Privacy Policy

Last Updated: October 21, 2026

1. Introduction

This Privacy Policy explains how Supply Vessel Safety Manager ("the App", "we", "us", or "our"), operated by DTI Consulting FZ-LLC, collects, uses, stores, and protects your personal and operational information when you use our mobile application and related safety inspection services. By using the App, you agree to the collection and use of information in accordance with this policy.

Who is responsible for your data. The shipping company or vessel operator whose crew uses the App ("your company") is the controller of the personal data in its account and its safety records: it decides what is recorded and how long its records are kept. DTI Consulting FZ-LLC provides and runs the App and its servers for your company, and handles that data on your company's behalf.

2. Information We Collect

To provide safety checklist management, hazard reporting, and vessel inspection services, we collect the following types of information:

A. Personal & Account Information

User Profile: Name, email address, password, role assignment (e.g., Advanced or Basic), and Organization Identification Code.

B. Photos & Inspection Evidence (Camera & Photo Library)

Camera & Photo Gallery Access: We request access to your device's camera and photo library exclusively to allow you to photograph or attach photographic evidence of hazards, safety defects, and inspection items directly to vessel safety checklists and logs. We do not access photos outside of what you deliberately select and submit.

C. Voice Notes & Audio (Microphone & Speech Recognition)

Microphone & Speech-to-Text: We request microphone access and speech recognition permissions solely to enable hands-free voice notes and transcription of observations into checklist text fields. Voice data is processed strictly for transcribing notes into your checklist.

D. Subscriptions & Purchase Information

Company plans (website only): a company's plan is bought on the SVSM website and paid online through Stripe. Nothing can be bought in the App. We never collect or store your payment card or banking details.

E. Technical & Device Information

We do not run our own analytics or crash-reporting service. If you have agreed to share diagnostics with Apple or Google, they may pass anonymous crash reports to us through their developer tools, which we use only to fix defects.

F. Hours of Rest and Drill Records (only where your company uses them)

Hours of rest: your daily periods of work and rest (in 30-minute blocks), your name and rank, the vessel's name and IMO number, the ship's time and any clock changes, the reason you give for a breach of the rest limits, notes on corrections, and your monthly record with your signature and the Master's countersignature.
Drill attendance: when an officer records a drill, the name and rank of each crew member and whether they were present, absent or not on board.

3. How We Use Your Information

We use the collected information strictly for:

Facilitating vessel safety audits, checklists, and hazard verification logs.
Assigning, monitoring, and recording safety training modules and work instructions.
Enabling communication between managers and team workers within your authorized organization.
Managing user subscriptions and enterprise access entitlements.
Enhancing app performance, system security, and troubleshooting technical errors.

4. Data Sharing & Third Parties

We do not sell, rent, or trade your personal data to third parties. Data is only shared with trusted service providers essential to app functionality:

Apple Inc.: on Apple devices, speech recognition when you dictate a voice note.
Google LLC: on Android devices, speech recognition when you dictate a voice note.
Stripe: online payments for plans bought on the website. Stripe holds the card details; we never see or store them.
Cloudflare (R2 storage): storage of the photos attached to records, and of the nightly database backups.
Our email delivery provider: sending account emails (sign-in, password reset, invitations) and safety alerts.
Our server hosting provider: the server that runs the App's database, checklist reports, organisation data and inspection logs.

Control of Work Manager (only if your company links it). If your company links SVSM to Control of Work Manager, our server fetches summaries of current permits for your linked vessels for your Advanced users. They contain no personal names, though the location is free text written in Control of Work, and are held in memory for at most 15 minutes, never saved.

5. Account Deletion & Data Retention (Your Rights)

In-App Account Deletion: You can delete your account at any time: in the App under Profile > Delete Account, or on the website under Profile > Edit Profile. Deletion takes effect at once: you can no longer sign in, and your personal profile details (email address, phone number, city and profile photo) are removed from your account. Your name stays on the closed account and on the records you signed or that name you (see below).

Signed safety records are kept. The checklist records, Stops, sign-offs, corrective actions, safety observations, training and quiz results, hours of rest records (including your monthly record and its signatures), and drill attendance records that you completed or signed, or that name you, stay with your company as its safety records, under the name and rank recorded for you on each record, whether or not you signed it. A signed safety record must not be altered or removed afterwards (for example under the ISM Code and flag-state rules), so deleting your account does not delete them. Your company remains responsible for those records and decides how long it keeps them.

To ask for those records to be erased as well, contact your company (an officer with an Advanced account) or DTI at info@dticonsultancy.com. We answer every request within one month of receiving it, together with your company, as far as the law allows: if some records have to be kept for a legal period, we tell you which and why.

Backups. Our nightly database backups are kept for up to 30 days. Data that is deleted or erased stays in those backups until they expire, and is then gone. Backups are used only to restore the service after a failure.

Your right to complain. If you are unhappy with how your data is handled, you can complain to the data protection supervisory authority where you live or work, or where you think the problem happened.

6. Company Plans

Plans are bought by the company on the SVSM website and paid online through Stripe. Nothing can be bought in the App, and no payment is taken through an Apple or Google account.

7. Children’s Privacy

Supply Vessel Safety Manager is an enterprise business and workplace safety tool intended for professional use. We do not knowingly collect personal information from children under the age of 13.

8. Security Safeguards

We implement administrative, technical, and physical security measures to protect your safety audits and personal data against unauthorized access, loss, or misuse.

9. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact us at:

DTI Consulting FZ-LLC
VUET2362, Compass Building, Al Hulaila
Al Hulaila Industrial Zone-FZ, Ras Al Khaimah
United Arab Emirates
Email: info@dticonsultancy.com