Privacy Policy
Draft Survey Calculator · ua.od.and.draftsurvey
Effective 23 September 2026 · Last updated 23 September 2026
Draft Survey Calculator (the “App”, ua.od.and.draftsurvey)
is a maritime draught-survey and displacement calculator for ship officers and cargo
surveyors.
This policy explains what the App does and does not do with your data. It applies to the Android version distributed through Google Play and the iOS version distributed through the App Store. The two are built from the same code and behave the same way in almost every respect; where a platform differs, this policy says so and says which.
Who is responsible. The App is developed and published by Andrii Mushta, an independent developer (“we”, “us”). For any question about this policy or about your data, contact Draft_Survey@and.od.ua.
The short version. The App works entirely offline. Every survey you create — vessel particulars, draft readings, calculations and photographs — is stored on your own device, and we never receive any of it. We have no server, no user accounts, and no way to see your surveys. We never sell or rent data to anyone.
If your device’s own backup is switched on, a copy of your surveys goes to your iCloud or Google account — yours, not ours, and we cannot reach it. Section 4 says exactly what is included on each platform.
The only data the App itself sends anywhere is anonymous app-usage and crash-diagnostic information collected automatically by Google Firebase, described below.
1. Data you create in the App — we never receive it
The App stores the following in a private database on your device, accessible only to the App:
- Vessel particulars — vessel name, IMO number, year of build, country/flag, light ship weight, summer deadweight, breadth moulded, LBP and keel thickness.
- Survey data — the six draft readings and their corrections, trim, hydrostatic values, deductible quantities (ballast, fresh water, fuel, diesel, lubricating oil, other), water density and the resulting displacement figures.
- Survey dates and times that you enter.
- Vessel photographs that you add to a vessel.
- App settings — your chosen calculation accuracy, your chosen language, and whether the paid unlock is active.
We do not receive any of this. The App does not upload, synchronise or transmit it to us or to anyone else. There is no account to sign in to, and no networking code in the App that could send it anywhere. The one way a copy does leave your device is your own device backup, which is your account’s and not ours — see section 4.
The App does not ask for, and has no field for, your name, e-mail address, telephone number, postal address, or the name of any client, charterer, agent or port.
2. Photographs
You may attach one photograph to a vessel. Where the picture comes from differs by platform, and this is the one visible difference between the two versions:
- On Android, the App opens your device camera and keeps the picture it takes. It declares no camera permission and asks for no access to your photo gallery — it hands the job to the system camera app, which returns only the single image you took.
- On iOS, the App opens the system photo picker and keeps the picture you choose from your library. There is no camera in the iOS version. The picker runs outside the App, so the App needs no photo-library permission and you are shown no permission prompt; the App receives only the one image you selected and never sees the rest of your library.
On both platforms the picture is converted to JPEG and written into the App’s own private storage area. Photographs are never uploaded, and they are not included in the exported report — a certificate is text and figures only. Deleting the vessel deletes its photograph, and so does uninstalling the App.
3. Reports you export
When you export a draught survey certificate, the App generates a PDF in its own private temporary area and hands it to the system share sheet — Android’s share dialogue, or the iOS share sheet. You choose what happens to it: e-mail, messaging, cloud storage, or nothing at all. The App itself transmits nothing.
The file’s name and contents include the vessel name and the survey figures, so please consider where you send it.
The generated file is temporary on both platforms and is removed by the operating system without asking you — on Android when space is needed, on iOS from the temporary directory it is written to. Uninstalling the App removes it in either case. A certificate you want to keep is the copy you sent, not the one in the App.
4. Device backup
The App has no cloud of its own and synchronises nothing. Your device, however, may copy the App’s data into your own backup, and what it copies is not the same on the two platforms.
Android — backup to your Google account. If you have device backup switched on, Android copies your survey database to your own Google Drive backup. Vessel photographs are deliberately excluded. Android limits how much data an app may back up, and photographs would exhaust that limit and silently stop the surveys themselves from being backed up — and the surveys are the part that matters. This backup does not count against your Drive storage.
Android — moving to a new device. When you transfer directly from one Android device to another, both your surveys and your vessel photographs come across. A direct transfer has no size limit, so there is no reason to leave the photographs behind.
iOS — iCloud Backup and computer backups. iOS backs up an app’s data as a whole, and the App excludes nothing from it. So if iCloud Backup is on, both your survey database and your vessel photographs are copied into your own iCloud backup — unlike on Android, where the photographs are left out. The same applies to a backup you make to your own computer. Exported PDF certificates are not backed up: they are written to the temporary directory, which iOS never includes. An iCloud backup counts against your iCloud storage.
Why the platforms differ. Android caps how much any one app may place in a cloud backup, and vessel photographs are large enough to exhaust that cap and push the surveys out of the backup entirely. iCloud applies no such per-app cap — it uses the storage you already pay for — so there is nothing to protect the surveys from, and leaving the photographs in means a replaced iPhone comes back complete.
In every case this is a function of your device and your Apple or Google account, not of the App. We have no access to any of these backups. You can switch backup off or exclude the App from it — on iOS in Settings → [your name] → iCloud, on Android under Settings → Google → Backup.
Backup only happens if you have it enabled, so for a survey that really matters, still export the PDF.
5. Analytics and crash reporting
The App includes two Google Firebase components, on both platforms. Neither is given any information by the App itself — we set no user identifier, record no custom events, and attach nothing about you or your surveys to them.
Google Analytics for Firebase collects standard, automatic app-usage measurements: that the App was opened, session length and screen-level usage, an app-instance identifier, your device model, operating-system version, language and country. Country is derived from your IP address; the App does not access device location, declares no location permission on Android, and asks for no location access on iOS.
Firebase Crashlytics collects diagnostic information if the App crashes or stops responding: the technical stack trace, the device model and operating-system version, and the state of the App at the moment of failure. This is used only to find and fix defects.
We do not collect your advertising identifier, on either platform. The App shows no advertisements and does no profiling or remarketing.
- On Android, the App removes the advertising-ID permission that the analytics library would otherwise add.
- On iOS, the App does not include the optional Firebase component that reads the advertising identifier (IDFA). It therefore never asks you for tracking permission, and you will not see the “Allow App to track your activity” prompt — there would be nothing for it to allow.
This data goes to Google, acting as our processor, and is governed by Google’s Privacy Policy. We use it only in aggregate — to see whether the App is stable and which features are used. It does not identify you personally to us, and we cannot connect it to any survey you have made.
Firebase Analytics data is retained for 14 months and Crashlytics data for 90 days, after which Google deletes it automatically.
6. Purchases
The App is free to download. A single optional one-time purchase unlocks unlimited vessels and surveys, and PDF export.
The purchase is processed entirely by the store you installed the App from — Google Play on Android, or Apple’s App Store on iOS. We never see and never receive your name, payment card, billing address or any other payment detail. The store tells the App only whether the purchase exists, and the App stores that answer as a single yes/no value on your device. The purchase itself — including the receipt that proves it — is held and checked by the store, never by us.
Your purchase history is held by whichever store processed it: Google’s Privacy Policy and the Play Store on Android, or Apple’s Privacy Policy and your Apple Account on iOS.
7. What we do not do
- We do not show advertisements, and include no advertising or attribution SDK.
- We do not sell, rent or trade your data.
- We do not share your survey data with anyone — we do not have it.
- We do not track you across other apps or websites.
- We do not require an account, a login, or any registration.
- We do not knowingly collect anything from children (see section 10).
8. Legal basis and your rights
Where the EU/UK General Data Protection Regulation applies, our legal basis for the analytics and crash-reporting described in section 5 is our legitimate interest in keeping the App stable and understanding how it is used, balanced against the limited and non-identifying nature of that data.
You have the right to request access to, correction of, or erasure of personal data relating to you, to object to processing, and to lodge a complaint with your national data protection authority.
In practice:
- Survey data — it is on your device and only you hold it. Delete a vessel or survey in the App, or uninstall the App, and it is gone. We cannot delete it for you because we never had it.
- Analytics and crash data — to have it deleted, contact us at Draft_Survey@and.od.ua and we will submit a deletion request to Google. Because the data carries no name or account, please tell us the approximate date, your platform and your device model so it can be located.
9. Data security
Your survey data is held in the App’s own private storage area, which the operating system isolates from other applications — on Android by the app sandbox, on iOS by the app container, where files are additionally encrypted and stay unreadable until you first unlock the device after it restarts.
Data transmitted by the Firebase components travels over encrypted connections. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.
Because the App holds no account and no server-side data, the main protection for your surveys is your device’s own passcode or lock screen and its encryption — we recommend keeping both enabled. On iOS the file encryption described above depends on a passcode being set.
10. Children
The App is a professional tool for maritime officers and cargo surveyors. It is not directed at children, and we do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, contact us and we will act on it.
11. Changes to this policy
We may update this policy as the App changes. The current version is always the one at this address, and the “last updated” date below shows when it changed. Material changes will also be noted in the App’s release notes — on Google Play for the Android version, and on the App Store for the iOS version.
12. Contact
Questions, requests or complaints about this policy: Draft_Survey@and.od.ua