ShoreDay Privacy Policy

Last Updated: April 22, 2026

This Privacy Notice for VMAManagement LLC (doing business as ShoreDay) ("we," "us," or "our"), describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you:

• Download and use our mobile application (ShoreDay), or any other application of ours that links to this Privacy Notice
• Use ShoreDay. ShoreDay is an AI-powered cruise day planning app for Bahamas port visitors. It generates personalized itineraries, provides a map of local venues, and includes an AI chat concierge.
• Engage with us in other related ways, including any marketing or events

Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at admin242@vmamgmt.com.

SUMMARY OF KEY POINTS

What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us and the Services, the choices you make, and the products and features you use.

Do we process any sensitive personal information? We do not process sensitive personal information.

Do we collect any information from third parties? We do not collect any information from third parties.

How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.

In what situations and with which parties do we share personal information? We may share information in specific situations and with specific third parties.

How do we keep your information safe? We have adequate organizational and technical processes and procedures in place to protect your personal information.

1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us
In Short: We collect personal information that you provide to us.

• Account and Profile Data. When you create a free user account, we collect Account Credentials (such as your email address and securely hashed password), as well as User Content (including favorite locations and generated itineraries saved to your profile).
• Payment Data. If you choose to make in-app purchases or subscribe to our premium services, your payment is processed directly by the Apple App Store or Google Play Store. We use a third-party subscription management service, Adapty, to validate your purchases and unlock features. We do not directly collect or store your credit card information. You may find Adapty's privacy notice here: https://adapty.io/privacy/.
• Application Data. We automatically collect device information (such as your mobile device ID, model, and manufacturer), operating system, and IP address.
• Location Data.We collect location data such as information about your device's location to provide mapping services. You can opt out by disabling your Location settings on your device.

Google API: Our use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

2. HOW DO WE PROCESS YOUR INFORMATION?

In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.

• To deliver and facilitate delivery of services to the user.
• To respond to user inquiries/offer support to users.
• To send administrative information to you.
• To protect our Services (fraud monitoring and prevention).
• To identify usage trends and improve the app.
• To send you marketing and promotional communications (if you explicitly opt-in).

3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR INFORMATION?

In Short: We only process your personal information when we believe it is necessary and we have a valid legal reason to do so under applicable law.

If you are located in the EU, UK, or Canada, we process your information based on Consent, Performance of a Contract, Legitimate Interests, or Legal Obligations as outlined in the GDPR and PIPEDA.

4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

We may share your data with third-party vendors who perform services for us. The third parties we may share personal information with are as follows:

• AI Service Providers: Google Cloud AI (Gemini)
• Cloud Computing Services: Google Cloud Platform
• Communicate and Chat with Users: Firebase Cloud Messaging
• Functionality and Infrastructure: Cloud Firestore
• Feature Configuration: Firebase Remote Config
• Subscription Management and In-App Purchases: Adapty, Apple App Store, Google Play Store
• Usage Analytics: Firebase Analytics
• User Account Registration: Firebase Authentication
• Website Performance Monitoring: Firebase Crashlytics and Firebase Performance Monitoring
• Mapping Services: Google Maps
• Travel Bookings and Affiliate Partners:Viator (a TripAdvisor company). When you tap an excursion, we open Viator's website inside our app for booking. Viator operates under its own privacy policy, available at https://www.viator.com/privacy.

5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

We may use cookies and similar tracking technologies (like web beacons and pixels) to gather information when you interact with our Services, maintain security, prevent crashes, and fix bugs.

6. DO WE OFFER ARTIFICIAL INTELLIGENCE-BASED PRODUCTS?

We offer products powered by artificial intelligence. We use Google Gemini, a third-party AI service provided by Google LLC, to generate personalized itinerary recommendations. Your trip preferences (port, interests, departure time, and companion type) are transmitted to Google's servers to produce this content. All personal information processed using our AI Products is handled in line with our Privacy Notice and safeguards your personal information.

7. IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?

Our servers are located in the United States. Please be aware that your information may be transferred to, stored by, and processed by us in our facilities and by third parties in the United States and other countries.

8. HOW LONG DO WE KEEP YOUR INFORMATION?

We keep your information for as long as necessary to fulfill the purposes outlined in this Privacy Notice unless otherwise required by law. When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information.

9. HOW DO WE KEEP YOUR INFORMATION SAFE?

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, no electronic transmission over the Internet can be guaranteed to be 100% secure.

10. DO WE COLLECT INFORMATION FROM MINORS?

We do not knowingly collect data from or market to children under 18 years of age. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and promptly delete such data.

11. WHAT ARE YOUR PRIVACY RIGHTS?

Depending on your state or country of residence, you have rights that allow you greater access to and control over your personal information. You may review, change, or terminate your account at any time. If you have questions or comments about your privacy rights, you may email us at admin242@vmamgmt.com.

12. CONTROLS FOR DO-NOT-TRACK FEATURES

We do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online.

13. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have the right to request access to and receive details about the personal information we maintain about you, correct inaccuracies, or delete your personal information.

14. DO WE MAKE UPDATES TO THIS NOTICE?

Yes, we will update this notice as necessary to stay compliant with relevant laws. The updated version will be indicated by an updated "Revised" date at the top of this Privacy Notice.

15. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this notice, you may email us at admin242@vmamgmt.com or contact us by post at:
VMAManagement LLC
1110 Brickell Ave, Suite 200k-438
Miami, FL 33131
United States

16. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

Based on the applicable laws of your country or state of residence, you have the right to request access to the personal information we collect from you, correct inaccuracies, or delete your personal information.

Account and Data Deletion: Users have the right to request full account and associated data deletion at any time. To request to review, update, or delete your personal information, or to initiate full account deletion, you may:

1. Use the in-app "Delete Account" feature located in the ShoreDay app's Profile Settings menu, which will automatically and immediately delete your account and all associated Firestore data; or
2. Email us directly at support@shoredayapp.comwith the subject line "Account Deletion Request."