Privacy Policy

We collect information you provide directly to us, such as when you create an account, book a trip, or contact us. This includes your name, email address, phone number, payment information, and trip preferences. We also collect information automatically when you use our platform, including device information, usage data, and location data.

To book a yacht charter, we collect identity and travel-document information for each member of your crew, including passport number, date of birth, and nationality. This information is required by yacht charter companies and, where applicable, by port and customs authorities to prepare crew lists and manifests for your trip. We share it only with the charter company operating your booking and with relevant authorities as legally required. We do not sell or use it for marketing. When you enter your own identity information, we ask for your explicit, affirmative consent at the point of entry and keep a record of that consent.

For EU/EEA and UK residents, we process your personal information under the following lawful bases: (a) performance of a contract — to fulfil and administer your yacht charter booking; (b) compliance with a legal obligation — to meet charter-company, port, and maritime crew-manifest requirements; and (c) consent — for your own identity and travel-document data, for optional dietary preferences and allergies (which can reveal health or religious information and are collected only with your explicit consent, to plan provisioning and meals on your trip), and for optional marketing communications. Consent is given affirmatively at the point of entry and may be withdrawn at any time; withdrawal does not affect the lawfulness of processing carried out before withdrawal.

We use your information to provide and improve our services, process bookings, facilitate communication between trip participants, send important updates about your trips, provide customer support, and ensure platform security. We may also use your information for marketing purposes if you have given consent.

We share your information only as necessary to provide our services. This includes sharing contact information with other trip participants, providing necessary details to yacht charter companies, and working with payment processors. We do not sell your personal information to third parties.

Yakt is operated by a company registered in the United States, and your data is primarily stored on servers located in the United States (Amazon Web Services, via our backend provider Supabase). We use a small number of service providers to run the platform, each processing only the data needed for its role: Supabase (database, authentication, and file storage), Stripe (payment processing — we never store full card numbers), Resend (email delivery), Twilio (WhatsApp messages, where you use them), Apple and Google (push notifications on mobile), Mapbox (maps), Sentry (error monitoring, with session recordings fully masked), and Google Analytics (usage analytics, only with your cookie consent). Crew-list details are shared with the charter operator of your booking through the industry Booking Manager system, as required to operate your charter. If you are in the EU/EEA or UK, your data is transferred to the United States; these transfers are safeguarded by data-processing agreements with each provider, including Standard Contractual Clauses or an applicable adequacy framework.

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes encryption of sensitive data, secure servers, and regular security audits.

You have the right to access, update, or delete your personal information. You can update your profile and trip details directly in the app, delete your account (and its data) from Account Settings at any time, and manage email preferences in Settings or via the unsubscribe link included in every non-essential email. To request a copy of your data (data portability), email support@yakt.com from your account email address — we will provide it in a common machine-readable format within one month, as required by GDPR. For EU/EEA and UK residents, additional GDPR rights apply, including objection, restriction of processing, and the right to lodge a complaint with your local supervisory authority.

We keep your personal information only for as long as needed for the purposes described in this policy. Identity and travel-document data (passport number, date of birth, nationality) is retained for the duration of your booking relationship with us and for a limited statutory period afterwards where required to meet legal, accounting, or charter-company recordkeeping obligations, after which it is deleted or anonymized. You can request deletion of your account and associated personal data at any time from your account settings or by contacting support@yakt.com; some records may be retained where we are legally required to keep them.

When you provide your mobile phone number and consent to receive text messages, we may use it to send account-related notifications including booking confirmations, trip reminders, and account alerts. We do not sell, rent, or share your phone number with third parties for their marketing purposes. Message frequency varies based on your account activity. Standard message and data rates may apply. You may opt out of SMS notifications at any time by replying STOP to any message. For help, reply HELP or contact support@yakt.com.

We use cookies and similar technologies in four categories: necessary (sign-in, security, and remembering your cookie choices — always on), analytics (Google Analytics and Sentry error monitoring — loaded only if you consent), marketing, and functional. When you first visit, a consent banner lets you accept all, reject all, or choose per category, and nothing non-essential loads before you decide. You can change your choices at any time via the cookie preferences settings, and additionally control cookies through your browser.