Stapi4Mobile
Privacy policy
Last updated: 2 September 2026
Stapi4Mobile has no advertising, no analytics, and no crash-reporting or tracking SDKs of any kind. The only outside service it uses is push notifications, described below.
Who is responsible for what
LINA.PL builds and maintains the Stapi4Mobile app. The app connects to your pilotage station's own STAPI server — the operational system the station's dispatch office already runs — and your account is issued and managed by that station, not by LINA.PL. For the professional data described below (receipts, orders, pilot queue, opinions), your pilotage station is the data controller: it decides what is recorded and how long it is kept, in the same way it already does for its office system. LINA.PL is the software developer and, for the app itself, the party you contact about how the app works and what it stores on your phone.
Account and sign-in
You sign in with a username and password issued by your pilotage station — there is no public registration and no way to create an account inside the app. Your password is sent once, over an encrypted connection, at the moment you sign in; the app never stores it. What the app does keep, in your phone's own secure storage (the system Keychain on iPhone, encrypted storage on Android), is:
- a session token, valid for up to 14 days, used to authenticate you to your station's server
- your name and the permissions your account carries, as sent back at sign-in
- which pilotage station's server you use, so you don't have to re-enter it each time
Signing out clears all of this from your phone immediately and invalidates the session on the server, across every device you were signed in on.
What stays on your device
Alongside the account details above, the app keeps a short-lived local copy of your own recent receipts, orders and pilot-queue view, so the relevant screen still shows something useful if you briefly lose signal. This cache holds only your own data, is never sent anywhere itself, and is cleared when you sign out.
What goes to your pilotage station's server
Using the app means sending your station's own operational data back and forth over an encrypted connection: the pilotage receipts you file (ship, docks, times, draft, tugs, notes), the orders assigned to you, your position in the pilot queue, and, where your station uses the feature, manoeuvre opinions. This is the same professional record-keeping your station's office system already holds — the app is a second way to reach it, not a separate copy held by LINA.PL.
Push notifications
The app uses Firebase Cloud Messaging, a service operated by Google, to notify you when your dispatcher assigns you a new receipt or order. This registers a device push token with Google and with your station's server — nothing else about you passes through Google for this. See Google's privacy policy for how Google itself handles that token. You can turn notifications off at any time in your phone's system settings; the app will keep working, you just won't be alerted automatically.
Advertising, analytics and trackers
None. Stapi4Mobile contains no advertising SDK, no analytics SDK, and no crash-reporting service. Firebase Analytics is explicitly disabled in the app's configuration and is never called from the app's code.
Permissions
The app asks for exactly two things:
- Internet access — to talk to your pilotage station's server. Without it the app cannot function.
- Notifications — to alert you when new work is assigned. You can decline this and use the app normally without it.
It does not request location, contacts, camera, microphone, or access to files or photos outside its own app storage.
Children
Stapi4Mobile is a professional tool for licensed maritime pilots, accessible only with credentials issued by an employing pilotage station. It is not directed at children and is not intended for use by them.
Your rights
For the operational data held on your pilotage station's server — receipts, orders, queue records, opinions — your station is the data controller, so requests to access, correct, export or delete that data should go through them, the same way they would for a paper or office-system record today. For anything about the app itself, or to have the data described above cleared from your phone, sign out — this clears your local session and cache immediately — or write to contact@lina.pl.
Data retention
Your session token expires after 14 days and you'll need to sign in again; there is no separate "remember me" beyond that. Signing out clears everything the app stores locally straight away and unregisters your device from push notifications.
Changes to this policy
If this policy changes, the updated version will be published at this URL with a revised "last updated" date. Material changes will also be noted in the app's release notes.
Contact
Questions about this policy: contact@lina.pl
Who publishes this app
- Publisher
- Przedsiębiorstwo Informatyczne Lina.pl, Michał Wróbel
- Address
- Gdynia, Poland
- VAT ID
- PL 586 168 56 28
- Contact
- contact@lina.pl