Skip to content

Legal

Privacy policy

Last updated 15 October 2026

Paddaro records some of the most personal data a phone can hold: where you were, your heart rate, and how you moved. This policy says exactly what we collect, what we do with it, and how you remove it. The short version: we use your data to run Paddaro for you, we never sell it or use it for advertising, and you can delete all of it from inside the app.

1. Who we are

Paddaro is made by Carve Lab LLC ("we", "us"), based in Folsom, California, United States. We are responsible for the personal information described here. Questions go to support@paddaro.com.

2. What this policy covers

The Paddaro app for iPhone and Apple Watch, your Paddaro account, and this website.

3. What we collect

Without an account

You can plan paddles without signing in. To show forecasts, the app sends the location of the spot you're looking at to our servers, which fetch weather and water data for it. If you allow location access, the app uses your location on the device to find spots near you. We don't keep these requests tied to you.

With an account

  • Account details. Sign in with Apple gives us an identifier and an email address, which can be an Apple relay address if you choose to hide yours. We don't receive your Apple ID password.
  • Sessions. For each paddle you record: GPS positions and speed, heart rate, wrist motion from the Watch's motion sensors, split times, and the device model, software version and which wrist the watch is on.
  • What you add. Notes, how the water was, gear and boards, saved spots and launches, your home spot and settings.
  • What the app works out. Stroke counts, sides, turns, efforts and the other results shown on a session page.
  • Feedback you send, with the app version and watch model, and a screenshot if you attach one.

From Apple Health

With your permission, the Watch reads heart rate during a recording and saves the paddle to Apple Health as a workout with its route. We don't read anything else from Apple Health.

4. How we use it

  • To record, analyse and show your sessions, and keep them in your account across devices.
  • To send a session to Strava when you ask (see section 6).
  • To answer support requests and fix problems you report.
  • To improve stroke detection, only if you turn on "Help improve detection" in Profile. It is off by default. When it is on, we may study your raw session recordings to make detection more accurate. You can turn it off at any time.

We don't use your data for advertising or marketing, we don't sell it, we don't share it with data brokers, and the app contains no third-party analytics or advertising code. Health data from Apple Health is never used for anything except showing you your own sessions.

5. Where it is stored

Your sessions live on your iPhone and Watch, and in your Paddaro account on our servers so they survive a new phone. We use these service providers, who process data only on our instructions:

  • Cloudflare: our servers, file storage for session recordings, and this website.
  • Neon: the database holding your account and session details.
  • Open-Meteo: weather forecasts. It receives spot coordinates from our servers, never anything about you.

Public data sources (the US Geological Survey, the California Data Exchange Center and California's water quality programs) are queried by location only. Data is stored in the United States.

6. Strava and other connected services

If you connect Strava, the app stores your Strava sign-in token on your iPhone, in its secure Keychain, and uploads the sessions you choose directly from your phone. Our servers only help complete the sign-in and never keep your Strava token or your Strava data. What happens to a session once it is on Strava is covered by Strava's own privacy policy. You can disconnect Strava from Profile.

If we add other connections later, such as WHOOP, this policy will say what each one reads and keeps before the feature ships.

7. How long we keep it

We keep your account and sessions until you delete them. Deleting a session removes it from our servers. Deleting your account removes your account, every session and everything you added, from our servers right away, and from our backups when they expire, within 30 days. Data on your devices stays until you delete the app, and workouts saved to Apple Health stay there until you remove them in the Health app.

8. Your choices and rights

  • See and export your sessions in the app.
  • Delete a session, or your whole account, in Profile. See Delete your account.
  • Withdraw permissions for location, motion and Apple Health in iOS Settings at any time.
  • Ask us for a copy of your data, a correction, or deletion by emailing support@paddaro.com. We answer within 30 days.

Depending on where you live, including California and the European Economic Area, you may have further rights over your data, such as to object to processing or to complain to a data protection authority. We honour them for everyone, wherever you live. We don't sell or share personal information as California law defines those terms.

9. Security

Data travels over encrypted connections and is encrypted at rest by our storage providers. Sign-in uses Apple's identity service, and tokens are kept in the device Keychain. No system is perfectly secure, and if a breach affects your data we will tell you.

10. Children

Paddaro is not meant for children under 13, and we don't knowingly collect their data. If you believe a child has given us data, email us and we will delete it.

11. This website

paddaro.com sets no cookies and runs no analytics. Like any website, our host Cloudflare processes your IP address to deliver pages and protect against attacks.

12. Changes

If we change this policy, we will update the date above. If a change affects how we use data you have already given us, we will tell you in the app before it takes effect.