Privacy Policy

ClearBase · Last updated: May 2026

ClearBase does not sell your data. All data is encrypted in transit. Location data collected during active crew sessions and taskings is stored securely and deleted automatically after 12 months.

Who We Are

ClearBase is a mobile application developed and published by CosmoLabs Ltd, a company registered in Scotland, United Kingdom (Company No. SC883326). Our website is cosmolabs.co.uk. We are registered with the UK Information Commissioner's Office (ICO No. ZC111592).

Data We Collect

ClearBase collects the following data to provide its core functionality:

Location data — your device's GPS position, used to display tides for your nearest station, show local SAR assets, and (if crew sharing is active) share your position with your group.
Crew session data — if you create or join a crew location sharing group, your position and callsign are transmitted to our server for the duration of the active session.
Tasking data — if you participate in an active tasking, your GPS location is recorded at intervals (when you move more than 100 metres, or every 5 minutes) and stored securely. This data is used to generate operational tasking reports. See the Tasking section below for full details.
Account data — if you create an account (required for crew features), we store your email address and a hashed password.
Subscription data — if you subscribe, payment status is verified via RevenueCat. We do not store card details.
App settings — your preferences (alert radius, saved stations, notification settings) are stored locally on your device and optionally synced to your account if signed in.
Crash and diagnostic data — anonymised crash reports to help us identify and fix issues. No personally identifiable information is included.

Data We Do NOT Collect

We do not collect background location data outside of active crew sessions or taskings
We do not sell data to advertisers or third parties
We do not use behavioural tracking or advertising SDKs
We do not access your contacts, photos, or files

Tasking Feature and Location Recording

ClearBase includes an operational tasking feature for SAR volunteers and coastal emergency responders. When a tasking is active:

Your GPS location is recorded when you move more than 100 metres or every 5 minutes, whichever occurs first
A minimum gap of 30 seconds is applied between location records
Each record includes: timestamp, latitude, longitude, GPS accuracy, speed, and an optional event tag
Location records are stored securely in our database and associated with the tasking session
At the end of a tasking, this location data can be used to generate a PDF operational report
PDF reports may be shared by the tasking commander via the iOS share sheet (email, messaging, Files)

You will be explicitly invited to join a tasking by the tasking commander. Accepting the invitation constitutes your consent to location recording for the duration of that tasking. You may leave a tasking at any time, at which point location recording ceases immediately.

The lawful basis for processing tasking location data is consent (UK GDPR Article 6(1)(a)) and legitimate interests (Article 6(1)(f)) — specifically the legitimate interest of coordinating search and rescue operations and maintaining accurate operational records.

Crew Location Sharing

Outside of active taskings, crew location data is transmitted over an encrypted connection and held in temporary session storage only. Your display name (callsign) within a session is visible to all group members. Standard crew session location data that is not part of a tasking is not retained after the session ends.

Third-Party Services

ClearBase integrates with the following third-party data providers:

Supabase — our database and authentication provider. All personal data including account details, crew sessions, and tasking records are stored on Supabase infrastructure hosted in the EU. Supabase is GDPR-compliant. See Supabase Privacy Policy.
Met Office API — weather data. Only your device's coordinates are transmitted, never personal details.
UK Hydrographic Office / Admiralty — tidal data. Coordinates only.
OpenSky Network — SAR aircraft positions. Read-only public feed.
what3words — location-to-words conversion. Coordinates and words are transmitted to what3words' API. See what3words Privacy Policy.
RevenueCat — subscription management. Handles payment verification. See RevenueCat Privacy Policy.
Apple Push Notification Service (APNs) — used to deliver operational alerts (RNLI launches, tasking invitations). Device tokens are stored securely and used only to deliver notifications.

Location Data

ClearBase requires location access to function. Location is used to:

Show your nearest tidal station and weather observation point
Display nearby SAR assets on the map
Share your position with a crew group during an active session
Record your position during an active tasking (with your consent)
Provide what3words addresses for your current position

You can revoke location permissions at any time in your device settings. Core features requiring location will not function without it.

Push Notifications

ClearBase sends push notifications for RNLI launch alerts, tasking invitations, and subscription reminders. You can manage notification preferences within the app or in your device settings. Notification tokens are stored securely and used only to deliver alerts to your device.

Data Retention

Standard crew location data: deleted immediately when a session ends
Tasking location records: retained for 12 months from the date of the tasking, then automatically deleted
Tasking metadata (ID, description, crew list, timestamps): retained for 12 months, then automatically deleted
Account data: retained while your account is active. Deletable on request.
Crash reports: retained for 90 days, then automatically deleted
Push notification tokens: retained while your account is active. Deleted on account deletion.

Your Rights Under UK GDPR

You have the following rights over your personal data:

Right of access — request a copy of all personal data we hold about you
Right to rectification — request correction of inaccurate data
Right to erasure — request deletion of your data (subject to operational retention requirements)
Right to withdraw consent — you may withdraw consent to tasking location recording at any time by leaving the tasking
Right to data portability — request your data in a machine-readable format
Right to object — object to processing based on legitimate interests

To exercise any of these rights, contact us at hello@cosmolabs.co.uk. We will respond within one calendar month. You may also lodge a complaint with the UK Information Commissioner's Office at ico.org.uk.

Children's Privacy

ClearBase is intended for professional and adult use. It is not directed at children under 13 and we do not knowingly collect data from children.

Changes to This Policy

If we update this policy, we will update the "Last updated" date and, for material changes, notify registered users by email.

Contact

For privacy questions: hello@cosmolabs.co.uk · CosmoLabs Ltd, SC883326, Scotland, UK · ICO No. ZC111592