Privacy Policy

Myboat MV, Malé City, Republic of Maldives, is responsible for the information described here. For anything on this page, write to info@myboat.mv.

Your account: name, email address, mobile number, and a password — stored only as a one-way hash that cannot be turned back into your password. If you sign in with Google we receive your name, email address and profile picture from them, and store no password at all.

Each booking: the journey, date and seats, the fare and its currency, and for every passenger a name, country and date of birth. Where you give them, onward flight details.

Dates of birth are collected because the fare depends on whether a passenger is an adult, a child or an infant, and operators verify ages at boarding. They are not printed on tickets — a ticket shows only "Adult" or "Child".

Technical: ordinary server logs, including IP address and browser, kept for security and troubleshooting.

• To take your booking and issue your ticket.
• To give the operator the passenger manifest they need to carry you and to check you in.
• To email you confirmations, tickets, cancellations and password resets.
• To answer your questions and resolve problems with a booking.
• To keep the accounting records a business is required to keep.

The operator you booked with receives the passenger names, ages and seats for that sailing, and your contact details so they can reach you if it changes. They need this to carry you; it cannot be withheld from them.

Beyond that, only the services that run the site:

• Resend, which delivers our email.
• Google, if — and only if — you choose to sign in with Google.
• Railway and Vercel, which host the application and its database.
• Cloudflare, which serves the domain.
• A payment provider, once card payments are live. This page will name them before that happens.

Some of these operate outside the Maldives, so your information is processed abroad.

• We do not sell your information, to anyone, for any purpose.
• We do not build advertising profiles or share your data with advertisers.
• We do not send marketing email. Every message we send is about a booking you made or an account action you asked for.

Your confirmation contains a link that opens your ticket without signing in, so it can be forwarded to whoever is travelling. Anyone holding that link can see that ticket — the journey, the passenger names, countries and seats.

It deliberately shows nothing else: no date of birth, no contact details, no fare, and no access to your account. Treat it as you would a paper ticket, because that is what it is.

Booking records are kept for six years, which is the ordinary period for business and tax records. Account details are kept while your account exists. Server logs are kept for a short period and then discarded.

Write to info@myboat.mv and we will:

• Tell you what we hold about you.
• Correct anything that is wrong.
• Delete your account and personal details.

One limit worth being straight about: we cannot delete the record of a journey you have already taken or paid for, because both we and the operator are required to keep those records. Everything else goes.

We use cookies to keep you signed in and to remember a booking you are part-way through. There are no advertising or tracking cookies on this site, which is why you are not asked to accept any.

Accounts are for adults. Children travel as passengers on a booking made by an adult, and we hold their name, country and date of birth for that journey only.

The date at the top shows when this page last changed. If we ever change something significant — a new company receiving your data, or a new purpose — we will say so here before it takes effect.