Lazarette — Privacy Policy

Last updated: 2026-08-15

Lazarette is a vessel-management and maintenance app for boat owners. It is built local-first: your boat's records live on your phone or tablet, and the app works fully offline.

This policy describes what the app does today. "Lazarette", "we" and "our" mean Paul French, the developer. the Bosun is the name of the AI crewmate inside the app, and Bosun AI is the name of the subscription — neither is a separate company.

What stays on your device

Your catalog — vessels, locations, components, spares, tools, tasks, manuals, photos, voice transcripts and your conversations with the Bosun — is stored in a database on the device. Signed out, and with the AI features untouched, none of it leaves the device.

You can use Lazarette this way indefinitely. Signing in is optional.

What leaves your device, and when

There are exactly three paths off the device. Each is listed below.

1. AI features — when you use them

Sign-in is required for AI. When you record a voice walkthrough, photograph a nameplate, add a PDF manual, or ask the Bosun a question, the relevant input is sent to our server, which passes it to an AI provider and returns the answer.

Depending on the feature, what is sent may include:

• the photo you took or attached;
• pages of a PDF manual, rendered as images;
• the text transcript of a voice walkthrough;
• your question, and the earlier turns of that conversation;
• context from your catalog — your vessel's name and details, component and equipment names, open tasks, document titles, and the names and locations of tools, spares and safety gear. When your question is about the boat's identity or specifications, this can include recorded details such as the hull identification number and call sign.

Our processors for this are:

• Supabase — hosts our server functions, database and file storage. Every AI request passes through it. Lazarette never contacts an AI provider directly from your device. Our Supabase project is hosted in the EU (AWS eu-west-1, Ireland), so the database, your cloud backup, and any manuals and photos you sync are stored in the European Union.
• Anthropic (Claude models) — question answering and structured extraction from photos, PDFs and transcripts. Under Anthropic's commercial terms, inputs and outputs sent through the API are not used to train their models.
• Voyage AI — converts your question and short summaries of your manual pages into numeric embeddings, so the right manual page can be found. Text only; no images.

Anthropic and Voyage AI are US companies and process what is sent to them outside the EU. So while your stored data stays in Ireland, the content of an individual AI request does leave the EU while it is being answered. Turning Bosun AI off in Settings stops that entirely.

We keep a record of each AI request — which operation ran, which model, and how many tokens it used — linked to your account. It meters usage against your subscription and lets us watch costs. It does not record what you looked at inside the app.

If you rate an answer with a thumbs up or down, we store that rating, your optional comment, and the question and answer it refers to.

2. Cloud backup — automatically, once you sign in

Signing in turns on cloud backup. Once signed in, Lazarette snapshots your boat to private storage in our Supabase project, and refreshes it when you leave the app (at most once every ten minutes). You can also trigger a backup by hand.

The snapshot is a complete copy: every table in your catalog, plus your photos and the original PDF manuals you added, plus your voice transcripts and saved conversations with the Bosun.

It is stored in a private area keyed to your account. Nobody else can read it, and it is not used for anything except restoring your boat to a device.

If you would rather nothing were stored off-device, do not sign in. The catalog works fully offline, and there is a local export you can save wherever you like instead.

3. Purchases

In-app purchases and subscriptions are handled by Apple or Google, and managed on our side by RevenueCat. RevenueCat receives your Lazarette account identifier and the purchase records from the store, and tells us whether your subscription is active. We never see your payment details.

If purchase support is configured in your build, the RevenueCat SDK contacts its service when the app starts, before you buy anything.

Voice input

Voice is transcribed by your device's own speech recogniser — Apple's on iOS, Google's on Android. Lazarette asks for on-device transcription every time it opens the microphone, so the default is that the audio never leaves your phone.

What that request is worth differs by platform, and we would rather tell you than round it up:

• On iOS it is a hard requirement. If the device has no offline dictation model for your language, iOS refuses the request outright rather than quietly using the network. When that happens Lazarette does not fail silently and does not switch you over silently either: it shows a notice on screen while you are still recording saying the audio is leaving the device, and Apple transcribes instead.
• On Android it is a preference. Lazarette uses the on-device recogniser where the platform offers one and always asks for offline processing, but Android falls back to its default recogniser when no local model is installed and does not report which one ran. So on Android we can tell you what we asked for, not what happened.

Where the audio does reach Apple or Google, that processing is governed by their privacy policies, not this one.

In every case, Lazarette itself never receives, stores or transmits an audio recording — not to our servers, and not to the AI service. The app receives only the text. That text is then sent to the AI service as described above, to turn "there's a spare impeller in the port cockpit locker" into a catalog entry.

The microphone is only active on the two screens that record: the voice walkthrough, and the voice option in the ship's-log entry sheet.

Fonts

Lazarette's typefaces are fetched from Google's font service the first time the app runs, then cached on the device. This is a plain request for a font file; no account information is attached. It happens whether or not you are signed in.

Sign-in and your account

Sign-in is by Sign in with Apple (iOS) or Google (Android). We never see or handle your password.

We store the account identifier and email address the provider gives us — including Apple's private-relay addresses if you choose to hide your email — in our Supabase project. We also record when you accepted this policy and the AI data-sharing notice, so we have an audit trail of what you agreed to.

What Lazarette does not do

• No advertising, and no data sold or shared with advertisers or data brokers.
• No analytics SDK and no crash reporter. There is no third-party tracking code in the app at all, and no cross-app or cross-site tracking of any kind.
• No location tracking. Lazarette never asks for your location.
• No listening outside the two screens that record: the voice walkthrough and the ship's-log entry sheet.

Controlling AI

Settings → AI features is a complete off switch. With it off, no AI call leaves the device — not the background work (voice-walkthrough extraction, PDF manual indexing, nameplate reading), and not the actions you start yourself (asking the Bosun, pulling details or equipment out of a manual you have open, looking closer at a manual page, saving a conversation, or rating an answer). The catalog stays fully usable.

Before the first time you attach a photo to a chat, Lazarette shows a one-off notice explaining that the photo leaves the device.

Deleting your account

Settings → your account → Delete account. You will be asked to sign in again to confirm.

Deleting removes your account and its sign-in identity, your subscription record, your consent records, your cloud backup and its metadata, your record of AI requests, any feedback you sent us on an AI answer, and any boat where you were the only member. Boats you share with another sailor survive — only your membership is removed. Manuals and photos stored for you are deleted with them.

The catalog on your device is wiped at the same time, and the app returns to a fresh state. Anything you have exported yourself is yours to keep.

Children

Lazarette is not directed at children and we do not knowingly collect data from anyone under 13.

Changes

We will update this policy as the app changes, and change the date at the top. Material changes will be announced in the app before they take effect.

Contact

Email hello@lazarette.app.