What RiverFinn collects, and what it never does with it.

Effective September 6, 2026. This policy describes the RiverFinn mobile app and website. Questions: support@riverfinn.com.

What we collect

Your email address, to sign you in. You can sign in with a password or with a link we email you.
Your password, if you choose to set one. It is stored only as a one-way hash, never as text, and cannot be read back or recovered by anyone at RiverFinn.
Your fishing profile, if you fill it in: home area, how far you will drive, skill level, preferred species and method. Used to rank rivers and to give Finn context.
What you save and plan: saved waters, alert settings, trip plans and calendar events you add.
Your conversations with Finn, so a conversation can continue. Your question and the river data RiverFinn assembled for it are sent to OpenAI's API to write the answer, and to no other provider. RiverFinn does not send them for training or evaluation, and OpenAI's API terms state that data sent through the API is not used to train their models. RiverFinn's own admin tools have no screen that shows a conversation.
Your location, only while you allow it and only to rank nearby rivers or answer Finn. The app rounds each reading before it is sent and uses it for that one request; RiverFinn turns it into distances and keeps no coordinate. Coordinates are never stored on your account and never sent to analytics. If you use "detect my location" to fill in your home area, only the city, state and postcode it produced are saved.
A push token for your device, if you turn on notifications, so alerts can reach it.
Product events: that the app was opened, a river viewed, a question asked, a trip planned. Counts and categories — never the text of a question or a message, never coordinates.
Subscription state from RevenueCat, Apple or Google: whether Pro is active and until when. We never see or store card details.
Feedback you send, with the river and screen you were on.

What we do not do

We do not sell personal data, and we do not share it with advertisers.
We do not track you across other apps or sites.
We do not store your precise location with your account.
We do not put your conversations with Finn into analytics.

Who else handles data

RiverFinn runs on hosted infrastructure and uses a small number of providers to work: an email provider to send sign-in, account-confirmation and password-reset links, RevenueCat with Apple and Google for subscriptions, Expo's push service to deliver notifications, and OpenAI to generate Finn's answers from the context RiverFinn supplies. Each receives only what its job needs.

The website

This site sets one cookie: a random session id used to count anonymous visits to its pages and taps on its download buttons. It is not linked to an account. There are no advertising cookies.

Your choices

Turn location off in your device settings; RiverFinn keeps working without it.
Turn notifications off in the app or your device settings.
Delete a conversation with Finn from the app.
Delete your account from the app under Account → Delete account, or from riverfinn.com/delete-account if you no longer have the app. We remove the account and everything attached to it: profile, saved waters, alerts, notifications, trip plans, feedback and Finn conversations, along with your email address and sign-in on every device. Records of purchases and of usage are kept for accounting without your email or name. A store subscription is managed by Apple or Google and is not cancelled by deleting your account.

Changes

If this policy changes in a way that matters, the app and this page will say so.