Venturi

Privacy Policy

Last updated: August 2026

Venturi ("we," "our," or "us") respects your privacy and is committed to protecting your personal information. This policy explains how we collect, use, disclose, and safeguard your information when you use the Venturi mobile app, the Venturi Apple Watch app, and venturisports.com.

Your use of Venturi is also governed by our Terms of Service and, if you book or host, our Marketplace Terms.

Information We Collect

Account Information

  • Email address
  • Profile information (name, profile photo, location preferences)
  • User preferences and settings

Activity Data

  • Sessions you record on your phone or Apple Watch (GPS track, speed, distance, duration, and heart rate where your device provides it)
  • Workout and activity data from Apple HealthKit
  • Activities imported from Garmin and Strava
  • Manual activity entries
  • Session photos and videos you upload
  • Your gear list, and course, leaderboard, challenge and personal-record results

Location Data

Location is central to what Venturi does, and we collect more of it than most apps. Specifically:

  • Precise location to show nearby spots, conditions and recommendations
  • Background location while you are recording a session, so the track continues when your screen is off or the app is not in the foreground
  • Geofencing around foil spots, to detect arrival and departure and to offer to start a recording
  • Spot presence — when you are at a spot, so features like "friends on the water" can work
  • Live tracking, when you turn it on, which shares your position during a session with the people you choose

You control this through your device's location permissions, and you can revoke or downgrade them at any time. Background location and presence features stop working if you do. Your recorded GPS tracks are stored on our servers, and a copy of the original upload is retained so we can re-process a track if our cleaning of it turns out to be wrong.

Content You Post

  • Feed posts, comments, reactions and spot reports
  • Direct messages and group chat messages
  • Reviews and ratings of spots, hosts and listings
  • Marketplace listings, including photos, pricing and location
  • Your rider profile, friends and invites

Payment and Marketplace Data

  • Bookings, rentals, gear purchases and sales, and their status and history
  • Damage claims, including any photos and notes submitted with them
  • Subscription and entitlement status

We do not collect or store your full card number. Payments are processed by Stripe, and payouts to hosts run through Stripe Connect. Stripe collects card details directly, and collects identity and bank information from hosts for verification and payout. That data is held by Stripe under its own privacy policy — we see only the limited details Stripe returns to us, such as the last four digits, the result, and payout status.

Device Information

  • Device type, model and operating system
  • App version, language and time zone
  • Push notification tokens
  • Crash reports, performance data and diagnostic logs
  • App-attestation signals used to confirm requests come from a genuine copy of the app

Session Recording and Analytics

We use PostHog to record how the app is actually used. This includes session replay: a reconstruction of your screens as you move through the app.

Session replay captures:

  • The screens you view and the order you view them in
  • Taps, scrolls and other interactions
  • On-screen text and images, including text you type into the app
  • Network request timing and metadata

System views handled by iOS or Android — the photo picker and the contact picker among them — are masked, so your camera roll is not captured when you choose an image. Card details are entered in Stripe's own components and are not captured. Recording is disabled in development builds.

We use these recordings to find bugs, understand where people get stuck, and improve the app. We do not use them to build advertising profiles and we do not sell them. If you would rather not be recorded, email app@venturisports.com and we will exclude your account.

We also use PostHog for product analytics and feature flags, Sentry for crash and error reporting, and Firebase Crashlytics for crash reporting. These collect the device and diagnostic information described above.

How We Use Your Information

  • Provide, maintain, and improve our services
  • Process transactions and manage your account
  • Send service-related notifications and updates
  • Analyze usage patterns to enhance the experience
  • Detect, prevent, and address technical issues
  • Comply with legal obligations

HealthKit Data

Venturi integrates with Apple HealthKit to read and write workout data. We only access HealthKit data you explicitly authorize. You can revoke this permission at any time through the Health app settings.

We use HealthKit data solely to:

  • Sync your workout sessions to Venturi
  • Save new activities you record in the app
  • Provide activity tracking and analysis

We never sell or share your HealthKit data with third parties for marketing or advertising.

Garmin API Data

When you connect your Garmin account, we receive data you authorize through Garmin (activity, health, and device data). We use Garmin API data only to:

  • Sync your Garmin activities and health metrics into Venturi
  • Display sessions, routes, and stats (distance, duration, heart rate) within Venturi
  • Personalize your experience (linking activities to foil spots and gear)

We do not sell or share your Garmin data with third parties for marketing or advertising. You can disconnect your Garmin account at any time from the app.

Strava and Third-Party Integrations

Venturi supports optional integrations with Strava and other third-party services. Connecting these accounts lets us import activity data to display in your Venturi feed. You can revoke access at any time from the app or the third party's settings.

Messages and Social Content

Direct messages, group chats and the activity feed are powered by Stream (Stream Chat and Stream Feeds), which stores this content on our behalf. Your messages are private between participants, but they are not end-to-end encrypted.

We can access message and post content where we need to: to operate and debug the service, to investigate a safety report, harassment or abuse, or to comply with the law. We do not read messages for advertising and we do not sell them.

Content you post publicly — feed posts, spot reports, reviews, and sessions shared to spot pages — is visible to other users and may appear on venturisports.com. Your rider profile is public. You can make your sessions private in the app's profile settings.

AI Features

Some features generate text using AI — conditions narratives and session reports among them. These run on Google's Gemini models via Google Cloud Vertex AI.

What we send is the data the feature needs: forecast and conditions data for the spot, and for a session report, that session's statistics. We do not send your messages, your contacts or your payment information. Under our Google Cloud terms, this data is not used to train Google's models.

AI output can be wrong. Treat it as informational only, and never as the basis for a safety decision.

Camera, Photos and Media

With your permission, Venturi accesses your camera and photo library so you can add profile and cover photos, post to the feed, document gear condition at a rental handover, and add photos to listings and damage claims. We upload only the items you select — we do not scan or index your photo library.

Images you upload may be processed to fit the app, including removing the background from gear photos. That processing runs on our own infrastructure and is not sent to a third-party image service.

Data Sharing and Disclosure

We do not sell your personal information. Sharing may occur only in the following circumstances:

  • Service Providers: third parties that help us operate the Platform, listed in full below
  • Other Users: content you post publicly, your rider profile, and — when you book or host — the details the other person needs to complete the booking, such as your name and the means to contact you through the app
  • Legal Requirements: when required by law, court order, or government regulation
  • Business Transfers: in connection with a merger, acquisition, or sale of assets
  • With Your Consent: when you explicitly authorize us to share information

Who We Share Data With

The providers we rely on, and what each one handles:

  • Google Firebase and Google Cloud — authentication, database, file storage, push notifications, and our backend
  • Google Cloud Vertex AI — the AI features described above
  • Stripe — payments, payouts, and host identity verification
  • RevenueCat, with Apple and Google — subscription purchases and entitlement status
  • Stream — chat, direct messages and the activity feed
  • Mapbox — maps and map tiles
  • PostHog — product analytics, feature flags and session replay
  • Sentry and Firebase Crashlytics — crash and error reporting
  • SendGrid — transactional email
  • Apple Health, Garmin and Strava — only where you connect them
  • Meteosource, Open-Meteo, NOAA, Ecowitt and WebCOOS — forecast, tide, buoy, weather-station and camera data. These supply data to us; we do not send them your personal information.

These providers are permitted to use your information only to provide their service to us.

Data Retention

We keep your information for as long as your account is active. When you delete your account we delete or anonymise your personal information within 30 days, with these exceptions:

  • Transaction, payout and tax records, which we and Stripe must keep for the period the law requires
  • Information we need to resolve a dispute, an open damage claim, or a safety or abuse investigation
  • Content others retain their own copy of, such as a message you sent to another user
  • Aggregated or de-identified data that can no longer identify you
  • Backups, which are overwritten on a rolling schedule

Public Profile and Activities

Some information you provide may be publicly visible, including:

  • Your rider profile (name, profile photo, public activities)
  • Activities shared on foil spot pages (unless "Keep my sessions private" is enabled)
  • Reviews and ratings you post

You can control privacy settings for your sessions in the app's Profile settings.

Data Security

We implement industry-standard security measures including encryption, secure data transmission, and access controls. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

Your Rights and Choices

You have the right to:

  • Access and update your personal information
  • Delete your account and associated data
  • Opt out of analytics and session replay
  • Revoke location, camera, photo and notification permissions on your device
  • Revoke HealthKit, Garmin, or Strava permissions
  • Make your sessions private
  • Export your data

To exercise these rights, email app@venturisports.com or submit a data deletion request.

We will not discriminate against you for exercising any of these rights.

California Residents

Under the CCPA, as amended by the CPRA, you may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, our purposes for collecting it, and the categories of third parties we share it with. You may also request deletion or correction. The categories we collect are set out above under "Information We Collect".

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We do not knowingly sell or share the personal information of anyone under 16.

EEA, UK and Swiss Residents

If you are in the EEA, the UK or Switzerland you have the rights to access, rectify, erase, restrict and object to processing, and to data portability, and you may lodge a complaint with your supervisory authority. We rely on these legal bases: performance of our contract with you, to provide the Platform; your consent, for location, health data, notifications and optional integrations, which you can withdraw at any time; our legitimate interests, in securing and improving the Platform and preventing abuse; and compliance with our legal obligations.

International Transfers

Venturi is operated from the United States, and our providers process data there and in other countries. Where we transfer personal information out of the EEA, the UK or Switzerland, we rely on the European Commission's Standard Contractual Clauses or another approved safeguard.

Children's Privacy

Venturi is not intended for children under 13, and we do not knowingly collect personal information from them. Hosting on the marketplace requires you to be at least 18.

If you are between 13 and 18, use Venturi only with the involvement of a parent or guardian. If you believe a child under 13 has given us personal information, contact us and we will delete it.

Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the date above. Continued use of the app after changes constitutes acceptance of the updated policy.

Contact

Questions about this Privacy Policy? Email app@venturisports.com.

© 2026 Venturi. All rights reserved.