1. Introduction

Telltale Solutions ("we", "us", or "our") operates the Cognoscere sailing analytics platform ("Service"). This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information when you use our Service. We are committed to complying with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2. Information We Collect

Account Information

When you create an account, we collect your email address and optional display name. If you sign in via Google or Apple, we receive your name and email address from those providers in accordance with their privacy policies.

User Content

We store the VKX sailing race files you upload to the Service. These files may contain GPS track data, timestamps, speed, and other performance metrics. We also store derived metadata (e.g. sail date, duration, track preview points) to power the file display interface.

Payment Information

If you purchase the Analytics subscription, payment is processed by Stripe. Your card details are provided directly to Stripe and never pass through or get stored on our servers. We store only a Stripe customer reference and your subscription status.

Usage Data

We use Google Analytics to collect anonymised usage information such as pages visited, features used, browser type, and approximate location. This data is collected via cookies and similar tracking technologies and is processed by Google in accordance with their privacy policy. It is not linked to your personal identity and is used solely to improve the Service. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Authenticate your identity and manage your account
• Store and serve your uploaded files
• Process subscription payments and manage billing
• Send transactional emails (e.g. email verification, password reset)
• Improve and develop new features
• Comply with applicable legal obligations

We do not sell your personal information to third parties. We do not use your sailing data for advertising purposes.

4. Data Sharing

We use the following third-party services to operate the platform. Each provider processes data only as necessary to deliver the Service:

• Google Firebase: authentication, cloud storage, and database (data stored in Google Cloud infrastructure)
• Google (OAuth): optional sign-in via Google account
• Google Analytics: anonymised usage analytics to help us understand how the Service is used and improve it over time (data processed by Google LLC)
• Stripe: subscription payment processing. Stripe receives your email address and payment details and processes them in accordance with its own privacy policy; we never see your card number.
• Anthropic: when you use the AI coach, session names and derived race statistics (maneuver scores, leg speeds, VMG figures, and timestamps — not your raw GPS track) are sent to Anthropic's Claude API to generate coaching feedback. Your coach conversation messages are also processed by Anthropic for this purpose.

We will not disclose your personal information to other third parties unless required by law or with your explicit consent.

5. Public Sharing

The Service allows you to make individual files or folders publicly accessible via a shared link. When you enable public access for an item, anyone with the link can view or download that item without signing in. You are responsible for the content you make public. You can revoke public access at any time from the Drive interface.

6. Data Retention

We retain your personal information and uploaded files for as long as your account is active. When you delete your account, we delete your account data and uploaded files. Residual copies may remain in backup systems for up to 30 days.

7. Data Security

We implement industry-standard security measures including Firebase security rules enforcing per-user data access, HTTPS encryption for all data in transit, and access controls restricting data to authorised users only. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

8. Your Rights

Under the Australian Privacy Act, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and associated data
• Opt out of non-essential communications

You can manage most of these rights directly in Account Settings. For other requests, contact us at liam@telltalesolutions.com.au.

9. Children's Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us and we will take steps to remove that information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes by email or by posting a notice on the Service. The "last updated" date at the top of this page reflects the most recent revision.

11. Contact Us

For questions or complaints about this Privacy Policy or our privacy practices, please contact us at liam@telltalesolutions.com.au. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).