OFFLINE, PRIVACY & PROOF
A boat app should say what it reads, what it stores, and what leaves the phone.
Trust holds the guarantees underneath every other category: Salinity is a guest on the boat, sensitive records remain private, and unproven work is labelled before it is marketed.
What stays private
Example only — not live boat data.
COMPLETE SYSTEM INDEX
Everything in Trust.
Every tool carries its status. Available, field validation, and roadmap never get mixed together.
Boat & data boundaries
Read-only forever
An automated test rejects any network-stream write path that could transmit onto the boat’s bus.
Offline core
Engine checks, local alerts, downloaded packs, trip recording, and stored references keep working without internet.
Worldwide NMEA core
Supported engine, GPS, depth, fuel, battery, and environmental PGNs work wherever the compatible boat network goes; regional content depends on coverage.
Private records
GPS tracks, spots, catches, identity, and raw boat data are never exposed in the public activity feed.
Aggregate presence only
The active-user feed stores one account check-in time and exposes counts—not behavior, locations, boats, or activity details.
Photo scrubbing
Camera images are re-encoded without their original EXIF or embedded location before attachment.
At-rest app encryption
Additional encryption for the phone-resident raw capture buffer remains planned.
Operational proof
Bounded storage
Capture size, line buffers, timeouts, and reconnect behavior are capped to protect the phone.
Verified downloads
Offline relief packs are reopened and checked before the app calls them ready.
2,167 automated tests
The documented preflight covers 235 suites alongside type checks and release validation.
Signed builds
Phone and watch builds use verified signing and published checksums.
Cloud restore
Conflict-aware account recovery remains out of the feature list until its backend migration is proven live.
iOS
The current app is Android only; an iPhone version is not yet available.
WHY IT HELPS ABOARD
The app records one signed-in check-in time for aggregate adoption counts. It does not publish or collect viewed screens, session duration, device details, boat data, trips, catches, or positions for that feed.
SIGNED FIELD PREVIEW