Who is responsible
BerthLab is operated by TXYOU, LLC. Contact berthlab@txyou.com for privacy questions, access, correction, deletion requests or complaints. This policy applies to the BerthLab app and berthlab.txyou.com. Effective date: September 29, 2026.
Practice stays local unless you choose to share
Training history, checkpoints, preferences and personal reflections are stored in the app’s local storage. The app does not require an account to practice. Normal simulation use does not upload your training sessions to our service. Your device’s backup settings may separately govern system backups. Purchases and payment information are handled by Apple; we do not receive your card details.
Optional website publishing
When you expressly choose website sharing, the app sends a telemetry-derived video, a poster image and a restricted set of simulation data: vessel and lesson identifiers, model version, environment category, attempt kind, reported outcome, clip interval, selected motion samples and events. It excludes your personal reflection, boat nickname, original session identifier, original session date, parent session identifier and purchase information. Do not upload content about other people or material you do not have permission to publish.
Publication, search visibility and control
Uploads initially remain non-public while awaiting review. Approval permits a public watch page, video and captions. Separate search-visibility consent permits consideration for our indexed tutorial channel; it does not guarantee indexing. Keep the private management link: it authorizes status access and withdrawal without an account. Anyone with that link can manage the upload, so do not post it publicly. Search engines and recipients may retain copies outside our control after withdrawal.
Operational information and service providers
Cloudflare hosts the site, database and private media storage and processes network requests, including IP addresses, to deliver and protect the service. The application rate limiter stores daily salted hashes, not raw IP addresses. An installation-scoped random publisher token is stored in the device Keychain; its hash is used for abuse prevention and blocking. We also store moderation actions and reports. Website-to-App-Store clicks are counted only as daily totals by a fixed source category, without cookies, cross-site tracking or device advertising identifiers.
Support and legal purposes
When you email us, we receive your email address and anything you include. We use this information to respond, investigate technical or safety reports and handle requests. Please do not send passwords, Apple receipts containing unnecessary personal information or private management links in public channels. We may preserve information where required by law or to investigate misuse. We do not sell personal information or use shared replays for targeted advertising.
Retention and deletion
Draft uploads expire after 7 days; pending uploads expire after 30 days without approval; rejected uploads expire after 7 days. A daily cleanup job removes these media and metadata. Published uploads remain until you withdraw them, we remove them, or the service closes. Withdrawal immediately removes public access; physical deletion is retried if storage is temporarily unavailable. Rate-limit records become eligible for deletion after 48 hours and are removed by the daily cleanup. Minimal deletion receipts, closed moderation logs and resolved reports are retained for 90 days before cleanup; aggregate click totals for 13 months. Blocked publisher hashes are retained for abuse prevention until reviewed and removed. Support correspondence is normally removed within 12 months after resolution, unless retention is legally necessary. Cloudflare backups and network-level records follow the provider’s applicable controls.
Your choices and rights
Use the app’s clear-training-data control for local training; this does not delete an already published web upload. Use the private management page to withdraw a shared replay, including a pending upload. Contact our support address for privacy requests or if you lose the management link; we may need proportionate evidence that you control the content. Rights to access, correction, deletion, restriction, objection, portability and complaints to a competent authority depend on applicable law. Public-sharing consent may be withdrawn at any time, without changing the lawfulness of earlier processing.
Children, international processing and changes
Website publishing is intended for users aged 16 or older. We do not knowingly invite children under 16 to upload content. A parent or guardian can contact us about an upload. Our providers may process data outside your country with the safeguards required by applicable law. We will update this page when our practices change and obtain new consent where required. No policy eliminates the risks inherent in publishing information on the open internet.