CornamusaYour information. Your controls.
Privacy policy
How Cornamusa handles the information you choose to save, share and download.
Who operates Cornamusa
Cornamusa is operated by Proofwright ai LLC (ProofWright). This policy covers the Cornamusa boat-management iPhone and web apps, their shared account service, and the Cornamusa product website. Contact david@proofwright.ai with privacy questions. Updated November 9, 2026.
Information you provide
We process your account name and email, account identifiers, boat and equipment details, family and crew membership and private invitation links, shared tank and engine display names, optional fixed home-port pin and sync settings, checklist assignments and completion attribution, guest names and contact details, trip plans, user-entered destinations and fishing locations (which can include exact places or coordinates), maintenance, fuel and expense records, and notes you choose to save. Only enter other people's details when you have permission to share them with your boat's members.
Manuals and downloads
Boat and equipment details help us find suitable manufacturer manuals. Paper receipts and documents can be scanned with your camera into PDFs privately shared with authorized boat members. Receipt and document PDF uploads are limited to 5 MB each. Free storage includes 50 MB and 100 files per boat, including pending uploads and files awaiting deletion. Optional monthly storage plans provide more space and shared upload/file-access allowances. Usage is measured over the last 31 UTC days; changing plans does not reset used bytes, and there are no automatic overage charges. If paid access ends, existing PDFs are kept, free access limits apply and new uploads pause while usage is over the free allowance. Camera images are converted on your phone; the PDF is uploaded when you choose Save. General photo and video uploads are unavailable. Manufacturer manuals are linked from their source. Optional PDF downloads are stored on your iPhone for offline reading and can be removed in Manuals. Opening or downloading an external manufacturer's document connects your device to that provider, which has its own privacy practices. Existing private documents, if present on your account, remain accessible only to authorized boat members.
Optional features and purchases
If you use a paired Docklift installation, we process permissions and command history, including the command, account, time and reported status. A command acknowledgement does not establish physical movement or position. If you subscribe, Apple handles payment; we process purchase identifiers, subscription status, a boat/lift entitlement and aggregate uploaded/downloaded byte counts to enforce your boat's limits. We do not receive your payment-card number. Boat membership alone does not grant lift permission. Optional NAVLink field testing shows engine RPM, hours, voltage, temperature, oil pressure, trim, fuel flow and tank levels. The app saves a protected, dated copy on your iPhone for this account and boat. If you turn on Share boat readings, this phone sends recent engine and tank measurements with measurement times and your boat/account association to our service, up to once a minute while Cornamusa is open and connected to NAVLink with internet access. Authorized boat members can view shared readings from elsewhere. Sharing stops when the app enters the background and must be turned on again after reconnecting. Phone sharing sends engine and tank measurements. It does not send GPS positions or raw NMEA payloads. For an owner-enabled onboard bridge pilot, the collector records dated engine and tank snapshots locally and uploads recent readings and trusted-clock historical records using a separate revocable credential. Each historical record includes an event identifier, boot identifier and capture timing to avoid duplicates after a restart or lost connection. If the owner enables home-port history sync, the chosen fixed marina pin is stored with shared boat settings and sent to the authorized collector. The collector uses boat GPS positions in memory to recognize that area. If the boat owner separately enables Share boat location, the collector sends fresh GPS fixes to our service for the boat map and optional marina departure notice. Authorized boat members can see the last reported position and its time. The service keeps one latest fix per boat, not a route history, and removes the fix and last departure notice when the owner turns off boat location sharing. Fresh stopped-engine readings can trigger an extra local save and upload attempt. Saving continues throughout the outing, within the stated limits. The bridge and Wi-Fi must be powered and online to upload; if the GPS stops reporting, the map can show the last fix and its time. Neither sharing nor a last received reading is an emergency alarm, a mechanical-health assessment or evidence of lift position.
How information is used and shared
We use information to provide and secure accounts, share records with authorized boat members, find manuals, maintain purchase access and process permitted lift commands. We use Vercel for app-service hosting and private-file storage, Neon for the database, Apple for in-app purchases, Resend for account verification and recovery emails, and Cloudflare for the product website and traffic/security processing. If you contact us by email, we receive the information you choose to include and use it to respond. The product website and web app do not add advertising trackers or behavioral analytics. The web app uses a necessary, host-only, HttpOnly session cookie to keep you signed in, and a short-lived private invitation cookie while you join a shared boat. Browser scripts cannot read the account session token. These cookies are not used for advertising. Web and iPhone access use the same account and boat permissions. Email click and open tracking are disabled. Technical request information, such as IP addresses, request times and errors, may be processed to operate and secure these services. We do not sell personal information or use it for cross-app advertising or tracking. Optional marina checklist reminders request location permission, including Always and Precise Location for background arrivals. Personal marina reminder settings and automatic phone-region monitoring stay on your iPhone. The separate, optional home-port history-sync setting shares a fixed selected marina pin with authorized boat members and the collector; it does not upload your phone location. We do not stream phone coordinates or upload automatic arrival/departure logs. If you choose Start a new outing from a reminder, we save the marina name and reminder-based date/time with that trip; you can edit them. Marina search and maps use Apple Maps. Reminders can be delayed or prevented by device settings and do not verify boat movement. Turn reminders off in Boat → Settings → Alerts & notifications or from the trip-specific controls; signing out clears them. The app does not request your photo library or address book; saved trip/fishing places and guest contacts are entered by users.
Your controls and account deletion
In the app, open Boat → Account & security → Delete my account. The confirmation explains the effect on boats you own and records shared with other members. Account deletion removes your account and its access, deletes boat data only where you are the sole active verified owner, and removes your authored records where applicable. A boat with another active verified owner remains available to them. Saved bridge history remains with a retained boat, while a collector credential you created is revoked and must be reconnected by the remaining owner; independent records belonging to other members can remain. Deleting an Apple subscription is separate: manage or cancel it in your Apple account. You can export boat records in Boat → Export records and remove offline PDFs in Manuals. Contact us if you need help correcting or deleting information.
Retention and security
We retain account and boat records while needed to provide the service. NAVLink local storage is bounded to 2 MB and up to 288 five-minute samples per account and boat. Shared sensor storage keeps at most 288 five-minute samples per boat; newer samples replace older ones when that limit is reached. A sample can remain if no newer data arrives; this is a count limit, not a timed-deletion promise. The optional onboard bridge keeps up to 100,000 local events and 128 MiB of encoded snapshot data, with trusted records older than 30 days pruned on later recording; local capacity can remove the oldest records sooner. Separate cloud bridge history admits trusted-clock observations from the previous 30 days, bounded to 50,000 events and 64 MiB of encoded event data per boat. These are maximums, not a guarantee to keep 30 days at every activity level. When cloud history is full, new historical uploads pause and the onboard collector retains its bounded local copy; still-replayable cloud receipts are not evicted to make room. Expired cloud history is hidden from reads and removed when later historical uploads are accepted. If the boat stops syncing, physical cleanup may occur later. Original measurement times are preserved. Turning off phone sharing stops future phone uploads; it does not stop a separately enabled bridge or remove already shared boat readings. Deletion removes application access; existing private files are queued for physical deletion and failed cleanup is retried. Limited purchase anti-replay identifiers may remain without an account link to prevent a deleted purchase from being reused. Infrastructure backups and security records may remain for their applicable retention period; we do not promise immediate erasure from every backup. Connections use HTTPS and account tokens use the iPhone Keychain or a protected web-session cookie. The authenticated web app does not intentionally cache boat records for offline use. Signing out clears its current in-memory boat view; files you chose to download remain under your browser or device controls. Downloaded manuals are protected in the app's storage. No service can guarantee absolute security, and copies others exported or shared are outside our control.
Questions and updates
Cornamusa is intended for boat owners and people they authorize. Contact david@proofwright.ai about privacy, access or a child's information supplied without appropriate consent. We may update this policy as the service changes and will show the updated date here.