Privacy Policy
Last updated 8 August 2026
This explains what we collect, why, and who else sees it. We do not sell your data and we do not run advertising.
1. Who is responsible
3-102-955486 SRL, registered in Costa Rica, decides how your data is handled and is the controller for the purposes of data protection law. Contact us at hello@styleandflow.surf.
2. What we collect
Account details: your name, email address and password (stored hashed — we never see it).
Surfing profile: the things you choose to tell us, such as experience level, home break, location, age, your goals, and the boards you ride.
Your videos: the footage you upload, plus the details you add — spot, wave type and size, conditions, board, and what you want feedback on.
Coach feedback: voiceover recordings, the drawings made on your video, written notes, maneuver tags, and any comments exchanged between you and your coach.
Subscription details: your plan, renewal date, payment status and any extra reviews. Card details are held by our payment provider, not by us.
Technical data: language preference, notification settings, and — if you use the mobile app — a push notification token for your device.
3. Why we use it
To deliver coaching: showing your video to your assigned coach and returning their feedback to you. This is the core of the service and the reason most of this data exists.
To run your subscription: billing, renewals, plan changes and upload allowances.
To keep you informed: telling you when feedback is ready, when a coach replies, and about anything affecting your subscription.
To improve the service and keep it secure, including diagnosing faults.
4. AI-assisted progress summaries
Every three months we generate a written summary of your progress using an AI model provided by Anthropic.
This is the only use of AI in the service. Your videos are never sent to an AI model and your surfing is never analysed by one — every review is done by a human coach watching your footage.
What is sent: your profile details (name, age, experience level, home break, location, goals and boards), the metadata of your sessions, your coach's written feedback, and the text of comments between you and your coach.
What is not sent: your video, your coach's voiceover audio, the drawings on your footage, your email address, or any payment information. The AI model works only from text.
The summary is a convenience, written from work your coach has already done. If you would rather not have summaries generated for you, email us and we will switch them off for your account.
5. Who else processes your data
We use a small number of established providers to run the service. They only process data on our instructions.
Supabase — accounts, authentication and the database.
Mux — video storage and streaming.
Whop — subscriptions and card payments. They handle card details; we do not.
Vercel — hosting.
Resend — transactional email such as password resets and feedback-ready notices.
Expo — push notifications to the mobile app.
Anthropic — the AI progress summaries described above.
Your coach sees your video, your profile and your feedback history, because that is what coaching requires. Coaches are bound by confidentiality.
We do not sell your data, share it with advertisers, or use it to train AI models.
6. Where your data is held
Our providers operate internationally, so your data may be stored or processed outside your own country, including in the United States and the European Union. We choose providers that offer appropriate safeguards for those transfers.
7. How long we keep it
Your library is designed to be permanent — your videos and feedback stay available to you for as long as your account exists, including after you cancel. That is a feature, and it means we keep them.
If you ask us to delete your account, we remove your profile, videos and feedback. Records we are required to keep for tax or accounting purposes — essentially payment records — are retained for as long as the law requires.
8. Your rights
You can ask us for a copy of your data, correct anything wrong, delete your account, or object to a particular use. Much of this you can do yourself in your profile; for the rest, email us.
Write to hello@styleandflow.surf and we will respond within 30 days.
9. Security
Access to your data is restricted at the database level so that one student cannot read another's videos, feedback or profile. Passwords are hashed. Traffic is encrypted in transit.
No system is perfectly secure. If a breach ever affects your data, we will tell you.
10. Younger surfers
Style & Flow is not for anyone under 16. Accounts held by 16 and 17 year olds require a parent or guardian to agree to our terms first.
A parent or guardian can ask us at any time to show them what we hold about their child, correct it, or delete the account outright.
If you believe someone under 16 has given us data, contact us and we will remove it.
11. Cookies
We use cookies for two things only: keeping you signed in, and remembering whether you prefer English or Spanish.
We do not use advertising or third-party tracking cookies.
12. Changes to this policy
If we change how we handle your data in a material way, we will tell you by email or in the app before the change takes effect.
13. Contact
Any question about your data: hello@styleandflow.surf.