Last updated: November 2, 2026
BetterAt, a product of OceanFlow Limited ("BetterAt", "we", "our", or "us"), operates the Dragon Worlds HK 2027 mobile application (the "App") and is the controller of the personal data described in this policy. This policy explains what the App collects, why we use it, when it is disclosed, and the choices available to you.
When you create or use an account, we collect your email address, display name, authentication provider, internal user identifiers, and account role or onboarding type. If you provide them, we may also collect a profile photo and sailing profile details such as sail number, boat class, yacht club, attendance information, and a claimed boat identity. Authentication credentials are handled by Firebase Authentication, Google, or Apple, depending on the sign-in method you choose.
Boat features may store a boat name, sail number, account membership, follow state, container or shipping reference, logbook URL, and the name and size metadata of a shared VKX file. The current VKX share handler stores file metadata, not the file contents. Event, race, boat, shipment, map, and weather coordinates describe venues or assets. The App does not request or transmit your device's GPS location. If you use Google Sign-In, Google may process your IP address to estimate a general location for fraud prevention. This is separate from device GPS access.
The App no longer includes the Race Bot chat or the Ask the Committee handoff, and it does not collect typed questions. If you contact the Organising Committee by email or WhatsApp from the App, your device's email or messaging app sends that message directly; the App does not collect it. Questions and support tickets submitted through the Race Bot before it was removed are kept as described in Section 6.
For signed-in users, the App collects account-linked sessions, timestamps, screens viewed, feature actions, and product interaction events. These can include weather, sponsor, and BetterAt interactions. Google Sign-In may process linked identifiers, device information, other usage data, and other service data for sign-in functionality, security, and analytics. The packaged Google Maps SDK may process unlinked crash and performance diagnostics and map interaction data for analytics. The App uses this information to operate, secure, understand, and improve the service. The current App does not provide a separate analytics opt-out.
If you allow notifications, we associate an Expo push token, device platform, account identifiers, notification preferences, and selected boat follows with your account so we can deliver requested alerts. You can withdraw notification permission in your device settings.
Camera and photo-library access is optional. The App uses it only when you choose a profile image or, for an authorised event role, scan a check-in QR code. A selected profile image is stored in Firebase Storage and linked to your account. The App does not upload your photo library.
The current App has no active calendar integration and does not request access to your calendar. Booking and ticketing pages open inside an in-app browser window or in your device browser, and information you submit there, including any payment, is collected by that provider under its own privacy terms. The App does not collect, process, or store card details.
We use the information described above to:
We do not sell personal information and do not use it to track you across other companies' apps or websites. We disclose information in these circumstances:
The App displays or links to official race documents and results, sponsor and partner content, maps, weather information, and event forms. External forms and websites, including the Moongate booking and ticketing portal and Stripe checkout, open inside an in-app browser window or in your device browser and apply their own privacy terms. Map and weather providers receive the event or boat coordinates needed to provide their content. The App does not send them your device's GPS location. Google may process IP-derived general location and SDK diagnostics as described above.
We use safeguards appropriate to the nature of the information, including encrypted network connections, authenticated access, and access controls. No method of transmission or storage is completely secure.
In-app account deletion removes account-linked server data and stored profile images before removing the Firestore profile and Firebase Authentication identity. If required cleanup fails, the identity remains available so deletion can be retried safely. Backup copies may remain until they are overwritten through the applicable backup cycle. See the Account Deletion page for instructions and additional details.
Depending on applicable law, you may ask to access, correct, or delete your personal data, or object to or restrict certain processing. You may update profile information in the App, delete your account from the profile screen, withdraw notification, camera, or photo permission in device settings, or contact us for help. We may need to verify your identity before completing a request.
The App is not directed to children under 13, and we do not knowingly collect personal information from children under 13 without appropriate authorisation. If you believe a child has provided personal information improperly, please contact us.
Our providers may process information in countries other than the country where you live. Where required, we use appropriate safeguards for these transfers.
We may update this policy as the App or legal requirements change. We will post the revised policy and change the date shown above. We will provide additional notice when required by law.
For privacy questions or requests, contact:
Dragon Worlds HK 2027 is developed by BetterAt, a product of OceanFlow Limited.