Back

Privacy Policy

Privacy Policy

Last updated: August 23, 2026

This Privacy Policy explains what data On Island (operated by Onisland.app LLC) collects, why we collect it, how we use it, and the choices you have. It covers the website and installable web app at onisland.app and the On Island apps for iOS and Android. We try to keep this short and direct.

1. What we collect

If you browse anonymously: standard server logs (IP address, browser, page accessed, timestamp), used for security, abuse detection, and aggregate traffic analysis. Rate limiting keys some counters to your IP address. Your persona choice (visitor / local / villa owner / snowbird) and language choice are kept in cookies on your device so the app stays personalized without an account.

If you create an account: email address, password (stored as a salted hash by our auth provider — we never see the plaintext), optional display name, optional phone number, your user type, your language preference, and — for snowbirds and villa owners — the months you are on-island and property count, if you provide them. We also keep sign-up and sign-in timestamps.

If you save listings, call, or review: the listings you saved, the reviews you wrote (public, shown with your display name), and engagement events — views, calls, saves, and shares of listings. Engagement is shown to business owners only as aggregate counts on their own listing; owners viewing their own listing and administrators are not counted.

If you submit a beach report (locals): the beach, the conditions you reported, and the timestamp. Reports feed the public beach-status grid.

If you list a business: owner name, business name, public contact phone and email, business address and map location or service area, photos and menu files (public on your listing; menus are also machine-read, including optical character recognition, to power menu search), hours, description, social links, subscription and payment status, and optionally a private contact address and USVI license number — those last two are visible only to our administrators and are never published. When you accept the Business Terms we record the date, your IP address, and your browser user-agent as a permanent record of the agreement.

Moderation records: administrator actions (approvals, declines, suspensions, content removals) are logged with the acting administrator and IP address as a permanent audit record.

Cookies and on-device storage: a session cookie when signed in, language and persona cookies, and Sentry error-monitoring identifiers. On your device, the app stores things like an in-progress business signup draft (never your password), your install-prompt dismissal, and offline page caches. We do not use advertising or cross-site tracking cookies.

2. Why we collect it

  • Run the directory: display listings, route phone calls, sort search results, render the daily Brief
  • Account features: save / review / report only work with a signed-in account
  • Payments: business subscriptions and Quick Access placements need billing records
  • Moderation and abuse prevention: stop fake businesses, review spam, and account abuse
  • Communication: transactional email only (signup confirmation, password reset, business approval/decline, renewal reminders, suspension notices) — we do not send marketing email
  • Analytics for owners: businesses see aggregated views/calls/saves/shares on their own listings; we run no third-party analytics or ad trackers

3. Who we share it with

On Island does not sell, rent, or trade your personal data. We share data only with the services that run the product:

  • Hosting and infrastructure — Supabase (database, authentication, file storage), Vercel (hosting), Upstash (rate limiting), Sentry (error monitoring; when an error occurs a replay of the affected session may be captured to diagnose it)
  • Payments — Braintree, a PayPal service (business subscriptions and placement purchases). Card details go from your browser directly to Braintree; we receive only a customer reference and a card label such as brand and last four digits.
  • Email — Resend delivers our outbound email; inbound mail to @onisland.app addresses is forwarded to our support inbox by ImprovMX
  • Maps — the website uses Mapbox, the iOS app uses Apple Maps, and the Android app uses OpenFreeMap; map requests carry your IP address to whichever of those is drawing the map, but no account data
  • Bot protection — Cloudflare Turnstile checks sign-up and password-reset submissions
  • Menu processing — uploaded menu files are sent to Google Cloud Vision for text extraction
  • Password safety — passwords are screened against the Have I Been Pwned breach database using k-anonymity: only the first five characters of a one-way hash leave our server; your password never does
  • Public data feeds — NOAA, USGS, NDBC, Open-Meteo, AeroDataBox, CruiseMapper, and similar read-only sources for the Island Brief; we send them no personal data
  • Legal compliance — if required by law, court order, or to protect On Island, our users, or the public

There is no advertising network and no tracking pixel from Google, Meta, or anyone else.

4. Where data is stored and how long

Data is hosted with Supabase (US East region) and Vercel. Connections are encrypted and backups are encrypted at rest. We retain data while your account is active. After deletion, most personal data is removed immediately (see below); business agreement records, subscription and payment records, and moderation audit logs are retained as legal, tax, and accounting records (typically 7 years for transactional records).

5. Your rights and choices

  • Access the data we hold about you — email support@onisland.app
  • Correct your data via your account or business dashboard
  • Delete your account. In the iOS and Android apps you can delete a consumer account yourself (Account → delete); deletion is immediate and removes your profile, reviews, saved listings, flags, and beach reports, and disconnects your remaining engagement events from your identity. On the web, email support and we will do the same. Business accounts are closed through support because billing and legal records must be preserved — see the Business Terms.
  • Block anyone whose reviews or beach reports you would rather not see — tap Block on one of their reviews. Blocking is private: the other person is not told, keeps their own posts, and cannot see that you blocked them. Undo it any time from your Account screen.
  • Export your data as JSON on request
  • Language — your language preference is stored only to serve you the right language

All email we send is transactional; there is no marketing list to unsubscribe from.

6. Children

On Island is not directed at children under 13, and we do not knowingly collect data from children under 13. If you believe a child has signed up, contact us and we will delete the account.

7. Security

We use industry-standard practices: encrypted connections (HTTPS), password hashing and breach screening, row-level database security, signed single-use email actions, rate limiting, and a permanent audit log of administrative actions. No system is perfectly secure; if we detect a breach affecting your data we will notify you promptly, in the manner and timeframe required by law.

8. Changes to this policy

We update this page and the "Last updated" date when the policy changes. For significant changes that affect how we use your data, we will email account holders before the change takes effect.

9. Contact

Privacy questions, data requests, or complaints: support@onisland.app

On Island · Onisland.app LLC · St. Thomas, U.S. Virgin Islands