Privacy Policy

Key principle: Your data belongs to you. Oarsum stores all tracking data locally on your device using Apple's SwiftData framework. We do not operate servers, cloud storage, or backend services that collect your data. Your location, health, and motion data never leave your device unless you explicitly choose to export or share it.

1. Overview

Oarsum ("App," "we," "our," or "us") is a kayaking and paddle sports tracking application developed by Eric Shine for iOS 26+. We are committed to protecting your privacy and being transparent about how we collect, use, and store your data.

2. What Data We Collect

2.1 Location Data (GPS)

What we collect: When you start a paddle session, Oarsum records your precise GPS location at regular intervals to track your route, calculate distance traveled, and measure your speed and speed variations.

Specific data:

Latitude and longitude
Altitude (elevation)
Horizontal accuracy
Speed (calculated from location updates)
Timestamp for each location point

Why we collect it:

Display your paddle route on the map
Calculate total distance, average speed, and maximum speed
Create a trip history you can review, export, or share
Measure distance per stroke (DPS), an advanced paddling metric

Where it's stored: All location data is stored locally in SwiftData on your device. Location data is never transmitted to our servers, cloud services, or third parties, except when you explicitly export a trip as a GPX file or share a GPX file with another person or service of your choice.

How to control it: You can deny location permission in iOS Settings > Oarsum > Location. If you deny permission, the App cannot record new paddle sessions. Existing location data remains on your device; you can delete trips manually in the App.

2.2 Health Data (HealthKit)

What we collect: With your permission, Oarsum reads your heart rate and calorie burn data from Apple HealthKit to enhance your paddle session metrics.

Specific data:

Heart rate (beats per minute) during paddle sessions
Calorie burn (kilocalories) during paddle sessions

Where it's stored: Heart rate and calorie data is stored locally in Oarsum's SwiftData database on your device. This data is never transmitted to our servers or third parties. HealthKit remains the authoritative source; Oarsum maintains a local copy for trip summaries.

How to control it: You can deny HealthKit access in iOS Settings > Health > Data Access & Devices > Oarsum. If you deny permission, Oarsum will not display heart rate or calorie data, but the App continues to function.

2.3 Motion Data (CoreMotion)

What we collect: With your permission, Oarsum uses your device's accelerometer to detect paddle strokes and measure stroke rate, cadence, and stroke count.

Specific data:

Calculated stroke count per session
Average stroke rate (strokes per minute)
Distance per stroke (DPS), derived from distance and stroke count

Raw accelerometer data is not stored. All stroke metrics are stored locally in SwiftData and never transmitted.

How to control it: You can deny motion permission in iOS Settings > Oarsum > Motion & Fitness.

2.4 Trip Metadata

To organize and manage your paddle sessions, Oarsum stores trip name, start and end date/time, total duration, completion status, and a unique trip identifier. All trip metadata is stored locally in SwiftData and never transmitted.

3. Data We Do NOT Collect

To be clear, Oarsum does not:

Require user accounts, registration, or login
Collect or use cookies or device identifiers for tracking
Use third-party analytics, crash reporting, or user tracking services (e.g., Firebase, Sentry, Mixpanel, AppsFlyer)
Share data with advertising networks or data brokers
Sell, rent, or trade your data
Use HealthKit or location data for purposes other than what you see in the App
Include ads, in-app browser tracking, or behavioral profiling
Collect information about other apps on your device
Access your contacts, photos, or other personal data

4. Data Storage and Security

4.1 Local-Only Storage

All data collected by Oarsum is stored locally on your iOS device using Apple's SwiftData framework. SwiftData provides:

Automatic encryption — Data is encrypted on disk using iOS file protection
Sandboxing — App data is isolated from other apps
No cloud sync in v1.0 — Your data never leaves your device automatically

4.2 Backup and Sync

If you use iCloud Backup and have enabled App Data backup, your Oarsum data may be included in your iCloud Backup. This is controlled by your iOS Settings > [Your Name] > iCloud > iCloud Backup.

4.3 Data Retention

Location, health, and motion data is retained as long as the trip record exists. Deleted trips are permanently removed from your device. We do not retain copies of exported files.

5. In-App Purchases and Payment Data

Oarsum is free. Every feature is available without purchase. The App offers three optional one-time tips (Coffee, Fuel, Dream Boat) as Consumable in-app purchases managed via Apple's StoreKit 2 framework. Apple handles all payments. We do not collect, store, or process credit card numbers, billing addresses, or payment methods. Apple provides us only with transaction receipts for completed tips. There are no subscriptions and no recurring charges.

6. Third-Party Services

Oarsum does not use third-party services for analytics, crash reporting, cloud storage, authentication, or advertising.

Oarsum uses the following Apple frameworks:

Framework	Purpose	Data Shared
MapKit	Display maps and routes	Location coordinates only, used to render maps on your device
HealthKit	Read heart rate and calorie data	HealthKit data remains in HealthKit; Oarsum reads only what you see in the App
CoreLocation	Record GPS coordinates	Handled entirely on your device; no transmission
CoreMotion	Detect paddle strokes	Processed on your device; only aggregated metrics stored
StoreKit 2	Process optional one-time tips	Transaction receipt only; Apple handles payment data
SwiftData	Store all app data	All data stored locally on your device
ActivityKit	Live Activity on lock screen	Real-time trip metrics shown only on your device; no transmission

7. Apple Maps Attribution

Oarsum uses Apple Maps, provided by Apple as part of MapKit. Apple's Maps Terms of Use apply. Maps, routes, and location data are for informational purposes only and may be inaccurate, incomplete, or outdated. Do not rely on this app for navigation on waterways.

8. Children's Privacy

Oarsum is not designed for, and we do not knowingly collect data from, children under 13 years old. If you are under 13, please do not use this App.

Oarsum does not collect location data, health data, or motion data from users under 13 without verifiable parental consent, and does not use data from children to target advertisements or build user profiles.

If you believe your child's data has been collected, please contact us at support@oarsum.com.

9. Your Privacy Rights

9.1 Access and Portability

Since all data is stored on your device, you have direct access within Oarsum. You can export any trip as a GPX file at no charge.

9.2 Deletion

Delete individual trips — Swipe to delete in the trip list, or tap Delete in trip detail
Delete all data — Uninstall the App or use iOS Settings > General > iPhone Storage > Oarsum

9.3 GDPR Rights (EU Users)

If you are located in the European Union, you have rights under the GDPR including: right to access, right to rectification, right to erasure, right to restrict processing, right to data portability, and right to object. Contact support@oarsum.com. We will respond within 30 days.

9.4 CCPA Rights (California Residents)

California residents have rights under CCPA/CPRA: right to know, right to delete, right to opt-out (we do not sell data), right to correct, and right to data portability. We do not "sell" or "share" personal information as defined by CCPA.

10. Sharing Your Data

We never share, sell, or disclose your data to third-party analytics providers, advertising networks, data brokers, social media platforms, or other developers. All data sharing is user-initiated (e.g., exporting a GPX file).

Since all data is stored on your device, we do not have copies of your personal trip data, location data, or health data to produce in response to legal requests.

11. International Data Transfers

Oarsum is developed in the United States by Eric Shine. All data is stored locally on your device and is not transferred internationally. If you enable iCloud Backup, it is subject to Apple's data residency agreements with your country.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy in the App and on our website and updating the "Effective Date." Your continued use of Oarsum after changes become effective constitutes your acceptance of the updated Privacy Policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or Oarsum's privacy practices, please contact:

Eric Shine
Developer, Oarsum
Email: support@oarsum.com

We will respond to privacy inquiries within 7 business days.

Version 1.0 · Effective April 1, 2026 · Developer: Eric Shine

This Privacy Policy is provided for informational purposes. While we have made every effort to ensure accuracy, this policy does not constitute legal advice. If you have concerns about privacy law compliance, please consult with a licensed attorney in your jurisdiction.