This policy explains what AI Cruise Director ("the App") collects, why, who processes it for us, how long we keep it, and your choices. The App is an AI assistant for adults 18 and older. It is an independent app and is not affiliated with any cruise line.
1. Information we collect
- Account: your email address, first and last name, and password (stored only as a bcrypt hash). If you use Sign in with Apple: your Apple user ID and Apple's sign-in token (stored encrypted, so we can revoke it when you delete your account). The date and version of the Terms you accepted.
- Sailing and purchases: the sailing you use the App for, and records of your App Store purchases (from Apple, through RevenueCat).
- Chat: the questions you ask and the App's answers.
- Things you ask the App to remember: for example your cabin, loyalty tier, plans, reminders, preferences and notes.
- Health details you volunteer: if you mention an allergy, a medical condition or another health detail, the App asks "Want me to remember that for this sailing?" and saves it only after you say yes. Set Up My Info also asks about food allergies and diet needs; you can skip that question, and an answer is saved only when you pick one. You can delete these details at any time.
- Photos, screenshots and PDFs: when you choose to scan or upload the ship's daily schedule, a menu or a sign. Daily schedule uploads are stored. A photo you only ask the App to read is sent to our AI provider to be read and is not stored by us.
- Groups, live reports and Points: your groups and group messages, the live reports you send (a venue and what you saw), and your Points and badges.
- Push notification token: to send your reminders and the daily briefing.
- Diagnostics: crash reports from the App, with its recent technical steps (for example sign-in steps), linked to your account ID. Only if we switch it on for your account to fix a problem, the App's diagnostic lines, with email addresses and keys removed.
- Usage records: for each question, a record of its text and how it was answered, and usage statistics that do not contain your words.
- Technical data: like any app or website, our servers and network provider receive your IP address and request details when you connect.
We do not collect your precise location, your contacts or your browsing history, and the App has no advertising. Face ID stays on your phone; we never receive it. The App uses your camera and photos only when you choose to scan or upload.
2. How we use it
- To answer your questions using your ship's information, your sailing and the details you asked the App to remember.
- To send reminders, the daily briefing and account emails (verification and sign-in codes, password resets, account notices).
- To run groups, live reports and Points.
- To keep accounts secure, give access to the sailings you bought, and fix problems.
- To improve the App's ship information: questions the App could not answer are reviewed so we can fill the gaps.
We do not sell your personal information, show advertising, or share your information with advertisers or data brokers.
3. Who processes your information for us
These service providers process information only to provide their service to us:
- Anthropic (AI answers, and reading your photos and PDFs): your questions, the details needed to answer them, and the photos and PDFs you send. anthropic.com/legal/privacy
- OpenAI (text embeddings): the text of questions the App could not answer, to group similar questions. openai.com/policies/privacy-policy
- Pinecone (search): the text of your question, to search the ship's information, and numeric representations of unanswered questions. pinecone.io/privacy
- Amazon Web Services (hosting, database and file storage): the information we store, including uploaded photos and PDFs. aws.amazon.com/privacy
- Cloudflare (domain and network): connection data such as your IP address. cloudflare.com/privacypolicy
- Google Firebase (push notifications and Crashlytics crash reports): your push token, the notification text, and crash reports linked to your account ID. firebase.google.com/support/privacy
- Resend (email): your email address, first name and the email we send you. resend.com/legal/privacy-policy
- Apple (Sign in with Apple and App Store purchases). apple.com/legal/privacy
- RevenueCat (purchase records): your account ID and your App Store purchase records. revenuecat.com/privacy
We may also disclose information when the law requires it, or to protect the safety of passengers or the App.
4. What other passengers see
- Group messages and your first and last name are seen by the members of your group.
- Live reports are seen by other passengers on your sailing, without your name.
- The Points leaderboard shows other passengers on your sailing your first name and last initial.
- Events read from a daily schedule you upload can be used to answer other passengers on the same sailing, without your name.
5. How long we keep it
- Things you asked the App to remember (including health details): deleted 30 days after your sailing ends, or earlier when you delete them.
- Per-question usage records: deleted after 30 days. Usage statistics are kept, but their link to your account is removed after 30 days.
- Diagnostic lines: deleted after 30 days.
- Live reports: expire and are deleted after about 30 minutes.
- Chat history, unanswered questions, uploads and the rest of your account: kept until you delete your account. You can also clear a sailing's chat in the App.
- Backups and service logs: deleted information can remain in backups and logs until they are replaced in the normal cycle.
6. Deleting your account
In the App, go to Settings > Delete account. This deletes your account and the information above, including your uploaded photos and PDFs, and revokes Sign in with Apple when possible. Usage statistics are kept without the link to your account. Not deleted: Apple's and RevenueCat's purchase records, crash reports already sent to Crashlytics, Resend's record of emails sent, the numeric representations of unanswered questions kept in Pinecone (with no link to your account), and backups and service logs until they are replaced. Events already taken from a schedule upload stay as general schedule information for that sailing, with no link to you. You can also email [email protected].
7. Your choices and rights
- Ask for a copy of your information, or ask us to correct or delete it: email [email protected].
- Change your name or email in the App, and delete saved details and plans at any time.
- Say no when the App offers to remember a health detail.
- Turn notifications off in your iPhone's Settings.
- Depending on the state you live in, you may have more privacy rights. Contact us and we will help.
8. Security
Connections to the App use HTTPS. Passwords are stored only as bcrypt hashes, and the Apple sign-in token is stored encrypted. Access to our systems is limited. No system is perfectly secure, so please tell us at once if you think your account was misused.
9. Children
The App is only for adults 18 and older and is not directed at children. We do not knowingly collect information from anyone under 18. If we learn that an account belongs to someone under 18, we delete it. If you think a child has given us information, email [email protected].
10. United States
Cartesys LLC is a U.S. company, and the App is offered to customers in the United States. Our servers are hosted by Amazon Web Services in the United States.
11. Changes to this policy
When we change this policy in a material way, we update the date above and the App asks you to accept the new version before you continue.
12. Contact
Email: [email protected]
Company: Cartesys LLC, Florida, United States