WeSurph Privacy Notice
Your ocean journey is personal.
Effective September 11, 2026 at 16:09:06 UTC
Version 2026-09-11-v1
Marketplace operator: Yashar Ahmadpour, an individual operating as WeSurph. Public business/support address: 6826 Via Verano, Carlsbad, California 92009, United States.
This notice explains how WeSurph collects, uses, shares, and protects information when you use our iOS app, provider portal, website, support, and related marketplace services.
Website campaign attribution
When you arrive through a tagged campaign link and submit a website form, we may retain the campaign label, landing page, referring page, and submission time with that form. This first-party measurement helps us understand which outreach creates interest. We do not use Meta, TikTok, or other advertising SDKs in the iOS app, do not fingerprint devices, and do not send form identity data to advertising platforms.
Information you provide
Account details such as your name, Apple account identifier, email address when Apple shares it, optional city, beach, or coastal home region, profile photo, contact information, preferences, reviews, messages, reports, support requests, lesson and rental details, provider applications, credentials, insurance summaries, beta applications, and media you choose to upload.
TestFlight beta
If you apply for or join the beta, we process your Apple Account email, general U.S. location, iPhone model, iOS version, roles and features you can test, availability, eligibility confirmations, feedback, support messages, beta status, and invitation history. Apple separately processes TestFlight installation, diagnostics, crash information, and feedback under Apple's terms and privacy practices.
Location and device information
With permission, WeSurph uses precise location while the app is open to show nearby instructors and boards, calculate distance, support handoffs, and improve safety. An optional city, beach, or coastal home region is stored separately in your account. Precise coordinates are not included in customer or CRM exports or sent to our push-notification provider. We also process device and app information needed for authentication, security, diagnostics, fraud prevention, and reliable service.
Payments
WeSurph receives transaction status, amounts, receipts, refunds, disputes, payout status, and limited payment metadata. Apple Pay and Stripe process payment credentials; WeSurph does not receive or store your complete card number.
Photos and videos
Media is connected to the lesson, rental, badge, or profile you select. You control whether to upload or export it. Access to your photo library or camera is requested only when you use those features.
How information is used
We use information to provide accounts, discovery, maps, booking, rentals, payments, safety workflows, provider review, badges, support, moderation, fraud prevention, legal compliance, service improvement, and the notifications you choose to receive. Marketing push notifications are off by default and require separate consent. We do not sell personal information or use cross-app tracking for advertising.
Service providers and disclosures
Information may be processed by Apple services, including Sign in with Apple, Apple Pay, Maps, CloudKit, and Apple Push Notification service; OneSignal for push delivery and notification engagement; Stripe for marketplace payments and payouts; infrastructure, security, communications, and support vendors; and professional advisers or authorities when legally required. We send OneSignal an opaque WeSurph user identifier, push subscription and device information, primary role, coarse home surf region, and notification interaction data—not names, email addresses, precise location, Apple identity subjects, or payment credentials. Providers and customers receive only the information needed for their booking, lesson, or rental.
Retention and security
We retain information for as long as needed to provide the service, maintain transaction, safety, tax, and legal records, resolve disputes, prevent fraud, and meet legal obligations. We use access controls, encryption in transit, protected credentials, audit records, and data minimization, but no system can guarantee absolute security.
Your choices and rights
You can update profile information, manage location, media, and notification permissions in iOS, choose notification categories inside WeSurph, withdraw optional marketing push consent at any time, control sharing, block or report users, and request account deletion from the app. Depending on where you live, you may also request access, correction, deletion, portability, or restriction of certain processing.
Children
The initial WeSurph service and private beta are limited to adults age 18 or older and are not directed to children. A parent or guardian should contact us if they believe a child submitted personal information.
Changes
We may update this notice as WeSurph evolves. Material changes will be presented in the app or on this site, and the effective date will be updated before the revised notice applies.
Contact
For privacy questions or a request you cannot complete in the app, contact privacy@wesurph.com. We will verify requests before disclosing or changing account information.