Privacy policy
River Float Log ("the app", "we") is a free app for logging river trips and checking river flows. This policy explains what the app stores, why, who helps run it, and how you can delete your data. In short: your data is used only to run the app for you. There are no ads, no tracking and no selling of data.
What we store
| What | Why |
|---|---|
| Account: your email address and the name you choose; if you sign in with Google or Apple, the name and email they share. | To sign you in and show your name. |
| Profile picture: a built-in avatar you pick, or a photo you upload. | Shown in the app. |
| Trips: the run, date, times, craft, whether you rowed, notes, the names you type for people you paddled with, and whether a trip is private. Flow and weather for the trip are looked up from public sources. | Your trip log, stats and history. |
| Trip photos: resized copies of photos you add, and album links you add on the web. | Shown on your trips. The app removes the location from the photo file it uploads. The time a photo was taken and, if the original had one, where, are kept privately with the photo and only you can see them. |
| Google Photos (web, optional): if you press "Add from Google Photos", Google asks your permission and the app receives only the photos you pick there. | To copy those photos onto your trip. The app can't see the rest of your library, and Google's permission is not stored; it ends within about an hour. |
| Favorites and alerts: runs you star, their order, and your alert ranges and choices. | Your Favorites and flow alerts. |
| Notification token: an address for your phone from the notification service. | To send the alerts you set up. |
| On your device only: settings such as light or dark mode, and a copy of your data so the app works offline. | Speed and offline use. This stays on your device. |
Location: the app doesn't use your phone's location today. If a later feature does, it will ask first and explain why.
Who can see your data: only you. Trips have a "Friends" or "Only me" setting for a future friends feature; until that exists, nobody else can see your trips.
What we don't do
- No ads and no advertising identifiers.
- No selling or renting of your data.
- No analytics or tracking tools.
Services that help run the app
These companies process data only to provide their service to the app:
- Supabase: sign-in, database, photo storage and server functions, hosted in the United States (Oregon).
- Expo (650 Industries): hosts the web app, builds the phone app, and delivers notifications.
- Google Firebase Cloud Messaging: delivers notifications to Android phones.
- Google and Apple: sign-in, if you choose them. Google Photos: picking photos on the web, if you choose it.
- Resend: sends the sign-in codes we email you.
To show flows, forecasts and weather, the app asks public sources (USGS, USBR Hydromet, NOAA and Open-Meteo) for a gauge's readings or the weather at a run's location on a date. These requests don't include who you are.
Keeping and deleting your data
- Your data is kept until you delete it.
- You can delete any trip or photo in the app.
- Settings → Delete account deletes your account and everything in it: trips, photos, favorites and alerts (steps). Copies in our service provider's backups are removed as those backups expire (within about a week).
- If you don't use the app for more than 30 days, you're asked to sign in again on that device.
Security
Data is encrypted in transit. Access rules on the server let only your signed-in account read or change your data, and photos are stored in private folders.
Children
The app isn't meant for children under 13, and we don't knowingly collect their data.
Your choices and requests
You can see, change and delete your data in the app. For anything else, such as a copy of your data or a question about this policy, contact [email protected].
Changes
If this policy changes, the new version will be posted here with a new effective date. Significant changes will also be mentioned in the app.