Privacy policy

In short

• You can plan a paddle on daypaddle.com without an account.
• The website and the apps contain no analytics, advertising or crash reporting services of their own, and we do not sell your information. Apple and Google can pass us crash reports, as described below.
• The apps record your track only between Start and Done. Recordings stay on your phone unless you choose to send them. When you sign in, a short notice suggests uploads to daypaddle.com; uploads start only if you choose "Continue with upload", and "Not now" keeps them off. Sending a paddle to Strava (Android) or exporting it is a separate choice.
• While it records, the iPhone app also sends its position, rounded to about a kilometre, to daypaddle.com every 30 seconds to show nearby ships, unless you turn off Nearby ships. We do not keep that position.

What we collect

When you visit the website

Like any website, daypaddle.com receives your IP address and your browser's details with every request. The web server's log records the address, the time, the page asked for (including anything after a question mark in its address), the page you came from (when your browser sends it) and your browser's description. The apps' requests are logged the same way.

The site sets only its own cookies: one that keeps you signed in, one that protects forms, one that remembers you agreed to the notice shown before planning (for a year), and one that carries a single notice after you submit a form. There are no advertising or tracking cookies. Display choices such as units and map layers are kept in your browser's own storage.

Your account

To create an account you give an email address and a password. We keep the password only as a one-way hash. We keep your settings (time zone, planning defaults and units), when you joined and last signed in, and what you add: paddles you record (name, date, notes and route), boats, routes you draw or import on the workbench and comparisons you save.

The apps

Recording. The apps record your track only between Start and Done, at the precision your phone's location permission allows (full GPS precision when precise location is on), while the phone shows that it is recording (on Android, a notification when you allow notifications; on the iPhone, the location indicator). A recording also holds the phone's motion sensors, barometer and heading, its battery and power state, the phone model and system version, the app version and a random identifier for this installation of the app (not a hardware identifier). The Android app also records raw satellite measurements and more detail about the phone, such as its maker and system build. The iPhone app also records the phone's motion activity (for example walking or driving) and the ships near you.

Signing in. The apps sign in through daypaddle.com's own page in your phone's browser. daypaddle.com then keeps a record of the signed-in phone: a one-way hash of its sign-in token, a name ("iPhone", or "Android phone" with the model, for example "Android phone (Pixel 8)"), and when it signed in and was last used.

Uploads. When you sign in, the app shows "Upload your paddles", suggesting uploads to daypaddle.com. Nothing is pre-set: "Continue with upload" turns uploads on, and "Not now" keeps them off. If you leave without choosing, uploads stay off and the notice returns the next time you open the app, never during a recording. You can change the upload setting at any time. While uploads are on and you are signed in, each paddle you finish, and each one already on the phone, is uploaded: its whole recording, including the motion sensor data, and its session details, which include the paddle's name and note, the boat, any plan you attached, the phone model and the times. On the iPhone, downloads from the Daypaddle logger box go too. Over mobile data only files up to the size you choose go (50 MB unless you change it); larger ones wait for Wi-Fi.

Nearby ships (iPhone). While a recording runs, the iPhone app sends its position, rounded to about a kilometre, to daypaddle.com every 30 seconds and gets back the ships nearby. Nearby ships is on by default; you can turn it off under You, Nearby ships. It works whether or not you are signed in or uploads are on. daypaddle.com does not store or log the position. A test feature for a deck display, off unless you turn it on, also asks daypaddle.com for weather and tide charts near a position rounded to about a kilometre.

Boats (iPhone). While you are signed in, the iPhone app keeps your boats in step with your account on daypaddle.com, whether or not uploads are on.

Maps. Both apps load their maps from daypaddle.com.

Spot photos (iPhone). If you turn on "Publish my spot photos on daypaddle.com", each spot photo you take or add is sent with when and where it was taken, which way the camera faced, your caption and your choice of credit. The original, with its location data, is kept privately under your account. A published photo is public: anyone can see the photo (resized, with no location data in the file), where and when it was taken, which way it faced, its caption and the credit (the name on your account if it has one and you chose it, otherwise "A Daypaddle paddler"). Photos from accounts other than Daypaddle's curators wait for review before they are published.

Kept on the iPhone only. Your logger box's details, private markers and, only if you turn it on, a look at today's calendar for Daypaddle route links. None of these leave the phone, except that a route found in your calendar is planned with daypaddle.com like any other plan.

Strava (Android)

If you connect Strava in the Android app, your phone sends each paddle you finish after connecting to your Strava account: the GPS track, the paddle's name, the sport and the recording's identifier. It goes from your phone to Strava directly. To connect and to renew the connection, daypaddle.com passes Strava's tokens to your phone without keeping them. When you connect, Strava also sends your Strava athlete number and name; daypaddle.com passes them to your phone without keeping them, and the app keeps them to show which Strava account is connected. What Strava receives is then covered by Strava's privacy policy and your Strava privacy settings. The iPhone app does not connect to Strava.

Why we use it

• To run your account and sign you in, on the website and in the apps.
• To keep your paddles, boats, routes and uploaded recordings for you and show them to you.
• To keep the website working and secure: the server log, error reports and limits on how often one address can make requests.
• Uploaded recordings are stored under your account. They are not used for anything else yet; if they are ever used to improve routing or current models, how they are anonymized will be described first. Daypaddle never publishes your tracks or their timing.
• Published spot photos: to show what a launch or landing looks like at a given tide.

Where it goes

Daypaddle runs on a DigitalOcean server in Toronto, Canada. Beyond that server:

• Postmark sends account email (address confirmation and password reset), so it receives your email address and the message.
• Strava receives your paddles only if you connect it (above).
• Anthropic: Daypaddle has a tool that can ask Anthropic's image model to suggest what a spot photo shows. It would receive a resized copy of the photo with its metadata removed, together with the photo's role (such as launch or landing). The location data in the file is removed, but what the picture shows remains. We have not used this tool.
• Your phone's backups: the iPhone app leaves recordings out of iCloud and computer backups, but spot photos, private markers, boats, the upload queue and the app's settings stay in them. The Android app puts nothing in cloud backups; on Android 12 and later, recordings move to a new phone when you transfer directly from the old one.
• App stores and diagnostics: for the Android app installed through Google Play, Google may collect crash and performance information when you allow usage and diagnostics sharing, and make reports available to us. For iPhone test builds distributed through TestFlight, Apple collects testing information and shares crash reports with us; feedback you send through TestFlight reaches Apple and us. For the App Store, diagnostic sharing depends on your phone's settings. These are separate from the iPhone app's Share diagnostics feature.
• Directions: when you open directions from the iPhone app, the destination is passed to Apple Maps, or to Google Maps if you choose its link, under that service's own privacy policy.
• What you send yourself: a recording, a GPX file or an archive of your data that you export or share from an app goes wherever you send it, and so do diagnostics you choose to share from the iPhone app. If you turn on the iPhone's deck-display test, the app sends your live position, speed, course and paddle details over Bluetooth to the Kindle you paired.

Email you send us passes through Porkbun, which forwards mail for daypaddle.com to our own mailbox. Apart from the services named here, our mailbox and what you send yourself, Daypaddle does not pass your information to anyone. The website's pages, styles and map all come from daypaddle.com itself.

How long we keep it

• Your account and what you add to it (paddles, boats, routes, uploaded recordings, and spot photos with their originals) are kept until they are deleted. You can delete your whole account in Settings, and an uploaded recording or a spot photo one at a time, on the website; deletion removes the stored files too. A paddle or a workbench route goes with the account. See Deleting your account and data; if you cannot sign in, ask us using the contact below.
• A phone stays signed in for 90 days after it was last used, unless you sign out or revoke it sooner. The phone's entry stays in your list of signed-in devices.
• A website session ends when you close the browser or sign out. Signing out deletes its record on the server; otherwise the record stops working two weeks after it was last updated.
• An unfinished upload stops working 48 hours after it starts. Its partial file is removed when your account next starts an upload.
• Request limits count requests over a minute, or up to an hour for password resets.
• Expired website sessions and request-limit records can remain after they stop working. Deleting your account removes its sign-in sessions; request-limit records remain until the site's cache removes them.
• Server access logs and error reports are kept apart from your account, so deleting your account does not remove them. We have not yet set a fixed period for deleting them; this page will give it once we have.
• Recordings on your phone stay there until you delete them.

Your choices

• Plan without an account.
• Choose "Not now" at sign-in, or turn uploads off at any time. Turning them off stops new uploads; it does not remove what was already sent.
• Leave Strava unconnected, or turn it off: the app asks Strava to disconnect Daypaddle and deletes its Strava tokens. Activities already on Strava stay there.
• Refuse the location permission, or allow only approximate location for a coarser track. The apps cannot record without any location permission.
• Delete a recording on your phone. A copy already uploaded stays on daypaddle.com until you delete it on your Recordings page, or delete your account.
• Sign out in the app, or revoke a phone under Settings, Signed-in devices. Revoke laptop keys under Settings, API keys.
• Change your email address, password and settings, and delete boats, on the website.
• Unpublish a spot photo with Delete in the iPhone app. Daypaddle stops serving it and removes its copies on the server; copies already downloaded, or kept in a cache elsewhere (published photos may be cached for up to a year), may remain. The original stays private under your account until you delete the photo on the website (Your spot photos, in Settings), which removes it and every copy Daypaddle serves.
• Delete your account, an uploaded recording or a spot photo on the website (how), or, if you cannot sign in, ask us to, using the contact below.

Security

• Everything between your browser or phone and daypaddle.com travels over HTTPS.
• Passwords are kept only as Argon2 hashes, and app sign-in tokens and laptop keys only as one-way hashes.
• On the phone, the sign-in token is kept encrypted: in the iPhone's Keychain, and on Android in a file encrypted with a key held by the Android Keystore.
• Recordings are kept in the app's private storage on the phone.

Children

Daypaddle is not designed for children. We do not knowingly collect information from children, and if we learn we have, we delete it.

Other people in our data

The planner's routes were learned in part from past paddles recorded by Daypaddle's author and a club organizer, who agreed to that use, and from past club trip notes. These stay private on the author's computer. The website shows route lines and counts of past outings worked out from them, not anyone's recorded tracks, notes or names.

daypaddle.com also receives the AIS broadcasts that ships make, through aisstream.io, to show nearby ships, and keeps an archive of them. They identify vessels, not Daypaddle users.

People can appear in spot photos. The iPhone app asks you to leave people out or ask them first, and a published photo can be hidden on review.

Changes to this page

When what Daypaddle collects or how it uses it changes, we will update this page and the date at the top.

Contact

The owner of Low Brace Labs is responsible for privacy. Write to hello@daypaddle.com with a privacy question or complaint, to ask for a copy of the personal information we hold about you, or to ask for it to be corrected or deleted. We may need to confirm your identity first. We answer within 30 days and reply by email.