Privacy Policy

Riverbot is built and operated by TPNet Industries Corporation (“we”, “us”). This policy explains what information we collect when you use the Riverbot website and mobile apps, why we collect it, and the choices you have. The short version: we collect only what the service needs to work, we don’t sell your data, and we run no advertising.

What we collect

• Account information. Your name, email address, and a hashed password if you choose email/password sign-in. If you enable two-factor authentication, we store the TOTP secret and recovery codes needed to verify you. You can also set a display preference for flow units (m³/s or cfs).
• Connected sign-in accounts. If you choose Apple, Microsoft, or Google sign-in when available, we store the provider’s account identifier and the name and email it shares with us. We use these to recognize your Riverbot account; we do not receive your provider password or request access to your mail or contacts. Apple can supply a private relay address instead of your personal email. We also keep the terms and privacy versions you accept during provider registration.
• Your stations and alerts. The stations you favourite and the setpoints you create — the flow and temperature ranges you want to fish, and how often we should check them. This is the core of the service; it’s how we know when to email or notify you.
• Device installations. When you sign in on a phone, the app registers a device installation so we can deliver push alerts: a stable installation ID, the platform (iOS or Android), a device push token, a device name, and the app version. You can revoke a device from your profile at any time.
• Support messages. If you contact us through the in-app support form, we keep your message and your account reference so we can help and follow up.
• River readings and forecasts. Flow, temperature, rainfall and forecast data are measured at public gauges and are not personal information. We store this time series to power your alerts and the outlook charts.

Location

The mobile map can centre on your position to show nearby gauges. This is opt-in: the app asks for location permission and only uses it to position the map on your device. We do not store your location on our servers, build a history of where you’ve been, or share it with anyone. Decline the permission and the map simply starts on a continental view — everything else still works.

Analytics

The public website uses Google Analytics to understand aggregate usage (pages viewed, broad region, device type) so we can decide what to build next. This is anonymous, trend-level information and is not tied to your Riverbot account. The signed-in dashboard and the mobile apps do not load this analytics script.

What we don’t do

• We don’t sell your data — to anyone, for any reason.
• We don’t run ads — in the apps or on the site.
• We don’t track you across other sites or apps.
• We don’t use your data to train models beyond the river-flow forecasts the service itself provides, which are built from public gauge readings, not from you.

Third parties we rely on

To run the service we use a small number of trusted providers, and only share what each needs:

• Cloudflare — routes and protects web traffic to the site.
• An email provider — sends your account and condition-alert emails.
• Apple (APNs) and Google (FCM) — deliver push notifications to your phone. Your device push token is shared with the relevant provider so a notification can reach your device.
• Apple, Microsoft, and Google sign-in — authenticate you when you choose their sign-in option. Your chosen provider processes that sign-in under its own privacy policy.
• OpenFreeMap / map tile providers — supply the basemap behind the station map.

River readings come from public government hydrometric networks — Environment and Climate Change Canada (GeoMet), the U.S. Geological Survey (USGS), the Grand River Conservation Authority, and Open-Meteo for weather. These are public data sources; we attribute them, and nothing we publish implies their endorsement of Riverbot.

Your choices & your data

• Access and edit. Your profile, favourites, setpoints and devices are all manageable from your account.
• Connected accounts. You can disconnect a sign-in provider after confirming your identity, while keeping another usable sign-in method. Disabling Apple email forwarding can prevent messages to your relay address; you can verify a different contact email in your profile.
• Delete. You can delete your account from either mobile app or your website profile settings. See the public account-deletion instructions. This removes your account, setpoints, favourites and device installations.
• Revoke a device. Remove any signed-in device from your profile to stop push delivery to it.
• Control alerts. Your Profile lets you independently turn fishing-condition email, mobile push, and in-app alerts on or off. Every condition-alert email also contains an unsubscribe link. These choices do not stop account-security, verification, or support messages.
• Email us. For anything you can’t do yourself — a copy of your data, a correction, or a deletion request — write to [email protected] and we’ll take care of it.

Security & retention

Passwords are hashed, never stored in plain text, and the mobile apps keep their sign-in tokens in the device’s secure storage (iOS Keychain, Android Keystore). We keep your data for as long as your account is active; deleting your account removes the personal data described above.

We encrypt temporary sign-in proofs and Apple authorization tokens on our servers. After disconnecting Apple or deleting your account, an encrypted authorization token may remain for up to seven days while we retry revocation with Apple. Its secret is cleared when revocation succeeds. Short-lived sign-in transactions and notification replay records expire and are removed by scheduled cleanup.

Children

Riverbot is not directed at children under 13, and we don’t knowingly collect their information. If you believe a child has created an account, contact us and we’ll remove it.

Changes to this policy

If we change this policy in a meaningful way, we’ll update the date at the top of this page and, where appropriate, let you know in the app or by email.

Contact

Questions about this policy or your data: [email protected].

TPNet Industries Corporation — operator of Riverbot (riverbot.app).