Privacy Policy

Information

What we collect

• Approximate or precise location only when you grant permission, so nearby routes and drive-aware recommendations can be shown. In the mobile app, if you sign in and explicitly start GPS recording for a paddle, precise location can be recorded in the background or while the screen is locked, until you pause or finish. A track you save is synced with your private paddle recap; an unsaved recording you discard is removed from the device. If recording is interrupted while the app is closed, the saved portion is marked paused when you reopen the app; you can then resume or finish it. If you opt in to nearby phone alerts, your selected planning location and alert range are also stored so we can match route conditions to your area.
• Saved rivers, alert preferences, and app settings that help personalize your experience.
• If you create an account, your Firebase account identifier and the identity information returned by your sign-in provider. Mobile saved routes and personal route notes you choose to sync, plus trip plans and shared-trip membership, are associated with your account and available in the mobile app. Website saved routes stay in that browser; website account and trip features are temporarily unavailable.
• Mobile sign-in uses Google Firebase Authentication with Apple, Google, or an email link. Requested email sign-in links are delivered through Microsoft Azure Communication Services, which processes the destination address and sign-in message. Sign in with Apple can provide a private relay email address. If you choose to connect another sign-in method, its identity and the Apple relay identity belong to the same PaddleToday account.
• Personal paddle logs may include the route and date, water observations, notes, photos, and GPS tracks you choose to record, including the distance and active recording time calculated from a track. Logs, photos, and GPS tracks are private to your account. Shared trips may include the route, access points, dates, itinerary, member names and responses, and shuttle arrangements.
• App feedback, optional feedback reply emails, route requests, route reports, photos, corrections, and email messages that you choose to submit.
• Basic technical information such as device, browser, request logs, and error diagnostics used to keep the service reliable.
• Production mobile builds use Firebase Analytics and Crashlytics for app interactions and crash diagnostics. The Google sign-in SDK also declares account, device, coarse-location, usage, and diagnostic processing in its privacy information. Our app does not request a phone-number field for Google sign-in, but the SDK's disclosure includes phone-related information. Advertising-oriented collection is disabled in the mobile configuration.
• If you follow a partner’s river-condition card to Paddle Today, a public partner tag helps us measure referrals and later actions such as saving a route or opening directions. That attribution stays in the current browser tab for up to 30 minutes. Embedded cards themselves send no analytics events.

Use

How we use it

• To rank nearby paddling options, show route context, and deliver requested alerts.
• To restore mobile saved routes and notes, and trip plans and shared-trip membership associated with your account in the mobile app; website saved routes stay in that browser.
• To save the private paddle recaps, photos, and GPS tracks that you choose to sync with your account. These are not shown in shared trip plans or view links.
• To review app feedback and respond to support requests, route updates, and submitted trip reports.
• To diagnose bugs, improve route data, and understand which parts of the service need work.
• To protect the service from abuse, spam, and security issues.

Control

Your choices

• You can deny or revoke location permission in your browser or device settings.
• You can remove saved rivers and alert preferences in the app where those controls are available. Website saved routes stay in that browser. Nearby alert subscriptions can be turned off at any time.
• You can ask us to review, correct, or delete information you submitted by emailing hello@paddletoday.com.
• You can delete your account from Account & backup in the mobile app after verifying your sign-in again. If you cannot access the app, see account deletion help. Deletion removes saved routes and notes backed up to your account, trips you own, your personal logs, photos, and GPS tracks, and your memberships in other trips. Copies stored only in a browser are not automatically removed. Trips owned by other paddlers and their personal logs remain. Any restricted recovery copies follow the hosting provider's retention schedule.
• Deleting an Apple-connected mobile account also requires Apple authorization again so the app can revoke its Apple authorization before removing the account.

Sharing

How information is shared

We do not sell personal information. We may use service providers for hosting, analytics, email, storage, maps, and crash or error reporting. Shared-trip members can see the trip itinerary and shuttle details. Anyone with a current view-only link can see its route, access points, date, and itinerary; the link expires after 30 days and can be revoked. Anyone with a current invitation link can join the trip until the invitation expires or is revoked. Personal logs, notes, and photos are not included in trip links. Submitted route information may be reviewed and incorporated into public route pages when it improves paddling coverage.

Contact

Questions

Email hello@paddletoday.com with privacy questions or requests.