Offline, privacy & proof
What Salinity reads, stores and shares.
Trust holds the guarantees underneath every other category: Salinity is a guest on the boat, sensitive records remain private, and unproven work is labelled before it is marketed.
What stays private
Example only — not live boat data.
Complete system index
Everything in Trust.
Every tool carries its status. Available, not in current app, unproven, and roadmap never get mixed together.
Boat & data boundaries
Read-only design
The supported gateway path listens for boat data and includes no product feature for commanding equipment on the NMEA 2000 network.
Offline core
Regulations, seamanship cards, the Emergency Plan, maintenance reminders, and tide and current predictions already saved on the phone keep working without internet.
Worldwide NMEA core
Supported engine, GPS, depth, fuel, battery, and environmental PGNs work wherever the compatible boat network goes; regional content depends on coverage.
Private records
GPS tracks, spots, catches, identity, and raw boat data are never exposed in the public activity feed.
Aggregate presence only
The public activity count keeps, for each signed-in account, only a first-seen time, a last-seen time and a free or paid label. It shows counts, not behavior, locations, boats or activity details.
Photo scrubbing
Camera images are re-encoded without their original EXIF or embedded location before attachment.
At-rest app encryption
Additional encryption for the phone-resident raw capture buffer remains planned.
Operational proof
Bounded storage
Capture size, line buffers, timeouts, and reconnect behavior are capped to protect the phone.
Verified downloads
Offline relief packs are reopened and checked before the app calls them ready.
Release checks
Build, route, account, storage, legal, and API checks run before website releases; on-water behavior needs separate testing on a real boat.
Signed builds
The Android app is signed, and salinity.live publishes its SHA-256 checksum at /api/android/latest.
Cloud backup and restore
While you are signed in, the app copies your boats, maintenance, marks, catch records, Emergency Plan, operating areas and regulation bookmarks to your Salinity account, and uploads completed trips while Automatic trip backup is on, which is the default. On a new phone, sign in with the same account and they come back on the first internet connection, or tap Sync and restore now in Settings. Catch photos, app settings and trips that never uploaded do not come back. A full restore onto a new phone has not been tested on a real phone.
Evidence Locker
Packages selected incidents, service records, documents, timestamps, and integrity details for owner-controlled sharing without making authenticity guarantees.
iOS
The current app is Android only; an iPhone version is not yet available.
Why it helps aboard
The app records one signed-in check-in time for aggregate adoption counts. It does not publish or collect viewed screens, session duration, device details, boat data, trips, catches, or positions for that feed.
Signed field preview