Privacy Policy

1. Who we are

KŌDŌ is an operations and guest-management platform for crewed yachts. References to "we", "us", or "our" in this policy refer to Kodo Yachts LLC (a Florida limited liability company), the company operating KŌDŌ. Our contact address for privacy matters is jordon@kodoyachts.com.

2. What data we collect

Crew accounts

• Name and email address (required to create an account)
• Profile photo (optional)
• Role, department, and vessel assignment
• Activity within the app (tasks completed, queries made to the Brain)

Guest profiles

• Name and contact details provided during charter booking
• Dietary requirements, food allergies, and intolerances (safety-critical)
• Personal preferences (activities, service style, sleep patterns)
• Charter history and special occasions

Guests own their own profiles. Preference data is only shared with a specific vessel's crew when the guest explicitly consents, and can be revoked at any time.

Vessel data

• Vessel name, type, flag, and configuration
• Uploaded documents (manuals, procedures, captain's notes)
• Maintenance records, task history, and issues log
• Brain query logs (questions asked of the Brain)

Technical data

• IP address and device type (logged by our infrastructure provider)
• Browser session tokens (for authentication)
• Error logs and crash reports (to fix bugs)

3. How we use your data

• Providing the service: storing and displaying your data within the app
• AI features: guest preferences and vessel documents are sent to AI providers (Anthropic, OpenAI) to generate responses; prompts and responses are logged for your review
• Safety: allergy and emergency data is surfaced to authorised crew responsible for guest wellbeing
• Communications: transactional emails only (password reset, invite notifications); no marketing without explicit opt-in

We never sell or share information that identifies you, your vessel, your crew, your guests, or where your vessel goes.

Anonymised fleet data

Separately, we may create anonymised, aggregated operational data, for example how long equipment and parts typically last, maintenance intervals, fuel-use patterns, and typical job costs, with all details that identify you, your vessel, and your people removed, and combined across many vessels so that no single vessel can be identified. We use this de-identified data to operate and improve KŌDŌ (it powers cross-vessel insights such as "vessels like yours service this part roughly every 400 hours"), and we may share or sell it as industry benchmarks. It never contains personal or confidential information, and your vessel can opt out of contributing to this shared pool at any time in settings.

4. Who has access to your data

Within a vessel

Crew members can only see data for vessels they belong to. Role-based access controls limit what each crew member can view, captains and officers have broader access than deckhands. Guest preference data is only accessible after the guest provides explicit consent.

Third-party sub-processors

5. Data retention

• Active account data is retained while your account exists
• Deleted accounts are purged within 30 days, except where we are legally required to retain records
• Brain query logs are retained for 12 months, then automatically deleted
• Guest profiles are retained until the guest requests deletion, regardless of charter status

6. Your rights

Depending on your location, you may have the following rights under GDPR, UK GDPR, or similar legislation:

• Access: request a copy of the data we hold about you
• Rectification: correct inaccurate or incomplete data
• Erasure: request deletion of your personal data
• Portability: receive your data in a machine-readable format
• Objection: object to certain types of processing
• Withdraw consent: guests can revoke sharing consent at any time in the app

To exercise any of these rights, email jordon@kodoyachts.com. We will respond within 30 days.

7. Cookies and local storage

KŌDŌ uses browser local storage to maintain your login session. We do not use third-party tracking cookies or advertising pixels. Our infrastructure providers may set their own cookies for security and performance purposes.

8. Children's data

KŌDŌ is not intended for use by anyone under the age of 16. We do not knowingly collect personal data from children. Guest profiles for minors (e.g. children on a charter) should be managed by the responsible adult.

9. Changes to this policy

We will notify active users by email when we make material changes to this policy. Continued use of the service after notification constitutes acceptance of the updated policy. The "last updated" date at the top of this page always reflects the current version.

10. Contact

Privacy enquiries: jordon@kodoyachts.com