Privacy Policy

Last updated: October 16, 2026

Overview

Eddy is a river-conditions and float-trip planning service, available as a website and as a mobile application. You can browse rivers and create a plan without signing up. Some optional features—such as feedback, alerts, shared plans, community reports, and paid subscriptions—require or store additional information. This policy describes that information and the choices available to you, and applies to both the website and the app.

Information We Collect

Public MCP tools receive only the arguments your assistant sends for a requested lookup; Eddy does not request your chat history. Operational monitoring may record aggregate tool counts, latency and errors. Optional diagnostics may include the reported client software name and an unverified software-family hint, but exclude tool arguments and response bodies. Network addresses support short-lived abuse limits. Diagnostics may include a daily keyed network-bucket identifier to understand shared-network limits; this does not identify individual users or integrations. Hosting/security logs follow the retention practices below. Disconnect Eddy in your assistant to stop future tool calls. Gauge, weather, park and routing providers receive the river, station or route details needed for that lookup, not your chat history.

Usage and device data. Pages viewed, rivers and features used, referral information, approximate location derived from network information, browser/device details, and diagnostic events. Hosting and security logs may include an IP address.
Anonymous app accounts. When you first open the mobile app, Eddy creates an anonymous account so saved rivers can be stored and restored. It consists of a randomly generated identifier and a timestamp. It contains no email address, name, or password, and you are not asked to sign up. Sign in with Apple provides a recoverable identity across devices; signing into an existing Apple-linked account may replace the anonymous identifier.
Sign in with Apple. If you choose to sign in, Apple provides a user identifier and, at your option, a name and an email address. Apple lets you hide your real address behind a private relay; Eddy works either way and does not require you to reveal it. When Apple supplies a name, Eddy saves it as your account display name.
Push notification tokens. If you enable notifications, Eddy stores a push token issued by Apple and the notification service, together with the platform, app version, the device’s model name (for example “iPhone 15 Pro”), and a record of which alerts were sent to that device. Tokens identify an installation and are linked to your Eddy account; they are removed when the device stops accepting notifications.
Subscription status. If you purchase Eddy Premium, Eddy stores the product purchased, whether the subscription is active, when it expires or renews, and whether there is a billing problem. Eddy never receives or stores your payment card, billing address, or Apple ID credentials — the purchase is made with Apple, and Eddy is told only whether access should be granted.
Precise location in the app. If you allow it, the app may use your device's location to show where you are relative to a river. Precise location is used on the device for map and distance features. Starting a float records a GPS track, including position, time, accuracy, and available speed, direction and altitude. Eddy asks for While Using the App permission; an active float can continue recording while your phone is locked, with iOS showing its location indicator. Finishing the float stops recording. For local weather and nearby route searches, the app sends coordinates rounded to 0.05 degrees to Eddy. Find a Route sends these coordinates when you tap Search with Near you selected; choosing a river instead omits them. Location is not shared with third parties for advertising. You can decline, and the app remains usable; you can revoke the permission at any time in iOS Settings.
Float history and account backup. Ending a float saves a recap on your phone. When signed in with Apple, Eddy backs up your saved routes and completed summaries so you can recover them. Summaries include route endpoints, first and last tracked river mile, date and times, boat type if supplied, tracked distance, moving, stopped and unobserved time, pace, and a historical water reading when available. These records are linked to your account. Raw River Mode GPS positions and traces are not uploaded to Eddy. The raw track stays on this phone after the float ends and is excluded from iCloud and device backups. Deleting the float from History deletes its local track too; if track deletion fails, Eddy shows that it is pending and retries when the app opens or returns to the foreground. Restoring an account backup restores the summary, not the raw track. If local history becomes unreadable, Eddy preserves a recovery copy on your phone before starting fresh. That copy is not uploaded and is removed when you delete a trip or your account.
Helping improve estimates. An optional setting under Floats › Saved Floats & History › Backup › Help improve float estimates lets Eddy study summaries of floats you finish while sharing is enabled. It is off by default. Turning it off excludes your trips from future analysis without removing your backup. Setting changes need a connection; the app retries a pending withdrawal. We do not provide these trips to outfitters or use them for advertising.
Lock Screen and Dynamic Island. During a float, a Live Activity can show the river, take-out, progress and estimated time remaining without unlocking your phone. These updates are generated on your device and do not share your live location with other people. You can dismiss the Live Activity or turn off Live Activities for Eddy in iOS Settings. Dismissing it does not stop recording; finish the float in Eddy to stop recording.
On-device storage. River data (access points, hazards, courses, and last known readings), saved rivers, and app preferences are stored on your device so the app works without a signal. You can clear the river data at any time from Profile › Offline storage. Deleting the app removes its local data; account backups require separate deletion. Authentication credentials may remain in the iOS Keychain.
Feedback and correspondence. Email address (required when you send feedback from the app, so we can reply), optional name, message, attachments, page or river context, and emails you send to an@eddy.guide address.
Email subscriptions. Your email address and the page or form where you subscribed. We use this to provide the requested updates.
Shared float plans. River, put-in, take-out, vessel, calculated trip details, and the condition snapshot stored for the shareable link. Shared links are accessible to anyone who has the link.
Community reports and photos. Report type, description, river and coordinates, optional display name, selected access/gauge context, and an uploaded photo. In-app hazard reports send your captured GPS position, accuracy and capture time when you choose to submit the report. Uploaded photos are held privately for review and only become publicly visible if a moderator approves the report; rejected photos are deleted from storage. Eddy decodes and re-encodes community photos before storage to remove embedded camera metadata, including EXIF location metadata. Photos submitted from the iOS app require Sign in with Apple and are linked to your Eddy account, so that an account sending abusive content can be blocked; your name and email are not published with them. Reports and photos submitted through the website’s public contribution form are not linked to your Eddy account, even when you are signed in. Any display name is supplied separately and may be published with your contribution.
Location you choose to use. If you use a “nearest me” feature, your browser may ask for location permission. The feature uses the coordinates needed to calculate nearby results. Browsing the website does not start a continuous location recording; recording in the app begins when you start a float.

How We Use Information

Provide river conditions, planning, sharing, widgets, and support.
Review community submissions and correct inaccurate or unsafe information.
Send updates you requested and respond to messages.
Measure reliability and usage, troubleshoot errors, prevent abuse, and secure Eddy.
Comply with law and protect users, partners, and the service.

Eddy does not sell personal information or use it for third-party behavioral advertising.

Cookies and Local Storage

Eddy uses browser storage for functional preferences such as the selected river, vessel, map filters, recent UI state, and administrative sessions. Analytics providers may use cookies or similar identifiers when analytics is enabled. Browser controls can clear or block storage, although some preferences or features may stop working.

Service Providers and External Links

Eddy uses service providers to operate the website and app. Providers that process personal information for Eddy must protect it as this policy describes and use it only to provide these services:

Vercel for hosting, delivery, logs, and site analytics.
Supabase for the database, authentication infrastructure, and media storage.
Google Analytics/Tag Manager for usage measurement when configured.
Resend for subscription, inbound email, and reply delivery.
USGS and weather providers for river and forecast data. Gauge requests are generally made server-side.
Mapbox for maps, place search and routing. Map requests disclose your IP address and the area you are viewing or downloading, which may approximate your location. Place searches and shuttle estimates send the search or route details needed for that request. The iOS app switches Mapbox’s optional usage telemetry off at startup.
Sentry for crash and error reporting from the website and the iOS app. Reports carry device model, operating system, app version, a stack trace, and an SDK installation identifier used to connect diagnostics from the same installation. Eddy filters likely tokens, email addresses, account UUIDs, and coordinate pairs from JavaScript error text and custom diagnostic extras before sending. Diagnostic reports are not used for advertising.
RevenueCat for subscription purchases and their status. RevenueCat receives your Eddy account identifier and the purchase records Apple returns. Eddy never receives your payment details — those stay with Apple.
Expo for delivering push notifications to the iOS app. Expo receives a device push token and the contents of each notification, which name the river and its condition.
Apple for Sign in with Apple and for all subscription billing.
Routing and navigation providers for shuttle estimates and links you choose to open.

External navigation, outfitter, campground, and source links take you to third-party sites governed by their policies. Eddy's chat feature is currently unavailable. If it returns, this policy and the chat interface will identify the AI processor and message-retention behavior before messages are accepted.

Retention and Public Information

Email subscription information is kept until you unsubscribe or request deletion. Feedback, correspondence, security logs, and community reports are retained while needed to respond, moderate, maintain an audit trail, prevent abuse, and meet legal obligations. Private float summaries and saved-route collections remain until you delete the trip or account. Deletion removes the private record from future estimate analysis. A minimal deletion marker without the trip content prevents an older device from restoring a deleted record; account deletion removes the marker too. Deleting a private saved route does not revoke a previously shared public plan link. Shared plans remain available while their links are supported. Approved community content and its display name, description, river location, and photo may be public. You can delete a guest account and its saved data using Delete my data in the app. Account deletion does not automatically identify contributions submitted without an account link. To request removal, email eddy@eddy.guide with the report or photo link, or enough detail to locate it, such as the river and submission date. Push tokens are removed when a device stops accepting notifications or you disable them. Subscription records are kept while a subscription is or was active, and afterwards only as long as needed for accounting and dispute handling. Backups may retain deleted information for a limited recovery period. After account deletion, we may temporarily retain an Apple authorization token and a technical identifier solely to revoke that authorization. Access is restricted to the server; the retry record is removed after successful revocation. If a moderator blocks an account from contributing, we keep that account identifier and a one-way hash of its Apple identifier, including after account deletion, solely to enforce the block.

Your Choices

Do not grant browser location permission if you do not want to use location features.
In the app, finish your float to stop recording. You can also revoke Eddy’s location permission in iOS Settings. Browsing and planning remain available without location permission.
Delete individual floats from Floats › Saved Floats & History › History. For a signed-in account, deletion is also sent to your account backup; offline changes wait for a connection. Turn off Help improve float estimates under Floats › Saved Floats & History › Backup to withdraw from future estimate analysis without deleting your backup.
Use an unlisted shared-plan link only with people you trust.
Do not include faces, license plates, children, or private details in community photos.
Use the unsubscribe option in an email or contact us to stop email updates.
Delete your account in the app. In the iOS app, open Profile and choose Delete account, or Delete my data when using Eddy without signing in. Deletion happens immediately and removes your account, your saved float plans, completed-float summaries, estimate-sharing preference, favorites, alert rules, and registered devices. The app also stops an active float and removes local float records and raw tracks. If local cleanup fails, the app asks you to retry. Deleting your account requires a connection. It does not cancel an active subscription — Apple manages billing, so cancel there first if you want it stopped.
Ask to access, correct, or delete information associated with your email or submission.

No Advertising or Tracking

Eddy shows no advertising, does not use the advertising identifier (IDFA), and does not track you across other companies’ apps or websites. Nothing here is sold or shared with data brokers. Because Eddy does no such tracking, the iOS app never shows Apple’s App Tracking Transparency prompt.

Security and Children

Eddy uses technical and organizational safeguards, but no internet service can promise absolute security. Eddy is intended for general audiences and is not directed to children under 13. Please contact us if you believe a child submitted personal information.

Changes and Contact

We may update this policy as Eddy changes and will revise the date above. For privacy questions or an access, correction, or deletion request, email eddy@eddy.guide or use the feedback form available from eddy.guide.

Overview

Information We Collect

Usage and device data. Pages viewed, rivers and features used, referral information, approximate location derived from network information, browser/device details, and diagnostic events. Hosting and security logs may include an IP address.

Anonymous app accounts. When you first open the mobile app, Eddy creates an anonymous account so saved rivers can be stored and restored. It consists of a randomly generated identifier and a timestamp. It contains no email address, name, or password, and you are not asked to sign up. Sign in with Apple provides a recoverable identity across devices; signing into an existing Apple-linked account may replace the anonymous identifier.

Sign in with Apple. If you choose to sign in, Apple provides a user identifier and, at your option, a name and an email address. Apple lets you hide your real address behind a private relay; Eddy works either way and does not require you to reveal it. When Apple supplies a name, Eddy saves it as your account display name.

Push notification tokens. If you enable notifications, Eddy stores a push token issued by Apple and the notification service, together with the platform, app version, the device’s model name (for example “iPhone 15 Pro”), and a record of which alerts were sent to that device. Tokens identify an installation and are linked to your Eddy account; they are removed when the device stops accepting notifications.

Subscription status. If you purchase Eddy Premium, Eddy stores the product purchased, whether the subscription is active, when it expires or renews, and whether there is a billing problem. Eddy never receives or stores your payment card, billing address, or Apple ID credentials — the purchase is made with Apple, and Eddy is told only whether access should be granted.

Precise location in the app. If you allow it, the app may use your device's location to show where you are relative to a river. Precise location is used on the device for map and distance features. Starting a float records a GPS track, including position, time, accuracy, and available speed, direction and altitude. Eddy asks for While Using the App permission; an active float can continue recording while your phone is locked, with iOS showing its location indicator. Finishing the float stops recording. For local weather and nearby route searches, the app sends coordinates rounded to 0.05 degrees to Eddy. Find a Route sends these coordinates when you tap Search with Near you selected; choosing a river instead omits them. Location is not shared with third parties for advertising. You can decline, and the app remains usable; you can revoke the permission at any time in iOS Settings.

Float history and account backup. Ending a float saves a recap on your phone. When signed in with Apple, Eddy backs up your saved routes and completed summaries so you can recover them. Summaries include route endpoints, first and last tracked river mile, date and times, boat type if supplied, tracked distance, moving, stopped and unobserved time, pace, and a historical water reading when available. These records are linked to your account. Raw River Mode GPS positions and traces are not uploaded to Eddy. The raw track stays on this phone after the float ends and is excluded from iCloud and device backups. Deleting the float from History deletes its local track too; if track deletion fails, Eddy shows that it is pending and retries when the app opens or returns to the foreground. Restoring an account backup restores the summary, not the raw track. If local history becomes unreadable, Eddy preserves a recovery copy on your phone before starting fresh. That copy is not uploaded and is removed when you delete a trip or your account.

Helping improve estimates. An optional setting under Floats › Saved Floats & History › Backup › Help improve float estimates lets Eddy study summaries of floats you finish while sharing is enabled. It is off by default. Turning it off excludes your trips from future analysis without removing your backup. Setting changes need a connection; the app retries a pending withdrawal. We do not provide these trips to outfitters or use them for advertising.

Lock Screen and Dynamic Island. During a float, a Live Activity can show the river, take-out, progress and estimated time remaining without unlocking your phone. These updates are generated on your device and do not share your live location with other people. You can dismiss the Live Activity or turn off Live Activities for Eddy in iOS Settings. Dismissing it does not stop recording; finish the float in Eddy to stop recording.

On-device storage. River data (access points, hazards, courses, and last known readings), saved rivers, and app preferences are stored on your device so the app works without a signal. You can clear the river data at any time from Profile › Offline storage. Deleting the app removes its local data; account backups require separate deletion. Authentication credentials may remain in the iOS Keychain.

Feedback and correspondence. Email address (required when you send feedback from the app, so we can reply), optional name, message, attachments, page or river context, and emails you send to an@eddy.guide address.

Email subscriptions. Your email address and the page or form where you subscribed. We use this to provide the requested updates.

Shared float plans. River, put-in, take-out, vessel, calculated trip details, and the condition snapshot stored for the shareable link. Shared links are accessible to anyone who has the link.

Community reports and photos. Report type, description, river and coordinates, optional display name, selected access/gauge context, and an uploaded photo. In-app hazard reports send your captured GPS position, accuracy and capture time when you choose to submit the report. Uploaded photos are held privately for review and only become publicly visible if a moderator approves the report; rejected photos are deleted from storage. Eddy decodes and re-encodes community photos before storage to remove embedded camera metadata, including EXIF location metadata. Photos submitted from the iOS app require Sign in with Apple and are linked to your Eddy account, so that an account sending abusive content can be blocked; your name and email are not published with them. Reports and photos submitted through the website’s public contribution form are not linked to your Eddy account, even when you are signed in. Any display name is supplied separately and may be published with your contribution.

Location you choose to use. If you use a “nearest me” feature, your browser may ask for location permission. The feature uses the coordinates needed to calculate nearby results. Browsing the website does not start a continuous location recording; recording in the app begins when you start a float.

How We Use Information

Provide river conditions, planning, sharing, widgets, and support.

Review community submissions and correct inaccurate or unsafe information.

Send updates you requested and respond to messages.

Measure reliability and usage, troubleshoot errors, prevent abuse, and secure Eddy.

Comply with law and protect users, partners, and the service.

Eddy does not sell personal information or use it for third-party behavioral advertising.

Cookies and Local Storage

Service Providers and External Links

Eddy uses service providers to operate the website and app. Providers that process personal information for Eddy must protect it as this policy describes and use it only to provide these services:

Vercel for hosting, delivery, logs, and site analytics.

Supabase for the database, authentication infrastructure, and media storage.

Google Analytics/Tag Manager for usage measurement when configured.

Resend for subscription, inbound email, and reply delivery.

USGS and weather providers for river and forecast data. Gauge requests are generally made server-side.

Mapbox for maps, place search and routing. Map requests disclose your IP address and the area you are viewing or downloading, which may approximate your location. Place searches and shuttle estimates send the search or route details needed for that request. The iOS app switches Mapbox’s optional usage telemetry off at startup.

Sentry for crash and error reporting from the website and the iOS app. Reports carry device model, operating system, app version, a stack trace, and an SDK installation identifier used to connect diagnostics from the same installation. Eddy filters likely tokens, email addresses, account UUIDs, and coordinate pairs from JavaScript error text and custom diagnostic extras before sending. Diagnostic reports are not used for advertising.

RevenueCat for subscription purchases and their status. RevenueCat receives your Eddy account identifier and the purchase records Apple returns. Eddy never receives your payment details — those stay with Apple.

Expo for delivering push notifications to the iOS app. Expo receives a device push token and the contents of each notification, which name the river and its condition.

Apple for Sign in with Apple and for all subscription billing.

Routing and navigation providers for shuttle estimates and links you choose to open.

Retention and Public Information

Your Choices

Do not grant browser location permission if you do not want to use location features.

In the app, finish your float to stop recording. You can also revoke Eddy’s location permission in iOS Settings. Browsing and planning remain available without location permission.

Delete individual floats from Floats › Saved Floats & History › History. For a signed-in account, deletion is also sent to your account backup; offline changes wait for a connection. Turn off Help improve float estimates under Floats › Saved Floats & History › Backup to withdraw from future estimate analysis without deleting your backup.

Use an unlisted shared-plan link only with people you trust.

Do not include faces, license plates, children, or private details in community photos.

Use the unsubscribe option in an email or contact us to stop email updates.

Delete your account in the app. In the iOS app, open Profile and choose Delete account, or Delete my data when using Eddy without signing in. Deletion happens immediately and removes your account, your saved float plans, completed-float summaries, estimate-sharing preference, favorites, alert rules, and registered devices. The app also stops an active float and removes local float records and raw tracks. If local cleanup fails, the app asks you to retry. Deleting your account requires a connection. It does not cancel an active subscription — Apple manages billing, so cancel there first if you want it stopped.

Ask to access, correct, or delete information associated with your email or submission.