Privacy Policy

This Privacy Policy explains how Iowa Paddle (“we,” “us”) collects, uses, and shares information when you use the Service. Browsing the map is anonymous — no account is needed. If you create an account to use the community features (saved trips, clubs, outings, the paddle logbook, leaderboards, comments, and profiles), we collect the additional information described below. By using the Service you agree to this Policy.

1. Information we collect

• Account information. If you sign in, we collect your email address, and if you use Google, Meta (Facebook), or GitHub to sign in, the basic profile information they share (such as your name and profile picture). We use this to create and secure your account.
• Profile & community content.Content you create — your display name and profile, saved trips and routes, paddle logbook entries, clubs you create or join, outings and RSVPs, comments, and kudos.
• Leaderboard stats. If you appear on a leaderboard, we publish aggregatetotals (miles, rivers, streak, level) — never your individual logbook entries. By default you appear under a masked name derived from your email (for example, colo****); you can choose to show your real name or hide yourself.
• Pin reports.If you use the “flag something” tool, we store the map location you selected and any note you type. These are submitted anonymously — please don’t include personal information in a report.
• Location.If you use the “locate me” button, your device location is resolved on your device to center the map. It is not sent to or stored by us unless you choose to drop a report pin there.
• Usage & technical data. Standard log and device data (IP address, browser type, pages viewed, timestamps) used to operate and secure the Service, plus cookieless, no-PII usage analytics.

You can use the map without an account; account and community data is collected only if you choose to sign in and take part.

2. How we use information

To render the map and live conditions; to provide accounts and the community features you use; to review pin reports and improve the map’s data; to compute your stats, achievements, and leaderboard standings; to secure, debug, and improve the Service; and to comply with law.

3. How information is shared

• Service provider. We use Supabase (hosted in the United States) to store account data, community content, and pin reports, and to handle sign-in. It processes that data on our behalf under its own terms.
• Authentication providers. If you sign in with Google, Meta, or GitHub, that provider processes your login and shares basic profile information with us, each under its own privacy policy.
• Public community content.Trips you mark public or unlisted, your public profile, comments, club activity, and leaderboard entries are visible to others by design. Trips marked private and your paddle logbook remain private to you. Don’t post anything you wouldn’t want public.
• Map & data providers.Loading the map and live conditions sends your IP address to the third parties that serve those tiles and feeds — including OpenStreetMap and CARTO, Esri, the USGS, the National Weather Service, and RainViewer (and OpenWeatherMap if the temperature layer is enabled). Tapping a “Directions” link opens Google Maps. Each processes your request under its own privacy policy.
• Legal. We may disclose information to comply with law, enforce our Terms, or protect rights and safety.
• We do not sell your personal information.

4. Your choices & rights

• Set the visibility of each trip (private, unlisted, or public).
• Your paddle logbook is private to you.
• Leaderboards are your choice: appear under a masked name, show your real name, or hide yourself entirely — changeable at any time.
• Edit your profile, leave clubs, and delete trips and logbook entries.
• To access, correct, or delete your account and associated data, contact us at [email protected].

5. Data retention

We retain your account and community content until you delete it or ask us to delete your account. We retain pin reports as long as needed to act on them and improve the map, and log data for a limited period to operate and secure the Service.

6. Cookies & local storage

We use minimal local storage for basic preferences (such as your selected base map) and, if you sign in, to keep you signed in. We do not use cookies to track you across sites or to sell your data.

7. Security

We use reasonable technical and organizational measures to protect information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Children

The Service is not directed to children under 13 (or the minimum age in your jurisdiction), and we do not knowingly collect their information or allow them to create accounts. If you believe a child has provided us information, contact us and we will delete it.

9. Changes

We may update this Policy; material changes will be reflected by updating the “Last updated” date.

10. Contact

Questions about this Policy: [email protected].