OFFLINE, PRIVACY & PROOF
A boat app should say what it reads, what it stores, and what leaves the phone.
Trust holds the guarantees underneath every other category: Salinity is a guest on the boat, sensitive records remain private, and unproven work is labelled before it is marketed.
What stays private
Example only — not live boat data.
COMPLETE SYSTEM INDEX
Everything in Trust.
Every tool carries its status. Available, field validation, and roadmap never get mixed together.
Boat & data boundaries
Read-only design
The supported gateway path listens for boat data and includes no product feature for commanding equipment on the NMEA 2000 network.
Offline core
Engine checks, local alerts, downloaded packs, trip recording, and stored references keep working without internet.
Worldwide NMEA core
Supported engine, GPS, depth, fuel, battery, and environmental PGNs work wherever the compatible boat network goes; regional content depends on coverage.
Private records
GPS tracks, spots, catches, identity, and raw boat data are never exposed in the public activity feed.
Aggregate presence only
The active-user feed stores one account check-in time and exposes counts—not behavior, locations, boats, or activity details.
Photo scrubbing
Camera images are re-encoded without their original EXIF or embedded location before attachment.
At-rest app encryption
Additional encryption for the phone-resident raw capture buffer remains planned.
Operational proof
Bounded storage
Capture size, line buffers, timeouts, and reconnect behavior are capped to protect the phone.
Verified downloads
Offline relief packs are reopened and checked before the app calls them ready.
Release checks
Build, route, account, storage, legal, and API checks run before website releases; on-water behavior requires separate field validation.
Signed builds
Phone and watch builds use verified signing and published checksums.
Cloud restore
Conflict-aware account recovery remains out of the feature list until its backend migration is proven live.
Evidence Locker
Packages selected incidents, service records, documents, timestamps, and integrity details for owner-controlled sharing without making authenticity guarantees.
iOS
The current app is Android only; an iPhone version is not yet available.
WHY IT HELPS ABOARD
The app records one signed-in check-in time for aggregate adoption counts. It does not publish or collect viewed screens, session duration, device details, boat data, trips, catches, or positions for that feed.
SIGNED FIELD PREVIEW