Last updated: September 5, 2026
BetterAt, a product of OceanFlow Limited ("BetterAt", "we", "our", or "us"), operates the Dragon Worlds HK 2027 mobile application (the "App") and is the controller of the personal data described in this policy. This policy explains what the App collects, why we use it, when it is disclosed, and the choices available to you.
When you create or use an account, we collect your email address, display name, authentication provider, internal user identifiers, and account role or onboarding type. If you provide them, we may also collect a profile photo and sailing profile details such as sail number, boat class, yacht club, attendance information, and a claimed boat identity. Authentication credentials are handled by Firebase Authentication, Google, or Apple, depending on the sign-in method you choose.
Boat features may store a boat name, sail number, account membership, follow state, container or shipping reference, logbook URL, and the name and size metadata of a shared VKX file. The current VKX share handler stores file metadata, not the file contents. Event, race, boat, shipment, map, and weather coordinates describe venues or assets. The App does not request, collect, retain, or transmit the precise or approximate location of your device.
Race Bot sends your typed questions, user identifier, role, session context, and the information needed to return an answer to our backend. Questions the bot does not recognise may be retained with related response status so we can improve the service. If you choose Ask the Committee, the App asks you to select email or WhatsApp as a reply channel. It then collects the reply email address or phone number you provide, creates a support ticket, and sends the question and reply contact to the Organising Committee so a person can respond.
For signed-in users, the App collects account-linked sessions, timestamps, screens viewed, feature actions, and product interaction events. These can include weather, sponsor, and BetterAt interactions. The App uses this information to understand feature use and improve the service. The current App does not provide a separate analytics opt-out.
If you allow notifications, we associate an Expo push token, device platform, account identifiers, notification preferences, and selected boat follows with your account so we can deliver requested alerts. You can withdraw notification permission in your device settings.
Camera and photo-library access is optional. The App uses it only when you choose a profile image or, for an authorised event role, scan a check-in QR code. A selected profile image is stored in Firebase Storage and linked to your account. The App does not upload your photo library.
The current App has no active calendar integration and does not request access to your calendar. Booking forms are not enabled inside the App. Race forms and selected booking or event links open an external website or app, and information you submit there is collected under that provider's privacy terms.
We use the information described above to:
We do not sell personal information and do not use it to track you across other companies' apps or websites. We disclose information in these circumstances:
The App displays or links to official race documents and results, sponsor and partner content, maps, weather information, and event forms. External forms and websites open outside the App and apply their own privacy terms. Map and weather providers receive the event or boat coordinates needed to provide their content, not your device location.
We use safeguards appropriate to the nature of the information, including encrypted network connections, authenticated access, and access controls. No method of transmission or storage is completely secure.
In-app account deletion removes account-linked server data and stored profile images before removing the Firestore profile and Firebase Authentication identity. If required cleanup fails, the identity remains available so deletion can be retried safely. Backup copies may remain until they are overwritten through the applicable backup cycle. See the Account Deletion page for instructions and additional details.
Depending on applicable law, you may ask to access, correct, or delete your personal data, or object to or restrict certain processing. You may update profile information in the App, delete your account from the profile screen, withdraw notification, camera, or photo permission in device settings, or contact us for help. We may need to verify your identity before completing a request.
The App is not directed to children under 13, and we do not knowingly collect personal information from children under 13 without appropriate authorisation. If you believe a child has provided personal information improperly, please contact us.
Our providers may process information in countries other than the country where you live. Where required, we use appropriate safeguards for these transfers.
We may update this policy as the App or legal requirements change. We will post the revised policy and change the date shown above. We will provide additional notice when required by law.
For privacy questions or requests, contact:
Dragon Worlds HK 2027 is developed by BetterAt, a product of OceanFlow Limited.