Legal
Depthrix Privacy Policy
Effective date: October 12, 2026
Last updated: October 12, 2026
This Privacy Policy explains how L&K Sierra LLC, a California limited liability company ("we", "us", "our"), collects, uses, shares and protects information when you use the Depthrix mobile app (the "App") and our related websites and services, including depthrix.com and account.depthrix.com (together, the "Service"). Words with capital letters that are not defined here, such as "Your Content", have the meaning given in our Terms of Use.
Summary
- You can use the App without an account. An account needs only an email address and a password.
- We do not sell your personal information, do not share it for targeted advertising, and do not give your location to advertisers or data brokers. The App has no advertising.
- The App does not send your live GPS position to us. Your location is used on your phone to show where you are and to record tracks you start. Map servers, including ours, see your IP address and the map area you are viewing, which is often the area around you (Section 3.2).
- Your tracks and waypoints stay on your phone unless you sync, share or export them. If you create an account, "Sync my Data" is on by default and copies your tracks and waypoints to our servers, including ones you recorded before you created the account. You can turn it off in Menu → Manage Account.
- You can delete your account in the App or at account.depthrix.com at any time.
1. Information we collect
1.1. Information kept on your device
Much of what you do in the App stays on your device and is not sent to us, including your settings (units, map layers, colors and similar choices), downloaded maps, water level settings, areas, and — unless they are synced (Section 1.5) or shared — your tracks and waypoints. Map requests that have not been sent yet are also stored on your device. Your device's own backup service (such as iCloud or Google backup) may copy App data according to your device settings; that backup is handled by Apple or Google, not by us.
1.2. Information the App sends to us when you use the Service
When the App connects to our servers, it sends:
- A device identifier for your installation of the App. The App generates it or derives it from an app-specific identifier provided by your device's operating system. It is not an advertising identifier, and we do not use it to track you across other apps or websites.
- Technical information, such as the App's build number, your platform (iOS or Android), your operating system version and device type as reported by your device's networking software, and, for some features, your language setting.
- Your IP address, which any internet connection reveals. We use it to deliver responses, to protect the Service from abuse (for example, to limit repeated sign-in attempts) and to troubleshoot errors. We do not use it to determine your location.
- Your acceptance of the Terms of Use: the version you accepted, when, and whether you accepted for yourself or as a parent or guardian for a minor, so that we know which version applies to you.
1.3. Account information
If you create an account, we collect your email address and your password. We store the password only in a form that cannot be reversed (a salted hash), never in readable form. We also keep your account's language, the date you created it, the version of the Terms of Use you accepted and when, and records of the devices signed in to your account (the device identifier, when each session started and when it was last used). To verify your email address or reset your password, we send you one-time codes; we store them only in hashed form, and they expire after a short time (currently 15 minutes). If you start creating an account but do not enter the code, we delete your email address and password hash after the code expires.
1.4. Location
If you allow it, the App uses your device's precise location to:
- show your position, speed and heading on the map;
- record a track when you start recording — including while the App is in the background or your screen is off, until you stop recording (or your device stops the App). While a recording runs, your phone shows that location is in use (for example, with a status bar indicator on iPhone, or a notification on Android); and
- save waypoints you mark and show distances to them.
Your live location is not sent to our servers. Location data reaches our servers only as part of tracks and waypoints you have saved, when sync is on (it is on by default for accounts; Section 1.5) or when you choose to share them. You can turn off location access at any time in your device settings; the maps and most other features keep working without it.
When the App loads map images, the servers that provide them receive the area of the map being displayed (Section 3.2). When the map is centered on your position, that is the area around you.
1.5. Your Content and sync
Your Content (your tracks, waypoints and areas, including ones you import, with their names and notes) is stored on your device. Tracks include the positions, elevation, times, speeds, headings and location accuracy recorded by your device and, for tracks and waypoints you import, any depth or other values contained in the imported file.
If you have an account, "Sync my Data" is on by default, and we store your tracks and waypoints, with their names, notes and display settings, on our servers so that you can restore them and use them on your other devices. When you create an account with sync on, the tracks and waypoints already on your device, including ones you recorded without an account, are uploaded in the first sync. Areas are not synced; they stay only on your device.
You can turn sync off in Menu → Manage Account → Sync my Data. After that, new and changed items stay only on your device. Turning sync off does not delete copies already stored on our servers; they remain until you delete those items while sync is on, or until your account is erased (Section 7).
1.6. Purchases
Purchases are made through Apple or Google; we never receive your payment card details. We use RevenueCat to manage purchases and subscriptions. Purchases are linked to your account or, if you buy without an account, to a random purchase identifier that RevenueCat creates for your installation. We receive information about your purchases, such as the product, purchase and renewal dates, the subscription status, transaction identifiers, the app store country and refund status. We also keep records of what you agreed to when you subscribed (the product, price, time and the terms shown), because the law requires us to keep them.
1.7. Notifications and messages
When you first open the App, it registers a push token (an address for delivering notifications to your device) with our servers, together with your device identifier, platform and language. On some devices this happens before you are asked whether to allow notifications; your device shows notifications only if you allow them. If you create an account, we link the token to it.
If you email us, we receive your email address and whatever you choose to include. We send account emails (such as codes and deletion notices) through an email delivery provider; we have turned off storage of email contents in that provider's system and do not track whether you open our emails or click their links.
1.8. Map requests
If you ask us to map a water body, we receive the water body, the time of the request and your device identifier (and your account, if you are signed in), so that we can count requests and avoid duplicates.
1.9. Diagnostic information
To find and fix problems, we collect:
- Crash, error and performance reports from the App and our servers, sent to Sentry. They contain technical details such as device model, operating system version, App version, language and time zone, how long the App took to start, and the state of the software when the error occurred. Sentry receives your device's IP address when a report is sent; we set Sentry not to store it. We design these reports to leave out your email address, your password, the contents of Your Content, your position and the map areas you view, and we remove access codes from map download links before reports are sent. We do not use session replay, screenshots or screen recording.
- Server logs, which record each request's type, path, result and time, and the App's build and platform. Our logs are designed not to contain passwords, sign-in or verification codes, email addresses or the contents of requests.
1.10. What we do not collect
The App does not ask for your name, phone number or postal address; you give us your name only if you choose to, for example in an email, a legal notice or an arbitration opt-out. The App does not access your contacts, photos, camera or microphone, does not use your device's advertising identifier, and contains no third-party advertising, attribution or marketing-analytics software; we use Sentry only for the reports in Section 1.9. If we ever change this, we will update this Policy before we do.
1.11. Our websites
depthrix.com is hosted by Cloudflare; account.depthrix.com runs on our own servers. When you visit them, Cloudflare or our servers receive your IP address, browser type and the pages you request. We use this to deliver the pages and protect them from abuse. If you use the account deletion form at account.depthrix.com, we receive the email address you enter (Section 7). account.depthrix.com uses no cookies. depthrix.com uses no advertising or analytics cookies and no advertising, analytics, chat or session-recording tools; Cloudflare may set cookies that are strictly necessary for security, such as detecting automated traffic. If we add anything else, we will update this Policy first and ask for your consent where the law requires.
Launch notifications. If you sign up on depthrix.com to hear when the App launches, we collect the email address you enter and, if you choose to give it, your favorite lake to fish. We also record when you signed up and the country your request came from, which Cloudflare determines from your IP address; we use your IP address only for that and to limit repeated sign-ups, and we do not store it with your sign-up. We keep this list with Cloudflare (Section 3.1) and use it only to email you about the launch of the App and about new lakes we map, and to help decide which water bodies to map next. Signing up does not create an account. Every such email has a link to unsubscribe (Section 5).
2. How we use information
We use information to:
- provide the Service: show maps and your position, record and store Your Content, sync it, deliver maps you are entitled to, and run your account;
- verify your email address, sign you in, limit the number of devices on your account, reset your password and delete your account when you ask;
- process and verify purchases, subscriptions and gifts, restore them, and keep the records the law requires;
- send you service messages, such as codes, account and purchase notices, renewal and price-change reminders, and changes to our terms;
- send you notifications about your account, purchases and gifts and about updates to maps you have bought; and send news, announcements of new maps and other promotional notifications only if you turn them on in the App (Section 5), choosing which ones to send based on your language and the maps you have bought;
- send launch and new-lake emails to people who signed up for them on depthrix.com (Section 1.11);
- decide which water bodies to map next, using map requests and the lakes named at sign-up;
- keep the Service secure, prevent fraud and abuse, and enforce our Terms;
- fix errors and improve the reliability and performance of the Service; and
- comply with law and respond to lawful requests.
We do not use your location, tracks, waypoints or other Your Content to create or improve maps, except to check and correct a map you report to us, as described below. We use them only to provide the Service to you and for the security, legal and safety purposes in this Section and Section 3.3. If you send us a map error report that includes a position or a track, we use it only to check and correct that map. We will use Your Content for map-making only if you opt in to a feature that does so. That opt-in will be off until you turn it on, will be separate from accepting this Policy or the Terms of Use, will explain what is used, will cover only data you choose to include, and can be turned off at any time.
We do not use your personal information to make decisions that produce legal or similarly significant effects about you. We do not give your personal information to artificial-intelligence companies for their own use or to train their models.
3. How we share information
3.1. Service providers
We share information with companies that perform services for us, only as needed for those services. They handle it under the terms of service we have accepted with each of them, and we use providers whose terms allow them to use the information only to provide their services to us and require them to protect it:
| Provider | What they do for us | Information involved |
|---|---|---|
| Our cloud hosting provider | Runs our servers and database | All information we store on our servers |
| Cloudflare | Hosts depthrix.com and stores its launch notification list; stores and delivers map files; stores our database backups | IP address, requested pages and map files; email address, favorite lake, sign-up time and country of people who sign up on depthrix.com; backup copies of the information we store |
| RevenueCat | Manages purchases and subscriptions | Account identifier or anonymous purchase identifier, purchase and subscription information, device type, app and operating system version, app store country, IP address |
| Expo (650 Industries) | Sends push notifications to Apple and Google | Push token, notification content, IP address |
| Sentry (Functional Software) | Crash, error and performance reports | Diagnostic information described in Section 1.9; IP address (not stored) |
| Zoho (ZeptoMail and Zoho Mail) | Sends account emails; hosts our support mailbox | Email address, email content |
Apple and Google deliver push notifications for us through their notification services. When they process your payments, they act as the operators of their app stores under their own terms and privacy policies, not on our behalf.
3.2. Map servers your device contacts
To display the map, your device requests map images and files directly from the servers below. Each request reveals your IP address and the map area being displayed; when the map is centered on your position, that is the area around you. We do not use map requests to determine where you are.
- our map delivery service (on Cloudflare), for street maps, Relief Maps and map previews;
- MapTiler, for satellite imagery — the default background map; you can switch to the street map in Settings → Base Map;
- NOAA, a U.S. government agency, for the Government Chart Layer, whenever the map is zoomed in and that layer is on (it is on by default), even where no NOAA chart appears; and
- GitHub, which hosts some of the street map's icons.
MapTiler (based in Switzerland) provides the imagery to us under its terms of service and receives these requests in order to deliver it; it handles them under its own privacy policy and may process them outside the United States. GitHub receives the icon requests in the same way, under its own privacy statement. NOAA is a U.S. government agency that offers its service to the public; we have no contract with it, and its handling of these requests is governed by federal law and its privacy policy.
3.3. Other sharing
We also share information:
- at your direction — for example, when you share a track or export a GPX file, the information goes to whoever you choose;
- to comply with law — to respond to a subpoena, court order or other legal process, or when we believe in good faith that disclosure is required by law;
- to protect people and the Service — to prevent fraud or abuse, or to protect the rights, property or safety of our users, the public or us;
- in a business transfer — if we are involved in a merger, acquisition, financing or sale of assets, in which case the information remains subject to the promises in this Policy unless you agree otherwise; and
- with your consent.
3.4. What we do not do
We do not sell personal information, and we do not share it for cross-context behavioral (targeted) advertising. We do not sell, rent or give location information to advertisers or data brokers. We do not disclose personal information to third parties for their direct marketing. The map servers in Section 3.2 receive map requests only because your device asks them for map images.
Tracking across apps and websites. We do not track you over time and across other companies' apps or websites, and we do not allow third parties to use the Service to collect information for advertising or to build profiles of your activity across other apps or websites. Because we do not sell or share personal information, browser Do Not Track signals and Global Privacy Control signals do not change how we process it.
4. How long we keep information
| Information | How long we keep it |
|---|---|
| Account information (email, password hash, language) | While your account exists (we do not currently delete accounts for inactivity); erased at the end of the recovery period after you delete your account (currently 30 days). If a subscription is still active then, we keep your email address with your purchase records until the subscription ends, only to send the subscription notices the law requires |
| Minimal account record (internal account identifier, creation and deletion dates) | Kept after erasure, without your email address, password or language, for as long as we keep the purchase records or the acceptance records linked to it |
| Records of your acceptance of the Terms of Use (version, time, whether you accepted for yourself or for a minor, the device identifier or internal account identifier, and a one-way hash of your account email address) | For as long as the Terms of Use apply to you and four years after (for acceptance on behalf of a minor, until four years after the minor turns 18), including after account erasure and after device records are deleted, only to show which terms apply and to establish or defend legal claims |
| Your Content on our servers | While your account exists and sync has stored it; items you delete while sync is on are removed from our servers within 30 days; all of it is erased when your account is erased |
| Sign-in sessions | A session ends after you sign out, are signed out, or do not connect for 180 days; records of ended sessions are deleted within one year |
| Device records (device identifier, App build, platform, last contact) | Until the device has no signed-in session and has not contacted us for 12 months |
| Push tokens | Until the push service reports the token invalid, you delete your account, or the device has not contacted us for 12 months |
| Unfinished sign-ups, one-time codes and deletion links | Deleted by a daily cleanup after they expire (currently 15 minutes for codes and one hour for deletion links) |
| Purchase and subscription records, including records of your consent to automatic renewal | As long as needed for accounting, tax and legal purposes — at least three years, or one year after the subscription ends, whichever is longer, and up to seven years |
| Map requests | Until the water body is mapped or three years have passed; after 12 months we remove the device identifier and account link and keep only counts |
| Shared track links | Until you revoke the link or delete the track, or your account is erased |
| Launch notification sign-ups on depthrix.com (email address, favorite lake, sign-up time, country) | Until you unsubscribe or ask us to remove you, and no longer than one year after the App launches |
| Support emails | Up to two years after the matter is resolved |
| Notes our staff add to your account and records of staff actions on it | Up to two years after the last action |
| Legal notices and arbitration opt-outs you send us | For as long as the Terms of Use apply to you and four years after, including after account erasure |
| Age range received from an app store or operating system | Only as long as needed to apply age rules; not stored on our servers |
| Server logs and crash reports | Up to 90 days |
| Data used to limit abuse (hashed IP addresses and email addresses) | Up to two days |
| Backups | Deleted information may remain in backups until they are replaced, up to 30 days |
We may keep information longer if the law requires it or to resolve a dispute or legal claim, and only for that purpose.
5. Your choices
- Location: turn location access on or off in your device settings. Recording a track needs location access while recording.
- Sync: turn "Sync my Data" on or off in Menu → Manage Account. Turning it off stops new uploads; it does not delete what is already on our servers (Section 1.5).
- Notifications: turn notifications on or off in your device settings. News, announcements of new maps and other promotional notifications or emails are sent only if you turn them on in the App, and you can switch them off there at any time. Service messages about your account and purchases cannot be switched off while you have an account, because they are needed to run it.
- Launch emails: unsubscribe with the link in any launch or new-lake email, or email support@depthrix.com. We remove you within 10 business days.
- Export: export your tracks and waypoints as GPX files at any time with the App's export feature.
- We will not change a privacy setting you have chosen without your permission.
6. Your rights
Wherever you live, you can ask us to:
- access the personal information we hold about you, or give you a copy in a portable format;
- correct information that is wrong;
- delete your account and personal information; and
- withdraw consent you have given, for the future.
Many requests can be made directly in the App. Otherwise, email support@depthrix.com from the email address of your account, so that we can confirm the request comes from you. If you do not have an account, the information we hold about your installation is its device record (device identifier, App build, platform, last contact and the Terms version accepted), its push token, its map requests and, if you bought without an account, its purchase records (Sections 1.2, 1.6, 1.7 and 1.8), together with server logs and crash reports kept for the short periods in Section 4; email us, and we will tell you what information from the App we need to find your installation. We will respond within a reasonable time and in any case within the time required by law. We may keep information when the law requires or allows it, as described in Section 4. We will not discriminate against you for exercising your rights.
7. Deleting your account
You can delete your account in the App (Menu → Manage Account → Delete Account) or, without the App, at account.depthrix.com, where we confirm the request by email.
- When you delete your account, you are signed out on all devices, your push tokens are removed, synced copies of Your Content are hidden, and share links you created stop working.
- For a recovery period (currently 30 days) you can restore your account by signing in. When you delete your account, we email you the date by which you need to sign in to restore it.
- After the recovery period, we erase your email address, password, language and synced copies of Your Content from our active systems, delete your subscriber record at RevenueCat (if a subscription is still active, after it ends), remove your account from your map requests, and email you to confirm. We keep the minimal account record, the record of your acceptance of the Terms of Use and the purchase records described in Section 4, which do not include your email address (the acceptance record keeps only a one-way hash of it), except that if a subscription is still active we keep your email address until it ends, only to send the notices the law requires. Other information is deleted later on the schedule in Section 4: records of your signed-in devices, support emails and staff notes, server logs, crash reports and backups.
- Purchases. Maps you bought and your subscription stay with your Apple or Google account and can be restored with "Restore Purchases" after erasure. Gifts from us end when your account is erased.
- Deleting your account does not cancel a subscription. Cancel it in your App Store or Google Play settings. Apple and Google keep their own records of your purchases under their own policies.
Tracks, waypoints and other data already on your devices stay there until you delete them or the App. Most data stored on your device is removed when you delete the App. On iPhone, the device identifier — and, unless you logged out, the sign-in key — that the App keeps in the iOS Keychain can remain after you delete the App, so that reinstalling it keeps you signed in; erasing the device removes them. Copies in your device backups, and files you exported or shared, remain until you delete them.
8. Children
The Service is meant for a general audience and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have, including through an age signal provided by an app store or operating system, we will delete it, close any account, and stop collecting information from that device except what the App needs to run. Users under 18 (or the age of majority where they live) may use the Service only if a parent or guardian agrees to our Terms of Use for them. If an app store or operating system tells us a user's age range or whether a parent has consented, we use that information only to apply age rules and parental-consent requirements and to comply with law, and we do not share it except as the law requires. We do not sell personal information of anyone, including users under 16, and do not use anyone's information for targeted advertising. If you believe a child under 13 has given us information, contact support@depthrix.com.
9. Security
We use reasonable administrative, technical and physical safeguards to protect personal information, including encryption of data in transit, hashing of passwords and codes, secure storage of sign-in keys on your device, signed links that expire for map downloads, and limits on access by our staff. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a security breach affects your personal information, we will notify you as required by law. Protect your device with a passcode and keep your account password private.
10. Where information is processed
The Service is intended for users in the United States. We are located in the United States, and our main service providers store information in the United States. Some providers, including MapTiler and content delivery networks, may process information in other countries under their terms with us. If you use the Service from outside the United States, you understand that your information will be processed in the United States.
11. Additional information for U.S. state residents
11.1. California
Categories of personal information. We collect the following categories of personal information, as defined in the California Consumer Privacy Act, from you, from your device, from Apple, Google and RevenueCat (purchase, renewal and refund information) and from app stores or operating systems (age range information), for the purposes in Section 2. We disclose them to the service providers in Section 3.1 for those purposes. When your device requests map images, the map servers in Section 3.2 also receive identifiers (IP address) and internet activity (the map area displayed).
| Category | Examples | Sold or shared for advertising? |
|---|---|---|
| Identifiers | Email address, account identifier, device identifier, IP address, push token | No |
| Commercial information | Purchases and subscriptions | No |
| Internet or other electronic network activity | Server logs, crash reports, map requests, map areas requested from map servers | No |
| Geolocation data | Precise location in tracks and waypoints you sync or share; the map area you view | No |
| Sensitive personal information | Account sign-in (email and password); precise geolocation | No |
| Characteristics of protected classifications | Age range, if an app store or operating system provides it | No |
| Inferences | None | — |
How long we keep each category is described in Section 4.
Sensitive personal information. We use and disclose sensitive personal information only to provide the Service you request, to keep it secure, to prevent fraud and to comply with law. We do not use it to infer characteristics about you.
No sale or sharing. We do not sell or share personal information, including that of users under 16. Our practices on Do Not Track and Global Privacy Control are described in Section 3.4.
Your rights. The rights described in Section 6 are available to you as a California resident, in addition to any rights you have under California law.
11.2. Nevada
We do not sell covered information as defined in Nevada law. Nevada residents may nevertheless submit a request not to sell their information to support@depthrix.com, and we will respond to a verified request within 60 days. See Section 3.4 about tracking.
11.3. Other states
If you live in a state with a consumer privacy law that gives you additional rights, you may exercise them by contacting us as described in Section 6, and you may appeal a decision on your request by replying to our response.
12. Changes to this Policy
We may update this Policy. We will post the new version with its effective date. If we make a material change, we will tell you in the App or by email before it takes effect. We will not use information we collected before a change in a materially different way without your consent.
13. Contact us
L&K Sierra LLC
2902 Shady Acres Loop, Rocklin, CA 95765
Email: support@depthrix.com