Privacy policy
What WEMo collects about you, why, who else is involved, and how to get your information deleted. In short: we collect what the app needs to work, we don't sell it, and there is no advertising or tracking.
Effective 13 October 2026.
Who we are
WEMo (the Wave Exposure Model) is run by Geo Horizons, based in North Carolina, United States ("we", "us"). Geo Horizons is responsible for the information described here. You can reach us at [email protected].
What we collect
Your account
Your email address and a password. Passwords are handled by our login provider, Supabase, which stores them in scrambled (hashed) form; we never see them. We also keep your plan, whether you are an administrator, and the date you joined.
Your work
The projects you save: the areas, sites, vegetation and measurements you draw, and your run settings. The files you upload: bathymetry (GeoTIFF), wind records and swell records (CSV). The model runs you submit and their results.
API keys
If you make API keys, we keep each key's name, its first few characters (so you can tell keys apart), when it was made, when it was last used and whether you revoked it. The key itself is stored only in scrambled (hashed) form, so nobody, including us, can read it back. Runs you start with a key are stored like any other run.
Technical information
Like any website, our server records requests in its logs: your IP address, your browser type, the page or function you asked for, the time and any error. We use these only to keep the service running and secure. When you are signed in, our server also looks up which country your IP address belongs to, in a database kept on our own server, and records that country, not the address, against your account, so our administrators can see which countries WEMo is used from. Nothing is sent to anyone for this.
Your browser keeps your login session and a few display preferences (such as light or dark mode) in its local storage, so you stay logged in and the app looks the way you left it. WEMo has no advertising or analytics cookies and no tracking pixels.
Payments
WEMo is currently free. If we introduce paid plans, payments will be handled by Stripe; we will receive confirmation of your subscription but never your card number.
Messages
If you email us, we keep the message and our reply so we can help you.
Feedback
If you answer the survey or send a note on the Feedback page, we keep your answers with your account's email address, and they are emailed to the Geo Horizons team (through our email provider). We use them only to improve WEMo and, if you tick that we may, to reply to you. They are deleted with your account, or sooner if you ask us at [email protected].
How we use it
- To provide WEMo: to log you in, save your projects, run the model on your sites and show and download your results.
- To keep it working and secure: to find and fix faults, prevent abuse and enforce fair-use limits.
- To talk to you: account emails (confirming your address, resetting your password) and, rarely, important notices about the service. We don't send marketing email without asking first.
- To improve WEMo: using overall figures such as the number of runs or the time they take, not the contents of your projects.
We don't sell or rent your information, and we don't share it for advertising. We don't look at your projects or uploaded files except to keep the service running, to fix a problem you report to us, or where the law requires it. Our administrators can see each account's email address, plan, sign-up date, when it was last active, the number of projects and runs, the general areas (state or province and country) where its sites are, and the countries it has used WEMo from. To name those areas, a rounded position (about 25 km), never who it belongs to, is sent once to OpenStreetMap's geocoding service.
If you are in the European Union or the United Kingdom: we process your information to provide the service you signed up for (performance of a contract), to keep the service secure and working well (our legitimate interests), and to meet legal obligations.
Who else is involved
We use a few service providers. They process information only to provide their service to us.
- Supabase runs our sign-up and login and stores your email address and hashed password.
- Our hosting: WEMo runs on a dedicated server in a data centre in the United States, which stores your projects, uploads and results.
- An email delivery service sends account emails such as sign-up confirmations and password resets.
- Stripe will handle payments if paid plans are introduced.
Some services are contacted directly by your browser or by our server while you use the app:
- Map imagery and maps: the basemaps are loaded by your browser from EOX (Sentinel-2 cloudless), Esri (World Imagery and the Ocean map), the U.S. Geological Survey (The National Map) and OpenFreeMap (the world and light gray maps). Like any website, they receive your IP address and the map area being viewed. The world shoreline comes from the WEMo server itself.
- Fonts: some pages load fonts from Google Fonts, which receives your IP address.
- Weather and wave data: our server asks Open-Meteo for the wind and swell history of the roughly 25 km grid cells your sites fall in. Open-Meteo receives those coordinates from our server, never your name, email or IP address. When you look for nearby buoys and weather stations, our server downloads public station lists and records from NOAA, from Canada's ocean data services (CIOOS) and, with WEMo's own account, from the Copernicus Marine Service; they receive only which station's record is wanted, never anything about you.
We may disclose information if required by law, or to protect the rights and safety of our users or of Geo Horizons. If Geo Horizons or WEMo were ever transferred to another organisation, your information would go with it under this policy, and we would tell you.
Your information is stored and processed in the United States. If you use WEMo from elsewhere, your information is transferred to the United States.
How long we keep it
- Projects, runs and uploaded files: until you delete them or your account. Deleting a project deletes its runs and results. Runs started through the API without a project are kept until you delete your account.
- API keys: until you delete your account. A revoked key stops working at once; its record stays so you can see when it was used.
- Your account: until you delete it. Deleting your account permanently removes your login, projects, runs, results and uploaded files from WEMo straight away.
- Server logs: kept only briefly and overwritten automatically.
- Backups: where we keep backups, they are overwritten within 30 days, so deleted information disappears from them too.
Your choices and rights
- See and download your information: your projects are in your dashboard, and results can be downloaded as CSV, GeoJSON, GeoTIFF and PDF. For a copy of anything else we hold about you, email us.
- Correct it: you can change your projects at any time; email us to correct anything else.
- Delete it: use Delete my account in your dashboard, or email us.
- Object or restrict: you can ask us to stop or limit a particular use of your information.
We will answer within 30 days. People in the European Union, the United Kingdom, California and some other places have these rights by law; we offer them to everyone. You can also complain to your local data protection authority. We do not sell or share personal information as defined by California law.
Security
Connections to WEMo are encrypted (HTTPS), passwords are handled by Supabase and stored hashed, each account can reach only its own projects and files, and access to the server is limited to Geo Horizons. No system is perfectly secure; if a breach ever affected your information, we would tell you and the relevant authorities as the law requires.
Children
WEMo is a professional tool for adults. You must be 18 or older to create an account, and we don't knowingly collect information from children. If you think a child has signed up, email us and we will delete the account.
Changes to this policy
We may update this policy as WEMo changes. We will change the date at the top, and for significant changes we will tell you by email or in the app before they take effect.
Contact
Questions or requests about your information: [email protected]. See also our Terms of use.