Privacy Policy for Oarsum

Oarsum ("App") is a kayaking and paddle sports tracking application provided by Oddsplash LLC ("Oddsplash," "we," "our," or "us") for iOS 26+. We are committed to protecting your privacy and being transparent about how we collect, use, and store your data.

Key privacy principle: Your data belongs to you. Oarsum keeps your trips, routes, and trip history local-first on your device using Apple's SwiftData framework. We also operate private backend services for support messages, diagnostics, optional aggregate analytics, water-pack delivery, and Oarsum water-name database corrections. Raw routes, ordered GPS points, trip history, exact launch/end points, Apple Maps names, and raw HealthKit samples are not uploaded to those services unless you explicitly attach route points to a support report.

2.1 Location Data (GPS)

What we collect: When you start a paddle session, Oarsum records your precise GPS location at regular intervals to track your route, calculate distance traveled, and measure your speed and speed variations.

Specific data:

• Latitude and longitude
• Altitude (elevation)
• Horizontal accuracy
• Speed (calculated from location updates)
• Timestamp for each location point

Why we collect it:

• Display your paddle route on the map
• Calculate total distance, average speed, and maximum speed
• Create a trip history you can review, export, or share
• Measure distance per stroke (DPS), an advanced paddling metric

Where it's stored: Oarsum keeps precise route points locally in its app database and, when you grant Health write permission, in Oarsum-authored workout routes in Apple Health. Precise GPS tracks are not uploaded to our backend. Location data leaves your device only when you:

• Explicitly export a trip as a GPX file (standard GPS file format)
• Share a GPX file with another person or service of your choice
• Enable optional Community Lake Activity / water matching analytics, which may send a monthly rotating random contributor ID, confirmed or inferred water-body identity, unordered unique geohash-6 cells, an unordered corridor signature, broad calendar and activity buckets, pack/version context, and optional watercraft or experience buckets. These signals support aggregate heat maps, water-body use counts, and repeated-corridor counts without sending raw route points, route order, direction, exact trip times, Apple Maps names, or raw HealthKit samples.
• Save, confirm, reject, or correct a water body name, which may send the selected or typed water name, Oarsum database candidate identifiers, candidate ranks or confidence buckets, pack/version context, and coarse route sample cells for Oarsum's private water-name review system. This does not send your full route, route order, exact launch location, exact end location, HealthKit data, or Apple Maps names.

How to control it:

• You can deny location permission in iOS Settings > Oarsum > Location
• If you deny permission, the App cannot record new paddle sessions
• Existing location data remains on your device; you can delete trips manually in the App
• You can revoke permission at any time; previously recorded trips are unaffected

2.2 Health Data (HealthKit)

What we collect and save: With your permission, Oarsum uses Apple HealthKit to read fitness data for paddle metrics and save Oarsum-authored paddle workouts back to Apple Health.

Specific data:

• Heart rate (beats per minute) during paddle sessions
• Active energy / calorie burn (kilocalories) during paddle sessions
• Paddle-sports distance
• Paddle workouts
• Workout routes associated with paddle sessions

Why we collect it:

• Display average and peak heart rate during your paddle
• Show estimated energy expenditure (calories burned)
• Save Oarsum-recorded paddle workouts, paddle-sports distance, active energy, and workout routes to Apple Health when you grant write permission
• Help you track fitness progress over time

Where it's stored: Heart rate, calorie, distance, workout, and route summaries associated with your paddle sessions are stored locally in Oarsum's SwiftData database on your device. Oarsum also writes Oarsum-authored paddle workout records to Apple Health when you grant Health write permission. Raw HealthKit samples and Apple Health workout routes are not transmitted to our backend. If you enable optional fitness analytics, Oarsum may upload daily aggregate fitness totals such as workout count and total active energy.

How to control it:

• You can deny HealthKit access in iOS Settings > Health > Data Access & Devices > Oarsum
• If you deny permission, Oarsum will not display heart rate or calorie data, but the App continues to function
• Revoking HealthKit permission does not delete previously recorded heart rate or calorie data in Oarsum
• Oarsum can delete Apple Health workouts and workout routes that Oarsum authored when you choose to delete both the paddle and its Health data; iOS does not allow Oarsum to delete Health records authored by other apps
• You can manually delete trip records that contain health data from within the App

2.3 Motion Data (CoreMotion)

What we collect: With your permission, Oarsum uses your device's accelerometer to detect paddle strokes and measure stroke rate, cadence, and stroke count.

Specific data:

• Accelerometer data (device motion)
• Calculated stroke count per session
• Average stroke rate (strokes per minute)
• Distance per stroke (DPS), derived from distance and stroke count

Why we collect it:

• Accurately measure your paddling cadence and efficiency
• Provide SWOLF-equivalent metric (distance per stroke) for kayaking
• Help you track technique improvements over time

Where it's stored: Motion data is processed on your device and only aggregated stroke counts and rates are stored in your trip record. Raw accelerometer data is not stored. Stroke metrics are stored locally in SwiftData; optional analytics may send aggregate stroke totals only.

How to control it:

• You can deny motion permission in iOS Settings > Oarsum > Motion & Fitness
• If you deny permission, stroke metrics will not be recorded, but the App continues to function
• Revoking motion permission does not delete previously recorded stroke data

2.4 Trip Metadata

What we collect: To organize and manage your paddle sessions, Oarsum stores the following information:

Specific data:

• Trip name (user-entered or suggested from Oarsum's water-name database)
• Start and end date/time
• Total duration
• Trip completion status (active vs. completed)
• Unique trip identifier

Why we collect it:

• Organize your paddle history in a searchable list
• Display session summaries with duration and date
• Enable trip editing, deletion, and export
• Provide trip-level statistics and analytics

Where it's stored: Trip metadata is stored locally in SwiftData; optional analytics may send aggregate daily trip counts and totals only.

2.5 Water Body Names and Corrections

What we collect: Oarsum uses a private water-name database to suggest lake, bay, river, and other water body names for your paddles. When you choose, approve, reject, edit, or manually enter a water body name, Oarsum may send a privacy-minimized correction event to Oarsum's backend review system.

Specific data:

• The water body name you selected or typed
• Oarsum database candidate identifiers, candidate ranks, confidence buckets, and match-quality fields when available
• Coarse route sample cells derived from reduced route evidence used for local recommendations
• App version/build, installed water-name pack version, and a pseudonymous install identifier used for deduplication, rate limiting, and abuse prevention
• Optional Community Lake Activity context such as GPS quality buckets, pack/version context, and optional watercraft or experience buckets when you have enabled the related sharing setting

Why we collect it:

• Save the correct water body on your paddle
• Improve future Oarsum water-name recommendations
• Identify missing, ambiguous, incorrectly ranked, or incorrectly matched water bodies for private review
• Help maintain Oarsum's water database without uploading full routes

Where it's stored: The water name is saved locally on your trip. Correction events are staged through Oarsum's private Cloudflare backend and may be mirrored into private Supabase review tables for approval and database maintenance. User corrections do not automatically change the published Oarsum water-name database.

What is not sent: Water-name corrections do not include raw route points, full route geometry, launch coordinates, end coordinates, route replay history, HealthKit samples, heart rate, calories, motion data, or Apple Maps place names collected in the background.

To be clear, Oarsum does not:

• Require user accounts, registration, or login
• Collect or use cookies or advertising identifiers for tracking
• Upload raw routes, ordered GPS points, trip IDs, or trip replay history to Supabase except only when you explicitly attach route points to a support report
• Upload raw routes, ordered GPS points, trip IDs, trip replay history, exact launch points, or exact end points as part of water-name corrections
• Upload raw crash logs, stack traces, or full diagnostic dumps in the current release
• Share data with advertising networks or data brokers
• Sell, rent, or trade your data
• Use HealthKit or location data for purposes other than what you see in the App
• Include ads, in-app browser tracking, or behavioral profiling
• Collect information about other apps on your device
• Access your contacts, photos, or other personal data

4.1 Local-First Storage

Oarsum stores trips, routes, health summaries, and stroke metrics locally on your iOS device using Apple's SwiftData framework. This local app storage benefits from:

• iOS file protection — Local app data is protected on disk by iOS
• Sandboxing — iOS isolates Oarsum's local app data from other apps
• Local-first trip storage — Your trip history is not synced to an Oarsum account or cloud trip database in this release

4.2 Support, Diagnostics, Water-Name Corrections, and Pseudonymous Analytics Backend

• If you use iCloud Backup and have enabled App Data backup, your Oarsum data may be included in your iCloud Backup. This is controlled by your iOS Settings > [Your Name] > iCloud > iCloud Backup
• You can exclude Oarsum from iCloud Backup if you prefer; this does not affect data on your device
• Oarsum uses private backend services, including Cloudflare and Supabase, to receive support/contact messages, bug reports, feature requests, pseudonymous diagnostics, optional aggregate analytics, private water-pack requests, and water-name correction review data
• If you contact the developer in the App, Supabase receives the message text, selected topic/category, optional name, optional email address, app version/build, and limited device/app context needed to reply or debug
• If you submit a trip-trouble support report, route attachment is off by default; route points are sent only when you explicitly attach route points to a support report
• If you opt into profile/support sharing, Supabase may receive the profile fields and aggregate support context you chose to share, keyed to a random app-install ID rather than an Oarsum account
• Minimal diagnostics may include app launches, sessions, crash or hang summary counts, app version/build, and sanitized last-known screen or action
• Optional analytics may include daily trip summaries, Community Lake Activity / water matching analytics, and aggregate fitness totals when you enable those switches in Settings
• Product analytics may use PostHog when that SDK is linked/configured and you enable general analytics. These events are limited to sanitized app/product events, screen names, onboarding-step progress, permission outcomes such as granted or not granted, controlled feature-use events, app/version context, and bucketed or non-sensitive properties. Permission events do not include location or Health data, and Paddle Chat events do not include questions or answers. Oarsum disables PostHog autocapture, session replay, surveys, feature-flag preload events, and default person profiles, and must not send raw routes, exact coordinates, water names, email addresses, Apple IDs, Supabase IDs, raw HealthKit samples, exact trip metrics, payment details, or cross-app tracking data to PostHog.
• Water-name correction data may include selected or typed water body names, Oarsum database candidate identifiers, pack version, and coarse route sample cells used to review or improve Oarsum's private water database
• Community Lake Activity uses a contributor ID derived from an install secret and rotated monthly. PostHog product analytics uses a separate random anonymous identifier. Neither identifier is an Oarsum account or Apple identity.

4.3 Security Practices

• Oarsum does not transmit raw routes or ordered trip points except when you explicitly export/share them or explicitly attach route points to a support report. Optional Community Lake Activity transmits only the reduced signals described above.
• Oarsum also transmits support messages, pseudonymous diagnostics, optional aggregate analytics, private water-pack requests, and water-name correction events described in this policy
• Oarsum does not collect or store an Oarsum account password because it has no account system
• All network communication uses HTTPS/TLS
• Oarsum complies with iOS security best practices and Apple App Store security guidelines

4.4 Data Retention

• Location, health, and motion data is retained as long as the trip record exists
• Deleted trips are permanently removed from your device
• Exporting a trip does not delete it from Oarsum; you must manually delete the original
• We do not retain copies of exported files; data you export is your responsibility to manage
• Community Lake Activity contribution rows and coarse cells expire after 90 days. De-linked aggregate water-body, heat-cell, and corridor counts may be retained longer for trend analysis.
• Support messages, feedback reports, and support profile records are retained only as long as needed to respond, debug, and improve the App

5.1 Overview

Oarsum is free to download, and core paddle recording, routes, duration, distance, heart rate, calories, and local trip history are available without a subscription or account.

Free access includes three Deep Detail paddles each calendar month, three Deeper Insight unlocks each week, your first two GPX exports, and Paddle Intelligence. Paddle Intelligence is always available and uses neither allowance. Oarsum+ is an optional auto-renewable subscription that provides unlimited Deep Detail, Deeper Insight, records, trends, patterns, efficiency and stroke analysis, and GPX exports. Oarsum+ may be offered as Seasonal Pass and Annual Pass subscriptions. Any introductory offer, if available, is shown by Apple before purchase.

5.2 Payment Information

• Apple handles all payments. We do not collect, store, or process credit card numbers, billing addresses, or payment methods
• Payment processing is handled entirely by Apple through the App Store
• Apple provides transaction and entitlement status needed to unlock Oarsum+ and provide purchase support
• Your billing information is stored securely in your Apple Account, not on Oarsum's servers or devices

5.3 What's Offered

• Core paddle recording, route viewing, local trip history, duration, distance, heart rate, and calories remain usable without purchase.
• Free access includes three Deep Detail paddles each calendar month, three Deeper Insight unlocks each week, your first two GPX exports, and Paddle Intelligence. Paddle Intelligence uses neither allowance.
• Oarsum+ provides unlimited Deep Detail, Deeper Insight, records, trends, patterns, efficiency and stroke analysis, and GPX exports.
• Oarsum+ renews automatically unless cancelled through your Apple Account subscription settings at least 24 hours before the current period ends.
• Earlier one-time tip products, if present in App Store Connect, are no longer part of the app experience and do not unlock features.

Oarsum does not use third-party services for advertising, cross-app tracking, or behavioral profiling.

Oarsum uses Cloudflare for private water-pack delivery and water-name correction ingestion. Cloudflare may process:

• App Attest-protected requests from the app
• Private water-pack download requests
• Water-name correction events, including selected or typed water names and coarse route sample cells
• Private review/archive records used to improve Oarsum's water database

Oarsum uses Supabase for support messages, diagnostics, optional aggregate analytics, and mirrored water-name correction review summaries. Supabase processes:

• Contact messages, bug reports, feature requests, optional reply email addresses, and limited device/app context when you submit them
• Optional profile/support context you choose to share in Settings
• Minimal diagnostic summaries needed to keep the app reliable
• Optional daily trip summary rollups
• Optional Community Lake Activity / water matching analytics
• Optional aggregate fitness totals
• Review-ready water-name correction summaries mirrored from Cloudflare for private approval and database maintenance

Supabase does not receive raw trip routes, ordered GPS points, full trip history, exact launch/end points, or raw crash logs from the app except when you explicitly attach route points to a support report. Water-name correction mirrors use coarse route evidence, not full routes.

Oarsum may use PostHog for optional product analytics when the SDK is linked/configured and you enable general analytics. PostHog may receive sanitized product event names, screen names, onboarding-step progress, permission outcomes such as granted or not granted, controlled feature-use events, app/version context, and bucketed or non-sensitive event properties. Permission events do not include location or Health data, and Paddle Chat events do not include questions or answers. PostHog must not receive raw routes, exact coordinates, water names, email addresses, Apple IDs, Supabase IDs, raw HealthKit samples, exact trip metrics, payment details, session replay, autocaptured screen contents, advertising identifiers, or data used for cross-app tracking.

The oarsum.com website includes contact, app download help, support, and feedback forms. If you submit one, we store the details you provide, such as name, email, message, paddling context, Apple setup, and request category, along with operational details such as timestamps, source page, basic request context, a country signal, spam-protection status, and internal follow-up notes. We use this to reply to you, provide download help, handle support and feedback, prevent abuse, and improve the product experience.

When enabled, the production website uses PostHog for limited website, campaign, and reliability analytics. PostHog receives sanitized pageviews, allowed campaign parameters, referring domain, campaign handoff and App Store redemption-link events, invite or demo CTA clicks, contact-form submit events, browser and device type, operating-system context, and sanitized website exceptions. Exception events may include the error type and message, stack filenames and line or column numbers, page path, and website release or commit so failures can be grouped and resolved. Before transmission, Oarsum removes exception breadcrumbs, page-element data, local variables, source context, raw referrers, non-allowlisted query parameters, and email-like strings. PostHog stores a random anonymous browser identifier in a first-party cookie and localStorage so visits and campaign steps can be counted without an Oarsum account. We use this information to understand campaign reach, geographic distribution, conversion steps, website performance, and production reliability.

PostHog derives approximate country, state or province, city, postal code, latitude and longitude, time zone, and an accuracy radius from the request IP address. Oarsum's PostHog project anonymizes raw IP addresses and retains events for 12 months. This is approximate network geography: the website does not request browser GPS permission or collect the device's precise location. Website PostHog analytics remain disabled for visitors in the EEA, United Kingdom, and Switzerland while the site has no analytics-consent interface.

This implementation does not send form field contents, session recordings, heatmaps, surveys, advertising identifiers, or cross-site profiles. PostHog analytics and exception capture do not initialize in development, internal review, or preview website builds. Oarsum does not sell this analytics data, use it for advertising, or use it to track people across apps or unrelated websites.

The website may use Apple MapKit JS to render interactive-quality Apple Maps backdrops for feature demonstrations. When a map enters view, the browser connects to Apple and sends the technical request details and map region needed to deliver map imagery. Oarsum does not request your device location for these demonstrations, and the website does not send your route or form contents to Apple.

The website is served through Cloudflare Pages and uses Cloudflare security services, including Turnstile, to protect forms from abuse. Cloudflare may process basic request and security data for delivery, firewall, and abuse-prevention purposes. Public website pages may be indexed by search engines and AI search services. Private form submissions are not exposed through those public pages.

Oarsum does not use third-party services for the following:

• Cloud storage
• Authentication or user accounts
• Advertising or ad networks

6.1 Apple Frameworks and Service Providers

Oarsum uses the following Apple frameworks and service providers:

Oarsum uses Apple Maps, provided by Apple as part of MapKit. Apple's Maps Terms of Use apply.

Oarsum may use Apple Maps transiently to help name a completed paddle after a likely body of water. Apple-returned map names are used only during naming and are not stored in Oarsum's backend or included in Community Lake Activity analytics. Oarsum's own canonical water-feature identifiers, not Apple Maps place names, may be used to build aggregate water-body usage intelligence.

Map Disclaimer: Maps, routes, and location data displayed in Oarsum are provided by Apple Maps and are for informational purposes only. Map data may be inaccurate, incomplete, or outdated. Do not rely on this app for navigation on waterways. Always carry proper navigational charts, a compass, and know your route before launching. Oarsum is not a substitute for proper navigational equipment or local knowledge of waterways.

8.1 Age Restrictions

Oarsum is not designed for, and we do not knowingly collect data from, children under 13 years old. If you are under 13, please do not use this App.

8.2 COPPA Compliance

Oarsum does not:

• Collect location data from users under 13 without verifiable parental consent
• Collect health or motion data from users under 13 without verifiable parental consent
• Use data from children to target advertisements or build user profiles

If we become aware that a child under 13 has used Oarsum and we have collected their data, we will take reasonable steps to delete it as required by applicable law. If you believe your child's data has been collected, please use the secure contact form.

8.3 Parental Controls

Parents and guardians can restrict app access and control permission grants through iOS Settings > Screen Time > App Limits and iOS Settings > Privacy.

9.1 Access Your Data

Your trip, route, location, health, and motion history is stored on your device, so you have direct access to that data within Oarsum:

• View all your recorded trips, routes, and statistics in the App
• Use your first two GPX exports, then unlock unlimited GPX exports with Oarsum+
• Review HealthKit and motion data associated with each trip

9.2 Data Portability

You can export your trip data in the following formats:

• GPX (GPX Trackpoint XML) — Industry-standard format compatible with mapping software, fitness trackers, and GPS devices
• Future versions may support CSV, FIT (Garmin), or TCX (TrainingPeaks) formats

9.3 Deletion

You can delete your data at any time:

• Delete individual trips — Swipe to delete in the trip list, or tap Delete in trip detail
• Delete local app data — Delete the App, either from the Home Screen or in iOS Settings > General > iPhone Storage > Oarsum > Delete App. Do not use Offload App for deletion; Apple preserves an offloaded app's documents and data
• Delete HealthKit data — Delete Oarsum-authored Apple Health workouts and attached route samples from Oarsum when the App offers that option, or manage Health records directly in the Health app. Oarsum cannot delete Health records authored by other apps
• Delete from iCloud Backup — Change iCloud Backup settings or remove Oarsum from backup in iOS Settings

9.4 Backend Support and Analytics Records

Oarsum has no account system. For backend records:

• You can request a copy of support, entitlement, diagnostics, and optional analytics records associated with your app-install identifiers where feasible
• You can request deletion of support records and backend analytics records where feasible
• You can withdraw consent for optional analytics and support-profile sharing in the App at any time
• We will respond to access, deletion, and privacy-rights requests within the time required by applicable law

9.5 GDPR Rights (EU Users)

If you are located in the European Union, you have additional rights under the General Data Protection Regulation (GDPR):

• Right to access — Request a copy of your personal data through the secure contact form
• Right to rectification — Correct inaccurate data (edit trip names within the App)
• Right to erasure — Delete your data (use in-app deletion or uninstall)
• Right to restrict processing — Limit how we use your data (revoke permissions in iOS Settings)
• Right to data portability — Request your data in a portable format (export GPX)
• Right to object — Object to processing through the secure contact form

We will respond to GDPR requests within the time required by applicable law.

9.6 CCPA Rights (California Residents)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to know — Know what personal information we collect (see Section 2 of this policy)
• Right to delete — Delete local trip data in the App or by uninstalling; use the secure contact form to request deletion of support records or backend analytics records associated with your app-install identifiers where feasible
• Right to opt-out — Opt out of selling or sharing your data (we do not sell data)
• Right to correct — Correct inaccurate data (edit trip names within the App)
• Right to data portability — Get your data in a portable format (export GPX)

We do not "sell" or "share" personal information as defined by CCPA. Raw route, precise location history, and raw HealthKit samples are not disclosed to third parties.

9.7 Australian and New Zealand Privacy Rights

If you are located in Australia or New Zealand, you may request access to or correction of personal information that Oarsum holds about you, and you may contact us about privacy questions or complaints through the secure contact form.

For clarity, Oarsum does not currently store your full paddle history, raw routes, ordered GPS points, or raw HealthKit samples on Oarsum servers unless you explicitly attach route points to a support report. Those paddle records are otherwise stored locally on your device and can be viewed, exported, or deleted in the App. A data-access request is still relevant for the backend records Oarsum may hold, such as support messages, optional reply email addresses, limited device/app context, pseudonymous diagnostics, optional aggregate analytics, optional support profile context, and subscription/support context.

Health, fitness, precise location, and motion data can be sensitive. Oarsum handles that data only for the App purposes described in this policy and does not sell or disclose it for advertising or behavioral tracking. Support submissions, diagnostics, optional aggregate analytics, and optional support profile context may be processed outside Australia or New Zealand, including in the United States or other locations where Supabase infrastructure operates.

We will respond to Australian and New Zealand privacy inquiries within the time required by applicable law. If you are not satisfied with our response, Australian users may be able to contact the Office of the Australian Information Commissioner (OAIC), and New Zealand users may be able to contact the Office of the Privacy Commissioner.

10.1 User-Initiated Sharing

You may choose to share your data:

• Export GPX files — You can export trip data as GPX files and send them to anyone via email, messaging, or cloud storage of your choice
• Support and feedback submissions — If you contact the developer or opt into support profile sharing, the submitted support content and limited app/device context are sent to Oarsum's private Supabase backend
• Optional analytics — If enabled, aggregate summaries and Community Lake Activity / water matching signals may be sent to Supabase using monthly rotating identifiers for duplicate protection, short-lived staging, and de-linked aggregate heat, water, and corridor counts
• We do not automatically share raw trip routes, ordered GPS points, full trip history, or raw HealthKit samples

10.2 We Do NOT Share Data

We never share, sell, or disclose raw trip routes, ordered GPS points, full trip history, raw HealthKit samples, or support records to:

• Third-party analytics providers
• Advertising networks
• Data brokers or marketing companies
• Social media platforms
• Government agencies (except as required by law with proper legal process)
• Other app developers or services

10.3 Legal Requests

If we receive a valid legal request (subpoena, warrant, court order) for your data, we will: 1. Notify you of the request unless legally prohibited 2. Require the requesting party to demonstrate they have proper legal authority 3. Disclose only the minimum data necessary to comply with the request 4. Document and retain records of all such requests

Because trip, route, precise location history, and raw health data are stored on your device, we do not have copies of those records to produce. Oarsum may have support submissions, diagnostics, optional aggregate analytics, and optional support profile context in Supabase.

11.1 Security Measures

• Local app data is protected on disk using iOS file protection
• Oarsum uses secure coding practices and follows OWASP security guidelines
• We do not transmit raw route history, ordered GPS points, or raw HealthKit samples except when you explicitly export/share them or explicitly attach route points to a support report
• Support, diagnostics, and optional analytics network communications use HTTPS/TLS
• We do not collect or store an Oarsum account password because Oarsum has no account system

11.2 What We Cannot Protect Against

For local trip, route, location, health, and motion history stored on your device:

• Device theft or loss — Protect your iPhone with a strong passcode and use Find My iPhone
• Jailbroken devices — Jailbreaking disables iOS security protections
• Malware or stolen credentials — Keep your iOS system and all apps updated

11.3 Breach Notification

In the unlikely event that Oarsum infrastructure is breached, we will: 1. Notify affected users and regulators as required by applicable law 2. Describe the breach and data affected 3. Provide steps to protect themselves 4. Provide additional remediation if legally required or appropriate for the data affected

Backend breach scope may include support submissions, diagnostics, optional aggregate analytics, optional support profile context, water-pack requests, and water-name correction review data; raw trip routes, ordered GPS points, full trip history, and raw HealthKit samples are not uploaded to those services except when you explicitly attach route points to a support report.

Oarsum is provided in the United States by Oddsplash LLC. Trip, route, location, health, and motion history is stored locally on your device. Support submissions, diagnostics, optional aggregate analytics, optional support profile context, water-pack requests, and water-name correction review data may be processed by service providers including Supabase, Cloudflare, and PostHog as described in this policy.

If you are located outside the United States and use Oarsum:

• Your trip, route, location, health, and motion history remains on your device under its local laws
• iCloud Backup (if enabled) is subject to Apple's data residency agreements with your country
• Export data remains under your control
• The backend data described above may be processed outside your country of residence

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of significant changes by:

1. Posting the updated policy in the App and on our website 2. Updating the "Effective Date" and "Last Updated" fields 3. If the change materially affects your privacy, we may prompt you to review the updated policy

Your continued use of Oarsum after changes become effective constitutes your acceptance of the updated Privacy Policy.

If you have questions, concerns, or requests regarding this Privacy Policy or Oarsum's privacy practices, please contact:

Oddsplash LLC Provider of Oarsum · Secure contact form

We will respond to privacy inquiries within the time required by applicable law.

• Apple Privacy Labels for Oarsum — View privacy declarations in the App Store
• Apple Privacy Overview
• Apple HealthKit Privacy
• iOS Location Privacy
• Your Privacy Choices

This Privacy Policy is provided for informational purposes. While we have made every effort to ensure accuracy, this policy does not constitute legal advice. If you have concerns about privacy law compliance, please consult with a licensed attorney in your jurisdiction.