Privacy Policy

Overview

Eddy is a river-conditions and float-trip planning service, available as a website and as a mobile application. You can browse rivers and create a plan without signing up. Some optional features—such as feedback, alerts, shared plans, community reports, and paid subscriptions—require or store additional information. This policy describes that information and the choices available to you, and applies to both the website and the app.

Information We Collect

• Usage and device data. Pages viewed, rivers and features used, referral information, approximate location derived from network information, browser/device details, and diagnostic events. Hosting and security logs may include an IP address.
• Anonymous app accounts. When you first open the mobile app, Eddy creates an anonymous account so saved rivers can be stored and restored. It consists of a randomly generated identifier and a timestamp. It contains no email address, name, or password, and you are not asked to sign up. If you later sign in with Apple, that same identifier is reused rather than replaced.
• Sign in with Apple. If you choose to sign in, Apple provides a user identifier and, at your option, a name and an email address. Apple lets you hide your real address behind a private relay; Eddy works either way and does not require you to reveal it.
• Push notification tokens. If you enable notifications, Eddy stores a push token issued by Apple and the notification service, together with the platform, app version, an optional device name, and a record of which alerts were sent to that device. Tokens identify a device installation, not a person, and are removed when the device stops accepting notifications.
• Subscription status. If you purchase Eddy Premium, Eddy stores the product purchased, whether the subscription is active, when it expires or renews, and whether there is a billing problem. Eddy never receives or stores your payment card, billing address, or Apple ID credentials— the purchase is made with Apple, and Eddy is told only whether access should be granted.
• Precise location in the app.If you allow it, the app may use your device's location to show where you are relative to a river. Location is used on the device to draw the map and is not stored on Eddy's servers or shared with third parties for advertising. You can decline, and the app remains usable; you can revoke the permission at any time in iOS Settings.
• Downloaded maps and on-device storage. Offline map downloads, saved rivers, and app preferences are stored on your device. Map tiles are downloaded from the map provider and cached locally. Deleting the app removes them.
• Feedback and correspondence. Email address, optional name, message, attachments, page or river context, and emails you send to an@eddy.guide address.
• Email subscriptions. Your email address and the page or form where you subscribed. We use this to provide the requested updates.
• Shared float plans. River, put-in, take-out, vessel, calculated trip details, and the condition snapshot stored for the shareable link. Shared links are accessible to anyone who has the link.
• Community reports and photos. Report type, description, river and coordinates, optional display name, selected access/gauge context, and an uploaded photo. Uploaded photos are held privately for review and only become publicly visible if a moderator approves the report; rejected photos are deleted from storage. Eddy decodes and re-encodes community photos before storage to remove embedded camera metadata, including EXIF location metadata.
• Location you choose to use. If you use a “nearest me” feature, your browser may ask for location permission. The feature uses the coordinates needed to calculate nearby results; Eddy does not continuously track your device.

How We Use Information

• Provide river conditions, planning, sharing, widgets, and support.
• Review community submissions and correct inaccurate or unsafe information.
• Send updates you requested and respond to messages.
• Measure reliability and usage, troubleshoot errors, prevent abuse, and secure Eddy.
• Comply with law and protect users, partners, and the service.

Eddy does not sell personal information or use it for third-party behavioral advertising.

Cookies and Local Storage

Eddy uses browser storage for functional preferences such as the selected river, vessel, map filters, recent UI state, and administrative sessions. Analytics providers may use cookies or similar identifiers when analytics is enabled. Browser controls can clear or block storage, although some preferences or features may stop working.

Service Providers and External Links

Eddy uses service providers to operate the site. They process information under their own terms and our configuration:

• Vercel for hosting, delivery, logs, and site analytics.
• Supabase for the database, authentication infrastructure, and media storage.
• Google Analytics/Tag Manager for usage measurement when configured.
• Resend for subscription, inbound email, and reply delivery.
• USGS and weather providers for river and forecast data. Gauge requests are generally made server-side.
• Map, routing, and navigation providers for tiles, shuttle estimates, and links you choose to open.

External navigation, outfitter, campground, and source links take you to third-party sites governed by their policies. Eddy's chat feature is currently unavailable. If it returns, this policy and the chat interface will identify the AI processor and message-retention behavior before messages are accepted.

Retention and Public Information

Subscription information is kept until you unsubscribe or request deletion. Feedback, correspondence, security logs, and community reports are retained while needed to respond, moderate, maintain an audit trail, prevent abuse, and meet legal obligations. Shared plans remain available while their links are supported. Approved community content and its display name, description, river location, and photo may be public. Anonymous accounts and the rivers saved to them are kept until you ask us to delete them or the account has been inactive long enough that it is no longer useful. Push tokens are removed when a device stops accepting notifications or you disable them. Subscription records are kept while a subscription is or was active, and afterwards only as long as needed for accounting and dispute handling. Backups may retain deleted information for a limited recovery period.

Your Choices

• Do not grant browser location permission if you do not want to use location features.
• Use an unlisted shared-plan link only with people you trust.
• Do not include faces, license plates, children, or private details in community photos.
• Use the unsubscribe option in an email or contact us to stop email updates.
• Ask to access, correct, or delete information associated with your email or submission.

Security and Children

Eddy uses technical and organizational safeguards, but no internet service can promise absolute security. Eddy is intended for general audiences and is not directed to children under 13. Please contact us if you believe a child submitted personal information.

Changes and Contact

We may update this policy as Eddy changes and will revise the date above. For privacy questions or an access, correction, or deletion request, email hello@eddy.guide or use the feedback form available from eddy.guide.