Privacy Policy
This policy explains how PaddlePilot (“PaddlePilot”), made by ORIENTPRO – LA INVESTMENT & TRADE., JSC (“ORIENTPRO”, “we”), handles information on iPhone, iPad, Mac and Apple Watch. PaddlePilot helps paddlers plan trips, check water and weather conditions, share a float plan with a shore crew, and record their tracks.
The short version
- PaddlePilot’s App Store privacy label reads “Data Not Collected”. There is no account, no sign-in, no analytics, no advertising, no attribution or crash-reporting SDK and no third-party code in the app.
- ORIENTPRO operates no servers that receive your data. We never receive your trips, plans, photos, location or anything else.
- Your data lives on your device and, if you turn iCloud sync on, in your own private iCloud, which we cannot access.
- Briefings and journals are written on your device by Apple Intelligence. Nothing is sent off the device for that.
1. What we collect
Nothing. We do not ask for your name, email address, phone number or any other personal information, and there is nothing to sign in to.
We do not use advertising identifiers, we do not build a profile of you, and we do not sell or share personal information. PaddlePilot contains no analytics, advertising, attribution or crash-reporting SDK and no other third-party code.
2. Your data on your device and in your iCloud
Your trips, plans, gear and water notes are stored on your device using Apple’s SwiftData. If iCloud sync is turned on, the same data is also kept in your own private iCloud (CloudKit) database, so it is available on your other devices. Photos you take in PaddlePilot stay on the device where you took them. That database belongs to your Apple Account; ORIENTPRO cannot access it and receives nothing from it.
iCloud is provided by Apple under Apple’s privacy policy. If you have iCloud Backup turned on, your device backup may include PaddlePilot’s data, the same as for any other app; that backup is between you and Apple.
3. Shore Crew
When you invite shore crew, PaddlePilot creates a private iCloud share (CloudKit CKShare) with the people you invite. Only those invited participants can see it. While you are on the water, the share holds your float plan, your trip status and your last position.
- Your last position is cleared when you mark yourself off the water.
- A share ends automatically 24 hours after the trip, or 72 hours after the expected return, and you can end it yourself at any time.
- A crew member’s device stores only the shared plan, and schedules an overdue alarm locally on that device.
The share travels through Apple’s iCloud. ORIENTPRO has no access to it.
4. Sending a float plan by Message or Mail
If you send a float plan by Message or Mail, you send it yourself through the standard system compose sheets. Nothing is sent until you send it, and it goes from your device to the recipient you choose, not through us.
5. Location
PaddlePilot asks for location permission only to find launches near you, time your trips and record your track. Location is used while the app is in use. Background location is used only while a trip is being recorded, and iOS shows its blue indicator while that happens. You can change the permission at any time in Settings.
PaddlePilot asks for each permission only when you use a feature that needs it, never at launch. If you say no, everything that doesn’t need that permission keeps working, and the app shows where to turn it on in Settings.
- Camera — only when you tap Photo while marking a spot on a trip. Photos stay in the app, without location data in the file.
- Microphone and Speech Recognition — only for an optional voice note during a trip. Your voice is turned into text on the device; no audio is saved or sent.
- Notifications — reminders to send your float plan, overdue alarms, flow alerts for saved waters and gear reminders. All are scheduled on your device.
- Calendars — only when you tap Add to Calendar. On iPhone and iPad you confirm the event in Apple’s own editor; on Mac PaddlePilot asks for add-only access and can’t read your calendar.
- Health — see section 7.
When PaddlePilot asks a public data service for conditions near you, the coordinates are rounded to about 1 km (0.01 degree). Requests for river and lake gauges use map-tile bounding boxes, never your exact position.
6. Public data services
To show conditions, your device contacts the following public data services directly. There is no proxy and no ORIENTPRO server in between, and PaddlePilot sends no account or device identifier with these requests. As with any request over the internet, each service can see your IP address.
- U.S. Geological Survey Water Data API — river and lake gauges in the United States.
- Environment and Climate Change Canada GeoMet — gauges in Canada.
- NOAA CO-OPS — tides and currents.
- USGS The National Map and NRCan basemap tiles — map tiles for offline packs.
- USGS NLDI (Network-Linked Data Index) — river lines, so a route can follow the river. It receives the points you tap on the map.
PaddlePilot also uses two Apple services: WeatherKit (Apple Weather) for wind forecasts and official weather alerts, and MapKit for maps, search and directions. Apple handles those requests under Apple’s privacy policy.
7. Apple Health
If you allow it, PaddlePilot saves your trips to Apple Health as Paddle Sports workouts, with the route. On iPhone it reads back only the workouts it saved, so it can remove them when you delete your data. On Apple Watch it reads your heart rate during a paddle to show it on your wrist and in the trip summary. Health data stays on your devices. PaddlePilot never syncs it to iCloud, never uses it for advertising and never sends it anywhere; the only way it leaves your device is a FIT file you choose to export and share yourself. You can change the Health permissions at any time in Settings or the Health app.
8. Apple Watch
Plans, trips and crew actions move between your iPhone and your Apple Watch with Apple’s WatchConnectivity, directly between your own devices. None of this passes through us.
9. On-device AI
Trip briefings and journals are generated on your device by Apple Intelligence (Apple’s Foundation Models framework), on devices that support it. The text and data used to write them are not sent off the device. Generated text can contain mistakes, so check it before you rely on it.
10. Purchases
PaddlePilot’s purchases are sold through the App Store and handled by Apple (StoreKit). We never receive your payment details, your Apple Account or your billing address. The app only asks Apple whether a valid purchase exists.
11. Diagnostics and support
Diagnostics stay on your device. If you contact support, you may choose to attach them to your email; nothing is sent until you send it, and we use what you send only to answer you. If you have opted in to share crash data with developers in your device’s Settings, Apple may pass us its own crash reports; that is Apple’s setting, not something PaddlePilot collects.
12. Control of your data
In PaddlePilot’s settings you can:
- Export all your data as a ZIP file.
- Delete all your data. This removes the local store and your iCloud zone, and ends any Shore Crew shares.
- Clear offline packs that you downloaded.
Because we hold none of your data, there is no account to close and no record of you for us to produce, correct or erase. That covers the rights that laws such as the GDPR and the CCPA give you over data a company holds.
13. Children
PaddlePilot is not directed at children under 13. It collects no data from anyone, children included.
14. Not for navigation
PaddlePilot is a planning and tracking aid; not for marine navigation. It is not affiliated with or endorsed by any government agency or by Apple.
15. Changes to this policy
If this policy changes, we will post the new version on this page and update the effective date at the top. If a change ever means PaddlePilot starts collecting something, we will say so plainly.
16. Contact
Questions about privacy? Write to info@orlproducts.com.
ORIENTPRO – LA INVESTMENT & TRADE., JSC · orlproducts.com