools)

1.1. Data you provide

  • Basic details: your name and email, which you enter to create an account or contact us.
  • Profile and training data: your height, weight, gender, age, fitness level, surf training goals, areas for improvement, and other activity-related inputs that help personalize your plan.
  • Health and wellness data: any data about your workouts, surf or balance training, body stats, or nutrition logs. Some of this may be considered “sensitive” data, so we ask for your consent before using it where required by law.
  • Payment data: when you buy a subscription, payments are processed securely by Apple, Google, or other payment providers. We never store your full payment card information.
  • Messages and feedback: if you contact us, we collect your messages and any attachments (for example, when you ask for support or share feedback).

1.2. Data from third parties

  • Apple/Google sign-in: when you log in using Apple or Google, we receive your name and verified email.
  • Apple Health or Google Health Connect: if you choose to connect SurfCore to these apps, we may read or write workout data (such as step count, calories, or surf training logs). You can disconnect at any time in your device settings.

1.3. Data collected automatically

When you use SurfCore, we automatically collect some technical and usage information to help the app function properly and improve your experience.

Online activity
We log how you interact with SurfCore — for example, which workouts you complete, how long your sessions last, which features you use most often, and your overall training progress. This helps us understand what works best for our users and improve future updates.

Device and geolocation data
We collect information from your device such as language settings, IP address, time zone, device model, operating system, and app version. If you allow it, we may also collect approximate location data to personalize content (for example, surf conditions or regional workout suggestions).

Advertising identifiers
We collect your Apple Identifier for Advertising (IDFA) or Google Advertising ID (AAID) to measure campaign performance and show relevant promotions. You can reset or limit these identifiers anytime in your device settings.

Cookies and similar technologies
We and our partners use cookies, SDKs, and similar technologies to make SurfCore work efficiently, analyze usage, and tailor your experience.
Some of these technologies are essential (for things like logging in and loading workouts), while others help us understand engagement or deliver relevant content and ads.
You can control or disable these technologies in your device or browser settings, but some app functions may be limited as a result.

2. Why and how we use your data

We process your information for the following reasons:

PurposeExamplesLegal basis
Provide the ServiceCreate your account, customize training plans, and ensure everything runs smoothlyPerformance of a contract
Improve SurfCoreAnalyze how users engage with workouts or features to enhance user experienceLegitimate interest
Health and fitness personalizationAdjust programs to your surf level, performance, or goalsConsent (for health data)
Process payments and subscriptionsVerify transactions and provide access to paid featuresPerformance of a contract
Customer supportAnswer your questions or fix issuesLegitimate interest
Send notifications and updatesReminders, workout progress messages, or important app announcementsLegitimate interest or consent
Marketing communicationsShare news, offers, or updates (if you opted in)Consent
Security and fraud preventionDetect and prevent abuse or unauthorized activityLegitimate interest
Legal complianceRespond to lawful requests or meet tax and accounting obligationsLegal obligation

3. Who we share your data with

We only share your information with trusted partners who help us run and improve SurfCore. These partners act under our instructions and are bound by strict data protection agreements.

Our key service providers include:

  • Firebase Analytics, Mixpanel – analytics and user engagement metrics
  • Firebase Crash Reporting and Crashlytics – crash diagnostics and app stability
  • Singular – marketing attribution and campaign analytics
  • Bunny.net – content delivery network for faster and smoother media loading
  • Apple, Google, and payment processors – handle app store transactions

We may also share data when required by law, during a merger or acquisition, or to protect our rights and users’ safety.

We never sell your personal data.

Marketing and Advertising Service Providers

To reach new users and share information about SurfCore, we sometimes work with digital advertising platforms and social media partners. These tools help us show ads that are more relevant to your interests, measure how effective our campaigns are, and better understand our audience.

Our marketing partners include:

Meta (Facebook and Instagram)

We use Meta Ads Manager and Meta Custom Audiences to manage and deliver ads across Facebook and Instagram. These tools allow us to select groups of users who might see specific ads — for example, people who have recently installed the app or completed certain actions in SurfCore.
Meta may use device identifiers (like IDFA), email hashes, or other technical data to match ads to relevant users.
You can learn how to manage or opt out of Facebook’s personalized ads by adjusting your Facebook ad settings or reviewing Meta’s Privacy Policy.

Google Ads

We use Google Ads to display ads on Google and partner platforms. Google allows us to show ads to users who have interacted with SurfCore in specific ways (for example, installed the app or completed a workout).
You can manage your ad preferences or opt out of Google’s personalized advertising through your Google Ads settings or by installing the Google Analytics opt-out browser add-on.

Snapchat Advertising Platform

We use Snapchat Ads and Snapchat Audience Match to reach users who may be interested in SurfCore based on their engagement with our app. For example, you might see a SurfCore ad on Snapchat if you recently used our app or viewed similar content.
You can learn more about Snapchat’s advertising practices and opt out of audience-based ads in their Privacy Policy.

Pinterest

We use Pinterest Ads and conversion tracking to understand how people interact with our content and to promote SurfCore to new users. For example, we may show SurfCore ads to users who installed the app, completed a surf workout, or purchased a subscription.
You can manage your Pinterest ad preferences in your Pinterest account settings.

Other Ad Networks and Publishers

We may also partner with ad networks, agencies, and publishers to show SurfCore ads on websites or apps outside our own. These partners may use cookies or device identifiers (like IDFA or AAID) to show relevant ads based on your interests or activity.
You can opt out of interest-based advertising by visiting:

We never sell your personal data. These advertising tools only use limited, mostly anonymized identifiers, and you can manage or withdraw your consent for targeted ads anytime via your device or browser settings.

4. How you can exercise your privacy rights

A. General privacy rights

To stay in control of your information, you can exercise the following rights (subject to applicable law):

  • Access / review / update / correct your data.
     You may review and edit personal data you previously shared with us. If you want a copy of the data we process, submit a data access request or, where available, use the in-app privacy tools (typically in your profile or settings).
  • Delete your data.
     You can ask us to erase your personal data. We will honor your request unless we must retain certain information to meet legal, tax, accounting, or security obligations. If retention is required for part of your data (e.g., payment records), we’ll delete the rest promptly and remove the retained portion once our obligations end.
  • Transparency about processing.
     You have the right to understand what we collect, why we process it, with whom we share it, and how long we keep it. Much of this is explained in this Policy. If anything is unclear, contact us.
  • Object to or restrict processing.
     You can ask us to stop or limit certain processing. For example:
    • Email marketing: unsubscribe via the link in our emails or contact support.
    • E-privacy settings: where available, you can adjust granular tracking preferences in the app/website (usually found in the footer, menu, or profile areas).
  • Additional ways to influence personalized advertising:

We value your ability to shape the ads you see, so we’ve disclosed the marketing/ads providers we use and how to manage preferences with them in this Policy.

  • Lodge a complaint with a supervisory authority.
     We encourage you to contact us first—we’ll do our best to resolve your concern quickly. You also have the right to complain to your local data protection authority.
  • Data portability.
     You can request a machine-readable copy of your personal data (e.g., JSON or a similar format).

Exercising your rights
Use the in-app/web privacy controls (where available) or email us at help@thesurfcore.com.

Verification
To protect your account, we may need to verify your request (e.g., via email verification or account details such as date of account creation, last activity, or subscription date). We aim to request the minimum information needed (for some requests we’ll send a verification link or code).

Authorized agent (where applicable)
If you appoint an authorized agent to act for you, we may request proof of authorization and will verify both your identity and the agent’s identity.

B. California privacy rights (CCPA/CPRA & Shine the Light)

This section applies only to residents of California, USA.

For details about what we collect and why, see Section 1 (Categories of personal data) and Section 2 (Purposes and legal bases). For how we share data, see Section 3.

Under the CCPA/CPRA, you may have these additional rights:

  • Right to know what personal information is sold or shared and to whom.
     You may request that we disclose:
    • The categories of personal information collected about you;
    • The categories of personal information that were sold or shared and the categories of third parties to whom they were sold/shared;
    • The categories of personal information disclosed for a business purpose and the categories of recipients.
  • Right to opt out of sale or sharing / limit certain uses.
     In some cases, our use of advertising or analytics partners could be characterized as a “sale,” “sharing,” or “targeted advertising.” You can opt out of such sale/sharing. Where supported, we will provide a prominent “Your Privacy Choices” link in the app or website (commonly in the footer, menu, or profile). We also strive to recognize and process opt-out preference signals where required.
  • Right to non-discrimination.
     We will not discriminate against you for exercising your CPRA rights.

Shine the Light (California Civil Code §1798.83)
California residents may request, once per year, information about categories of personal information (if any) that we shared with third parties for those parties’ direct marketing purposes, and the names/addresses of such third parties. To make this request, email help@thesurfcore.com with the subject line: “Request for California Shine the Light Privacy Information”, and include your state of residence and the email address associated with your account. Note: not all sharing is covered by Shine the Light; we will include covered sharing in our response.

5. Age restrictions

SurfCore is designed for adults and may only be used by individuals 18 years or older.
We do not knowingly collect information from anyone under 18. If you believe a minor has used SurfCore, please email us at help@thesurfcore.com so we can remove their data.

6. International data transfers

We may transfer your personal data to countries other than the one where it was originally collected, in order to deliver the SurfCore Service described in our Terms and Conditions of Use and for the purposes outlined in this Privacy Policy.

Some of these countries may not have data protection laws equivalent to those in your home country. When this happens, we implement appropriate safeguards to ensure your data remains protected — including, where applicable, the Standard Contractual Clauses (SCCs) adopted by the European Data Protection Board (EDPB) or other legally recognized transfer mechanisms.

7. Policy updates

We may update this Privacy Policy occasionally to reflect new features, partners, or legal requirements.
We’ll post the updated version in the app and on our website. The “Last updated” date at the top will always show the latest version.

8. Data retention

We keep your information only for as long as necessary to provide the Service, meet legal obligations, and resolve disputes.
When your data is no longer needed, we securely delete or anonymize it.

We will also retain and use your personal data as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. For example, under certain accounting and tax laws we are required to store Commercial Information for long periods of time to comply with laws we are subject to. Therefore, even if you submit a data deletion request, a small portion of the data that relates to our compliance obligations will be stored even after the request is satisfied.

9. Who controls your data

SurfCore is the controller of your personal data.

10. Contact us

If you have questions, requests, or feedback about this Privacy Policy, please contact us at:
📧 help@thesurfcore.com