1. Who is responsible for your information?
The Service helps maritime companies assess crew competence and, where purchased and enabled, prepare for SIRE 2.0 tanker inspections. Assessors can work offline; company administrators manage users, vessels, subscriptions and reports on the website.
A subscribing company generally determines why and how its crew and assessment information is used and may be the data controller. Marewise processes that information on its behalf. Marewise may separately be a controller for account administration, billing, security, support and legal compliance. Customer contracts and any data processing agreement describe the applicable roles.
Contact info@marewise.com. MareWise FZE-LLC. Registered address: Example Office 101, Example Business Centre, Sharjah, United Arab Emirates (dummy preview address). Licence: MW-PREVIEW-000001 (dummy preview licence).
2. Information we collect
- Account and profile information: username, email, hashed password credential, verification status, role, name, salutation, title, rank, gender, birth date, phone, address, profile photo, experience and onboard status. Passwords are not stored in plain text.
- Company information: company name, contact information, billing and shipping addresses, website and VAT number. Login records may include device identifier, phone type, login time, IP address and browser information.
- Crew information: name, rank, nationality, age or birth date, gender, contact details, company, profile photo and training or certificate reference text. Certificate references are intended as references rather than copies of certificates.
- Assessment information: answers, ratings, positive or negative behavioural observations, notes, progress, photos, ports of boarding or landing and GPS location used to determine the relevant sea area. SIRE 2.0 preparation may include crew interview audio and written interview notes.
- Vessel information: vessel name, IMO number, flag, call sign, type, dimensions, class, owner, operator, images and Equasis vessel and inspection records, including cached copies and assessment snapshots.
- Billing and support information: Stripe customer, payment, subscription and invoice references, plan details, support correspondence and diagnostic information. Stripe handles payment-card details; Marewise does not store full card numbers. Where a recorded support-call feature is offered, recording notice is provided before recording.
- Integration information: encrypted Equasis login credentials supplied by an authorised user and information exchanged with enabled payment, hosting, storage, email, Microsoft 365 or notification services.
- Do not upload passport numbers, seafarer identity-book numbers, medical records or other sensitive documents unless Marewise expressly approves that data type and provides appropriate instructions.
3. How we obtain and use information
We receive information from account holders, Company Admins and Assessors; from the subscribing company; from devices using permitted camera, microphone, location and photo features; from an authorised Equasis connection; and from Stripe and other enabled service providers.
We use it to authenticate and secure accounts, verify email and reset passwords; administer company users and vessels; conduct assessments and record evidence; determine sea areas; generate PDF reports and company fleet overviews; provide paid SIRE 2.0 preparation; operate billing and plan limits; synchronise contacts with Microsoft 365 where enabled; troubleshoot reliability and sync conflicts; answer support requests; and comply with law or protect legal rights.
We do not sell personal information or use third-party advertising analytics. Fleet analytics display the company’s own fleet statistics. We will not use information for a materially different purpose without an appropriate legal basis and any required notice or consent.
4. Legal grounds and device permissions
Where a legal basis is required, it may be performance of a contract, legal obligations, legitimate interests balanced against individual rights, or consent. The basis depends on the information, jurisdiction and whether the customer or Marewise determines the purpose.
Customers must have authority and a lawful basis to supply crew information, provide required notices and obtain required permissions or consent before recording interviews, capturing identifiable images or collecting location information.
Camera access captures evidence photos; microphone access records interviews; location while in use identifies assessment sea areas; and photo/media access selects images. Manage optional permissions in device settings. Denying a permission may prevent the corresponding feature from working.
5. Offline use and information on your device
The mobile app stores a local copy of current assessments, which may include crew information, answers, photos and audio, so an Assessor can continue working without a connection. Information syncs with the server when connectivity is available.
The local mobile data copy is not encrypted. The app PIN does not encrypt locally stored information. Protect the device itself and restrict physical access; do not treat the PIN as device-level encryption.
Logout attempts to upload unsent work, then signs out. It retains this account’s offline workspace and app PIN for the next sign-in, including after a successful upload. Clear local data explicitly deletes the local workspace and can delete unsent work. Confirm successful syncing before clearing data, uninstalling or handing a device to someone else.
Mobile sessions last approximately seven days and may require signing in again after a long voyage. In a conflict, the newer server version may take precedence and the conflict may be logged. Where enabled, local Wi-Fi peer sync can transfer information directly between devices.
6. Recipients and international transfers
Information is shared as reasonably necessary to operate, secure, support and bill for the Service, follow documented customer instructions or comply with law. Recipients may include Stripe for billing; email providers for verification and reset messages; hosting and file-storage providers; Microsoft 365 for enabled contact sync; Firebase for enabled notifications; and Equasis when the user authorises vessel retrieval.
Microsoft 365 contact sync may include name, phone, address, birthday, company and job title. Internal calling or summarisation providers receive information only if the relevant feature is enabled and its processing is disclosed. A configurable integration is not a statement that every provider is active.
We may also disclose information under valid legal process, to investigate fraud or security incidents, to protect rights or safety, or as part of a corporate transaction with appropriate safeguards.
Providers may process information outside the customer’s country. Preview example deployment: application hosting in the UAE, file storage in the EU and payment processing in the United States. These are dummy locations for testing, not a representation of production routing. Where required, transfer safeguards include contractual protections and an applicable lawful transfer mechanism. Request the deployment-specific subprocessor and transfer information at info@marewise.com.
7. Retention
We keep information as reasonably necessary to provide the Service, maintain company records, resolve disputes, enforce agreements and comply with law, taking account of customer instructions and the type of record.
Preview example retention: active account data is kept while the account is open; closed-company records are available for export for 30 days and scheduled for deletion or anonymisation within 90 days; billing records are kept for seven years; support requests for two years. These dummy periods are illustrative and subject to applicable legal holds and customer obligations.
Equasis cache entries refresh after 30 days; a snapshot also remains with its assessment. Temporary upload files are removed after 24 hours. Access tokens expire after approximately seven days and refresh tokens after approximately 30 days.
Deleting or hiding a record can be a soft delete, leaving the underlying record in the database. Backup copies may retain deleted information for up to 90 days in this preview example. We do not promise immediate permanent erasure from every system.
8. Security
Measures include hashed passwords, encrypted Equasis credentials, HTTPS, company data separation, role-based permissions and limits on login attempts and requests. No online service can guarantee absolute security. Two-factor authentication and encryption of the local mobile data copy are not currently offered.
Use individual logins, protect passwords and PINs, secure devices and sync promptly. Report suspected unauthorised access or a lost device to your Company Admin and info@marewise.com.
9. Rights, account deletion and company records
Depending on applicable law, individuals may request access, correction, deletion, restriction, objection, withdrawal of consent or information about processing and transfers. Legal exceptions, contractual recordkeeping duties and other people’s rights may limit a request. We may verify identity and authority before acting.
For crew and assessment records, contact the employer or Company Admin first because the company may control the records. You may also email info@marewise.com. A self-service data-download tool is not currently available; request assistance from support.
Use Delete account in your account settings or contact support to request account closure. You must verify your password and confirm deletion. A company owner must contact support to transfer ownership and billing before deleting the account, so the company is not left without an owner. Account deletion removes access and anonymises the individual profile; company assessment work remains for recordkeeping under a Deleted User label. Limited de-identified statistics, such as rank or nationality, may be retained where lawful. Account closure does not automatically delete all company assessment records or backup copies.
10. Children and age
The Service is intended for authorised maritime business use, not for children. Preview eligibility is age 18 or older for user accounts. Companies must take appropriate care and have a lawful basis for any crew profile concerning someone below the applicable age of majority.
11. Changes and contact
We publish updated policies with a version and last-updated date and provide appropriate notice through the Service or email. Where required, we obtain consent before material changes take effect.
Contact info@marewise.com. MareWise FZE-LLC. Registered address: Example Office 101, Example Business Centre, Sharjah, United Arab Emirates (dummy preview address). Licence: MW-PREVIEW-000001 (dummy preview licence).