Privacy Policy

Effective Date: July 5, 2026

This Privacy Policy explains how River Caddy LLC ("we", "us", or "our") handles information when you use the River Caddy iOS application (the "App") and the River Caddy website at rivercaddy.com (the "Site"; together with the App, the "Service").

The iOS App and the Site collect different information. Where relevant, we call out which product a given practice applies to.

1. Information the iOS App Collects

The App is designed to be usable without an account. Specifically:

• Precise location — When you grant location permission, the App uses your device's location to centre the map on your current position. Location is used only on your device to render the map; it is not transmitted to our servers and is not linked to any identifier that could identify you.
• Purchases — If you buy a River Caddy Premium subscription inside the App, the purchase is processed by Apple through the App Store. Apple links the transaction to your Apple ID by design. We receive an anonymous entitlement flag confirming an active subscription; we do not receive your Apple ID, email address, or payment method.
• On-device settings and favourites — Your saved favourite spots and app settings are stored locally on your device (in iOS UserDefaults). They are not uploaded to our servers and are removed when you delete the App.

The App does not collect: name, email address, phone number, photos, contacts, health information, browsing history, IDFA, or any device identifier used for tracking. The App does not use analytics SDKs or advertising SDKs.

2. Information the Website Collects

The Site collects more information than the App:

• Account information — If you create an account or sign in on the Site, we receive your name, email address, and profile picture from the identity provider you choose (e.g. Google).
• River selections and generated reports — Rivers you request reports for, and the resulting reports, are associated with your account so you can retrieve them later.
• Technical data — IP address, device type, browser, and pages viewed. This is standard web-server telemetry used to keep the Site running and to diagnose problems.

3. How We Use Information

We use the information described above to:

• Deliver the core functions of the Service (map rendering, report generation, subscription management).
• Authenticate your Site account and personalise the Site experience.
• Diagnose bugs, maintain reliability, and prevent abuse.
• Respond to your support requests.

We do not use your information for advertising, do not track you across other companies' apps or websites, and do not sell your personal information.

4. Third-Party Services

We rely on a small number of vetted third parties to run the Service:

• Supabase — Database, storage, and (Site only) authentication.
• Anthropic (Claude AI) — Generates report text. Prompts are sent through our own server so the AI provider does not receive any user identifier — only the river, spot, and weather context needed to write the report.
• Apple App Store — Handles all in-app purchases and subscription billing.
• Vercel — Hosts the Site and provides aggregate, non-identifying visitor analytics.
• USGS & public weather services — Public data sources for flow and weather. No personal data is exchanged.

These providers process data only for the purposes described above and are contractually bound to protect it. We do not authorise them to sell it or use it for their own marketing.

5. Data Retention and Your Rights

Data collected by the App stays on your device and is deleted when you uninstall.

For the Site, you may request to access, export, or delete the data associated with your Site account at any time by emailing support@rivercaddy.com. We will respond within 30 days. Depending on your location, you may have additional rights under laws such as the California Consumer Privacy Act (CCPA) or the EU General Data Protection Regulation (GDPR); we honour those requests via the same email address.

6. Children's Privacy

River Caddy is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us and we will delete it.

7. Security

We use industry-standard measures — HTTPS everywhere, encrypted storage, least-privilege access controls — to protect information. No system is perfect; if we ever become aware of a breach affecting your information, we will notify you as required by applicable law.

8. International Users

River Caddy is operated from the United States. If you use the Service from outside the U.S., your information will be transferred to and processed in the U.S. under the protections described in this policy.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated effective date. Continued use of the Service after an update constitutes acceptance of the revised policy.

10. Contact Us

Questions or concerns about this policy? Contact us at:

River Caddy LLC
Email: support@rivercaddy.com
Website: https://rivercaddy.com