Privacy Policy

Locker9 is an independent, unofficial tool developed and operated by Primavera LLC, 30 N Gould St Ste N, Sheridan, WY 82801, USA ("we", "us", or "our").

Locker9 is not affiliated with, endorsed by, or connected to any cruise operator or their subsidiaries. It is an independent crew management tool built by a crew member for seafarers working on cruise ships.

For privacy-related questions, contact us at: info@locker9.link

When you create an account and use Locker9, we collect:

• ·Account data — your name, email address, and department/role.
• ·Contract data — ship assignments you enter: ship name, role, start and end dates.
• ·Certificate data — professional certifications you choose to add: name and expiry date.
• ·Financial data — salary entries, expenses, and remittances you voluntarily log. This includes amounts, currencies, and dates. We do not collect bank account details or payment card information.
• ·Push notification tokens — if you enable push notifications, we store your browser's push subscription endpoint to deliver alerts. You can revoke this at any time via Settings.
• ·Contract submissions — if you choose to contribute a contract document via Crew Rights & Info to help expand that page's content, we store the file you upload. You are instructed to redact personal details before uploading, but the file itself, and any department/country you tag it with, is treated as personal data. This is entirely voluntary — see Section 4 for how long we keep it.
• ·Photos and other content you choose to add — your profile photo; text and an optional photo attached to Port Tips you share with other crew; notices you post; and entries you write in your private Diary, including any photos you attach there. Diary entries are private by default — see Section 5 for the one way an entry can become visible to others.
• ·Usage data — basic server logs (IP address, browser type, pages visited) retained by our infrastructure provider for security and debugging. We do not use this data for profiling or advertising.

We do not collect payment card information, biometric data, or any data from third-party sources.

We process your personal data on the following legal bases under GDPR Article 6:

• ·Contract performance (Art. 6(1)(b)) — processing your name, email, and account data is necessary to provide the service you signed up for.
• ·Legitimate interests (Art. 6(1)(f)) — server logs are retained to maintain security and diagnose technical issues.
• ·Your consent (Art. 6(1)(a)) — contract and certificate data you voluntarily enter is processed solely to display it back to you and calculate your service statistics.

Your data is stored on servers operated by Supabase Inc. (our data processor), located in Frankfurt, Germany (EU). All data is encrypted in transit (TLS) and at rest.

Primavera LLC is based in the United States. As the data controller, we access your data only to provide support or resolve technical issues. Your data physically remains within the EU at all times.

We retain your data for as long as your account is active. When you delete your account, all your personal data is permanently deleted within 24 hours.

Contract submissions are handled on a shorter, fixed schedule regardless of account status: once a submission has been reviewed, the uploaded file is automatically deleted within 90 days. If a submission is never reviewed, the file is automatically deleted after 12 months. This runs on an automated schedule, not on request.

By creating an account and accepting these Terms, you acknowledge and agree that your profile and current ship position are visible to all other registered Locker9 users, including crew members from different ships and departments.

Within Locker9, visibility works as follows:

• ·Your name, department, current ship, and next assignment are visible to all other logged-in crew members in the directory.
• ·Your contracts, certificates, and notes are visible only to you.
• ·Port Tips you share — practical info about a port, with an optional photo — are visible to all other logged-in crew members, since the point of a tip is to help whoever visits that port next.
• ·Your Diary is private by default — entries are visible only to you, the same as your contracts and certificates — unless you explicitly choose to share an individual entry (see below).
• ·The admin (the app operator) can view all profiles for technical support purposes.

Public "Share your voyage" link. From your Profile or Dashboard, you can generate a public link and QR code to share with family or friends. This is entirely optional and only exists if you choose to create it. Anyone with that link — no Locker9 account or login required — can see your name, current ship, role, department, current port or next destination, and a countdown until your contract ends. When you share this link (for example, by pasting it into a messaging app), that app may automatically fetch and display a preview image containing this same information, even before the recipient opens the link — this image is generated on request and is not stored by us beyond what the receiving app itself caches. You can stop sharing this link at any time; it carries no persistent identifier that can be revoked, so anyone who already has the link may continue to view it.

Diary sharing.My Cruise Diary is private by default. If you choose to mark an individual entry as shared, that entry's title, text, mood, and any photos attached to it become visible on the same public "Share your voyage" page described above — to anyone with that link, no account required. This is an explicit, per-entry choice; nothing in your Diary is ever shared automatically, and the rest of your Diary stays private regardless of what you've shared. You can unshare an entry at any time by editing it and turning sharing back off.

We use the following third-party data processors:

• ·Supabase Inc. — database and authentication infrastructure. Data is stored in Frankfurt, Germany (EU). Privacy policy: supabase.com/privacy.
• ·Resend Inc. — transactional email delivery (account confirmation, password reset, onboarding emails). Your email address is shared with Resend solely to deliver these messages. Privacy policy: resend.com/legal/privacy-policy.

Both processors act strictly on our behalf and under our instructions. We do not sell, rent, or share your personal data with any third party for marketing or commercial purposes.

Locker9 uses strictly necessary cookies only — specifically, a session cookie that keeps you logged in between page visits. This cookie contains no personal information beyond an encrypted session token.

Because this cookie is strictly necessary for the app to function, no cookie consent banner is required under ePrivacy Directive Article 5(3). We do not use analytics, advertising, or tracking cookies.

If you are located in the EU/EEA, you have the following rights:

• ·Right of access — request a copy of all personal data we hold about you.
• ·Right to rectification — correct inaccurate data directly in your profile, or contact us.
• ·Right to erasure — delete your account and all associated data at any time via Settings → Delete account.
• ·Partial deletion, without deleting your account — you can permanently remove individual items directly in the app at any time: contracts, certificates, expense entries, salary/remittance entries, port tips, and Diary entries (via the delete control on each item), and your profile photo (Profile → remove photo). These are deleted immediately and are not retained. A message you delete for everyone is immediately hidden from all participants and removed from search and previews; the record itself is retained for abuse-investigation purposes and is not independently restorable by you or other users.
• ·Right to data portability — request an export of your data in a machine-readable format.
• ·Right to object — object to processing based on legitimate interests.
• ·Right to lodge a complaint — with your national data protection authority. If you are in Germany, this is the BfDI (bfdi.bund.de).

To exercise any right, contact us at info@locker9.link. We will respond within 30 days.

Locker9 is intended solely for working adults employed in the cruise industry. We do not knowingly collect data from anyone under the age of 18, and account creation is not open to the public — it is a private workforce tool for verified crew members.

We have zero tolerance for child sexual abuse and exploitation (CSAE) material or conduct anywhere in Locker9, including in direct messages, group chats, notices, and any other user-generated content. Any account found to violate this is immediately suspended and permanently deleted, and where required by law we report the matter to the relevant authorities.

To report a concern, or for any question about our child safety practices, contact info@locker9.link. We review and respond to every report.

We may update this Privacy Policy as the app evolves. We will notify registered users of material changes via the app. The "Last updated" date at the top of this page always reflects the current version.