LocalsOnly

Locals

Privacy notice

DraftThese are the current binding terms for the Locals pilot (version pilot-4). They are undergoing final legal review and may be refined; you will be asked to accept any updated version.

Locals is a coaching platform: coaches upload surf session videos, add feedback, and share private reports with their surfers. This notice explains, in plain language, what data the service holds, who can see it, and your rights. During this invite-only pilot, requests about your data go to your coach, who can escalate them to the service operator.

What we store

Coach accounts (name, email, password hash), surfer details entered by the coach (name, and optionally email, phone, date of birth, coaching notes), session videos and frame images uploaded by the coach, coach feedback (comments, timeline notes, cue cards), in-app feedback coaches send us, records of your acceptance of the terms (version, language, time, device information, and IP address), service-usage records (sign-in times, report-viewed indicators), and surf-forecast data for public spots (not personal data). We use essential cookies only — sign-in and language preference; no tracking or advertising cookies.

Providing data is voluntary

You are not legally required to provide any data. Coaches choose what to enter about a surfer, and a surfer who prefers not to have an account can still receive reports through private links. Without a name and footage we simply cannot show a session report — that is the only consequence of not providing data.

How it is used

Data is used only to provide the coaching service itself: storing sessions, rendering feedback, delivering private reports, and operating the service (sign-in, suspension, abuse handling). There is no advertising, no data selling, and no third-party analytics or trackers on public and report pages.

Who can see it, and where it lives

A session report is visible only to people who have its private share link or the surfer's own account. Coaches see only their own surfers and sessions, and links can be revoked at any time. Our database and media are hosted on Supabase in the EU (Frankfurt); pages are served by Vercel, whose infrastructure may process ancillary data (such as request logs) outside Israel and the EU. These providers process data only to host the service. Locals is offered in Israel and does not target users in the European Union.

Your rights

Under sections 13–14 of the Israeli Privacy Protection Law you may ask to review data held about you, and to correct or delete it. You may also withdraw your consent to footage of you at any time. Contact the coach who filmed you — they can edit or remove content directly — and requests are acknowledged within 24 hours on business days. Deletion requests are completed within 30 days.

Retention

Content stays as long as the coach keeps it or until a deletion request is honored. Hosting backups expire about 7 days after deletion; operational backup copies held by the operators are kept no longer than 30 days and are purged as part of any deletion request. Records of terms acceptance are retained as long as legally useful as evidence.