Last updated 22 July 2026
Privacy Policy
This policy explains how BeachGo handles personal data across the public website and mobile app, including future Android support.
Who controls your data
BeachGo is operated by ReflowDigital LTD. Contact privacy@beachgo.co.uk for privacy questions or rights requests.
Website enquiries
Contact, partner and feature-request forms collect the fields you submit, basic delivery metadata and an IP-derived rate-limit key. Feature requests can be sent without an email address; if you provide one, we use it only to ask relevant follow-up questions. We use form information to respond or review ideas, prevent abuse and keep a record of relevant correspondence. The legal basis is legitimate interests or steps requested before entering a contract.
App accounts and features
The app supports email, Apple and Google sign-in through Supabase. Account data may include your email, profile, origin setting, favourites, named lists, view history and reports. Saved-beach and list records are scoped to the signed-in user.
Community contributions
Busyness reports and corrections may be associated with an account or device token for abuse prevention and moderation. Public users see aggregate community context rather than raw private account records. Correction submissions are reviewed before changing shared beach facts.
Location and traffic
The app may use location or a manually set origin to find nearby beaches and request route or traffic information. The website does not request precise browser location in this release.
Analytics
No production analytics ID is hard-coded. If a privacy-conscious provider is configured, BeachGo records page use and conversion events such as App Store and Google Play CTA clicks, search submissions, completed enquiries, and feature-request starts and submissions. Device category, referrer and campaign parameters may be included; feature titles, descriptions, email addresses and other form content are not sent to analytics.
Embedded tide information
Eligible UK beach guides lazy-load an official TideTimes.org.uk widget in a sandboxed frame. When your browser loads it, TideTimes.org.uk may receive technical request information such as your IP address, browser details and referring site. BeachGo does not read the widget's tide values or store data from the frame. You can use the rest of a beach guide without interacting with the widget.
Processors and sources
Services may include Cloudflare for website hosting and abuse prevention, Resend for form email, Supabase for app data and authentication, TideTimes.org.uk for embedded tide information, and configured data or route providers used by the app. Each provider processes information needed for its role.
Retention
Enquiry and feature-request correspondence is kept only as long as needed for support, product planning, partnerships, legal records and abuse prevention. App account data remains while the account is active, subject to operational backups and legal requirements.
Your rights
UK data-protection law may give you rights to access, correct, erase, restrict or object to processing, and to data portability where applicable. Email privacy@beachgo.co.uk. You may also complain to the UK Information Commissioner's Office.
Children
BeachGo is not directed at children under 13. If you believe a child has created an account, contact us so we can investigate and remove it where appropriate.
Security and changes
We use access controls, server-side validation and least-privilege service configuration, but no online service can promise absolute security. Material policy changes will update the date above.