Depthrix

Legal

Depthrix Privacy Policy

Effective date: October 12, 2026
Last updated: October 12, 2026

This Privacy Policy explains how L&K Sierra LLC, a California limited liability company ("we", "us", "our"), collects, uses, shares and protects information when you use the Depthrix mobile app (the "App") and our related websites and services, including depthrix.com and account.depthrix.com (together, the "Service"). Words with capital letters that are not defined here, such as "Your Content", have the meaning given in our Terms of Use.

Summary

1. Information we collect

1.1. Information kept on your device

Much of what you do in the App stays on your device and is not sent to us, including your settings (units, map layers, colors and similar choices), downloaded maps, water level settings, areas, and — unless they are synced (Section 1.5) or shared — your tracks and waypoints. Map requests that have not been sent yet are also stored on your device. Your device's own backup service (such as iCloud or Google backup) may copy App data according to your device settings; that backup is handled by Apple or Google, not by us.

1.2. Information the App sends to us when you use the Service

When the App connects to our servers, it sends:

1.3. Account information

If you create an account, we collect your email address and your password. We store the password only in a form that cannot be reversed (a salted hash), never in readable form. We also keep your account's language, the date you created it, the version of the Terms of Use you accepted and when, and records of the devices signed in to your account (the device identifier, when each session started and when it was last used). To verify your email address or reset your password, we send you one-time codes; we store them only in hashed form, and they expire after a short time (currently 15 minutes). If you start creating an account but do not enter the code, we delete your email address and password hash after the code expires.

1.4. Location

If you allow it, the App uses your device's precise location to:

Your live location is not sent to our servers. Location data reaches our servers only as part of tracks and waypoints you have saved, when sync is on (it is on by default for accounts; Section 1.5) or when you choose to share them. You can turn off location access at any time in your device settings; the maps and most other features keep working without it.

When the App loads map images, the servers that provide them receive the area of the map being displayed (Section 3.2). When the map is centered on your position, that is the area around you.

1.5. Your Content and sync

Your Content (your tracks, waypoints and areas, including ones you import, with their names and notes) is stored on your device. Tracks include the positions, elevation, times, speeds, headings and location accuracy recorded by your device and, for tracks and waypoints you import, any depth or other values contained in the imported file.

If you have an account, "Sync my Data" is on by default, and we store your tracks and waypoints, with their names, notes and display settings, on our servers so that you can restore them and use them on your other devices. When you create an account with sync on, the tracks and waypoints already on your device, including ones you recorded without an account, are uploaded in the first sync. Areas are not synced; they stay only on your device.

You can turn sync off in Menu → Manage Account → Sync my Data. After that, new and changed items stay only on your device. Turning sync off does not delete copies already stored on our servers; they remain until you delete those items while sync is on, or until your account is erased (Section 7).

1.6. Purchases

Purchases are made through Apple or Google; we never receive your payment card details. We use RevenueCat to manage purchases and subscriptions. Purchases are linked to your account or, if you buy without an account, to a random purchase identifier that RevenueCat creates for your installation. We receive information about your purchases, such as the product, purchase and renewal dates, the subscription status, transaction identifiers, the app store country and refund status. We also keep records of what you agreed to when you subscribed (the product, price, time and the terms shown), because the law requires us to keep them.

1.7. Notifications and messages

When you first open the App, it registers a push token (an address for delivering notifications to your device) with our servers, together with your device identifier, platform and language. On some devices this happens before you are asked whether to allow notifications; your device shows notifications only if you allow them. If you create an account, we link the token to it.

If you email us, we receive your email address and whatever you choose to include. We send account emails (such as codes and deletion notices) through an email delivery provider; we have turned off storage of email contents in that provider's system and do not track whether you open our emails or click their links.

1.8. Map requests

If you ask us to map a water body, we receive the water body, the time of the request and your device identifier (and your account, if you are signed in), so that we can count requests and avoid duplicates.

1.9. Diagnostic information

To find and fix problems, we collect:

1.10. What we do not collect

The App does not ask for your name, phone number or postal address; you give us your name only if you choose to, for example in an email, a legal notice or an arbitration opt-out. The App does not access your contacts, photos, camera or microphone, does not use your device's advertising identifier, and contains no third-party advertising, attribution or marketing-analytics software; we use Sentry only for the reports in Section 1.9. If we ever change this, we will update this Policy before we do.

1.11. Our websites

depthrix.com is hosted by Cloudflare; account.depthrix.com runs on our own servers. When you visit them, Cloudflare or our servers receive your IP address, browser type and the pages you request. We use this to deliver the pages and protect them from abuse. If you use the account deletion form at account.depthrix.com, we receive the email address you enter (Section 7). account.depthrix.com uses no cookies. depthrix.com uses no advertising or analytics cookies and no advertising, analytics, chat or session-recording tools; Cloudflare may set cookies that are strictly necessary for security, such as detecting automated traffic. If we add anything else, we will update this Policy first and ask for your consent where the law requires.

Launch notifications. If you sign up on depthrix.com to hear when the App launches, we collect the email address you enter and, if you choose to give it, your favorite lake to fish. We also record when you signed up and the country your request came from, which Cloudflare determines from your IP address; we use your IP address only for that and to limit repeated sign-ups, and we do not store it with your sign-up. We keep this list with Cloudflare (Section 3.1) and use it only to email you about the launch of the App and about new lakes we map, and to help decide which water bodies to map next. Signing up does not create an account. Every such email has a link to unsubscribe (Section 5).

2. How we use information

We use information to:

We do not use your location, tracks, waypoints or other Your Content to create or improve maps, except to check and correct a map you report to us, as described below. We use them only to provide the Service to you and for the security, legal and safety purposes in this Section and Section 3.3. If you send us a map error report that includes a position or a track, we use it only to check and correct that map. We will use Your Content for map-making only if you opt in to a feature that does so. That opt-in will be off until you turn it on, will be separate from accepting this Policy or the Terms of Use, will explain what is used, will cover only data you choose to include, and can be turned off at any time.

We do not use your personal information to make decisions that produce legal or similarly significant effects about you. We do not give your personal information to artificial-intelligence companies for their own use or to train their models.

3. How we share information

3.1. Service providers

We share information with companies that perform services for us, only as needed for those services. They handle it under the terms of service we have accepted with each of them, and we use providers whose terms allow them to use the information only to provide their services to us and require them to protect it:

ProviderWhat they do for usInformation involved
Our cloud hosting providerRuns our servers and databaseAll information we store on our servers
CloudflareHosts depthrix.com and stores its launch notification list; stores and delivers map files; stores our database backupsIP address, requested pages and map files; email address, favorite lake, sign-up time and country of people who sign up on depthrix.com; backup copies of the information we store
RevenueCatManages purchases and subscriptionsAccount identifier or anonymous purchase identifier, purchase and subscription information, device type, app and operating system version, app store country, IP address
Expo (650 Industries)Sends push notifications to Apple and GooglePush token, notification content, IP address
Sentry (Functional Software)Crash, error and performance reportsDiagnostic information described in Section 1.9; IP address (not stored)
Zoho (ZeptoMail and Zoho Mail)Sends account emails; hosts our support mailboxEmail address, email content

Apple and Google deliver push notifications for us through their notification services. When they process your payments, they act as the operators of their app stores under their own terms and privacy policies, not on our behalf.

3.2. Map servers your device contacts

To display the map, your device requests map images and files directly from the servers below. Each request reveals your IP address and the map area being displayed; when the map is centered on your position, that is the area around you. We do not use map requests to determine where you are.

MapTiler (based in Switzerland) provides the imagery to us under its terms of service and receives these requests in order to deliver it; it handles them under its own privacy policy and may process them outside the United States. GitHub receives the icon requests in the same way, under its own privacy statement. NOAA is a U.S. government agency that offers its service to the public; we have no contract with it, and its handling of these requests is governed by federal law and its privacy policy.

3.3. Other sharing

We also share information:

3.4. What we do not do

We do not sell personal information, and we do not share it for cross-context behavioral (targeted) advertising. We do not sell, rent or give location information to advertisers or data brokers. We do not disclose personal information to third parties for their direct marketing. The map servers in Section 3.2 receive map requests only because your device asks them for map images.

Tracking across apps and websites. We do not track you over time and across other companies' apps or websites, and we do not allow third parties to use the Service to collect information for advertising or to build profiles of your activity across other apps or websites. Because we do not sell or share personal information, browser Do Not Track signals and Global Privacy Control signals do not change how we process it.

4. How long we keep information

InformationHow long we keep it
Account information (email, password hash, language)While your account exists (we do not currently delete accounts for inactivity); erased at the end of the recovery period after you delete your account (currently 30 days). If a subscription is still active then, we keep your email address with your purchase records until the subscription ends, only to send the subscription notices the law requires
Minimal account record (internal account identifier, creation and deletion dates)Kept after erasure, without your email address, password or language, for as long as we keep the purchase records or the acceptance records linked to it
Records of your acceptance of the Terms of Use (version, time, whether you accepted for yourself or for a minor, the device identifier or internal account identifier, and a one-way hash of your account email address)For as long as the Terms of Use apply to you and four years after (for acceptance on behalf of a minor, until four years after the minor turns 18), including after account erasure and after device records are deleted, only to show which terms apply and to establish or defend legal claims
Your Content on our serversWhile your account exists and sync has stored it; items you delete while sync is on are removed from our servers within 30 days; all of it is erased when your account is erased
Sign-in sessionsA session ends after you sign out, are signed out, or do not connect for 180 days; records of ended sessions are deleted within one year
Device records (device identifier, App build, platform, last contact)Until the device has no signed-in session and has not contacted us for 12 months
Push tokensUntil the push service reports the token invalid, you delete your account, or the device has not contacted us for 12 months
Unfinished sign-ups, one-time codes and deletion linksDeleted by a daily cleanup after they expire (currently 15 minutes for codes and one hour for deletion links)
Purchase and subscription records, including records of your consent to automatic renewalAs long as needed for accounting, tax and legal purposes — at least three years, or one year after the subscription ends, whichever is longer, and up to seven years
Map requestsUntil the water body is mapped or three years have passed; after 12 months we remove the device identifier and account link and keep only counts
Shared track linksUntil you revoke the link or delete the track, or your account is erased
Launch notification sign-ups on depthrix.com (email address, favorite lake, sign-up time, country)Until you unsubscribe or ask us to remove you, and no longer than one year after the App launches
Support emailsUp to two years after the matter is resolved
Notes our staff add to your account and records of staff actions on itUp to two years after the last action
Legal notices and arbitration opt-outs you send usFor as long as the Terms of Use apply to you and four years after, including after account erasure
Age range received from an app store or operating systemOnly as long as needed to apply age rules; not stored on our servers
Server logs and crash reportsUp to 90 days
Data used to limit abuse (hashed IP addresses and email addresses)Up to two days
BackupsDeleted information may remain in backups until they are replaced, up to 30 days

We may keep information longer if the law requires it or to resolve a dispute or legal claim, and only for that purpose.

5. Your choices

6. Your rights

Wherever you live, you can ask us to:

Many requests can be made directly in the App. Otherwise, email support@depthrix.com from the email address of your account, so that we can confirm the request comes from you. If you do not have an account, the information we hold about your installation is its device record (device identifier, App build, platform, last contact and the Terms version accepted), its push token, its map requests and, if you bought without an account, its purchase records (Sections 1.2, 1.6, 1.7 and 1.8), together with server logs and crash reports kept for the short periods in Section 4; email us, and we will tell you what information from the App we need to find your installation. We will respond within a reasonable time and in any case within the time required by law. We may keep information when the law requires or allows it, as described in Section 4. We will not discriminate against you for exercising your rights.

7. Deleting your account

You can delete your account in the App (Menu → Manage Account → Delete Account) or, without the App, at account.depthrix.com, where we confirm the request by email.

Tracks, waypoints and other data already on your devices stay there until you delete them or the App. Most data stored on your device is removed when you delete the App. On iPhone, the device identifier — and, unless you logged out, the sign-in key — that the App keeps in the iOS Keychain can remain after you delete the App, so that reinstalling it keeps you signed in; erasing the device removes them. Copies in your device backups, and files you exported or shared, remain until you delete them.

8. Children

The Service is meant for a general audience and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have, including through an age signal provided by an app store or operating system, we will delete it, close any account, and stop collecting information from that device except what the App needs to run. Users under 18 (or the age of majority where they live) may use the Service only if a parent or guardian agrees to our Terms of Use for them. If an app store or operating system tells us a user's age range or whether a parent has consented, we use that information only to apply age rules and parental-consent requirements and to comply with law, and we do not share it except as the law requires. We do not sell personal information of anyone, including users under 16, and do not use anyone's information for targeted advertising. If you believe a child under 13 has given us information, contact support@depthrix.com.

9. Security

We use reasonable administrative, technical and physical safeguards to protect personal information, including encryption of data in transit, hashing of passwords and codes, secure storage of sign-in keys on your device, signed links that expire for map downloads, and limits on access by our staff. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a security breach affects your personal information, we will notify you as required by law. Protect your device with a passcode and keep your account password private.

10. Where information is processed

The Service is intended for users in the United States. We are located in the United States, and our main service providers store information in the United States. Some providers, including MapTiler and content delivery networks, may process information in other countries under their terms with us. If you use the Service from outside the United States, you understand that your information will be processed in the United States.

11. Additional information for U.S. state residents

11.1. California

Categories of personal information. We collect the following categories of personal information, as defined in the California Consumer Privacy Act, from you, from your device, from Apple, Google and RevenueCat (purchase, renewal and refund information) and from app stores or operating systems (age range information), for the purposes in Section 2. We disclose them to the service providers in Section 3.1 for those purposes. When your device requests map images, the map servers in Section 3.2 also receive identifiers (IP address) and internet activity (the map area displayed).

CategoryExamplesSold or shared for advertising?
IdentifiersEmail address, account identifier, device identifier, IP address, push tokenNo
Commercial informationPurchases and subscriptionsNo
Internet or other electronic network activityServer logs, crash reports, map requests, map areas requested from map serversNo
Geolocation dataPrecise location in tracks and waypoints you sync or share; the map area you viewNo
Sensitive personal informationAccount sign-in (email and password); precise geolocationNo
Characteristics of protected classificationsAge range, if an app store or operating system provides itNo
InferencesNone—

How long we keep each category is described in Section 4.

Sensitive personal information. We use and disclose sensitive personal information only to provide the Service you request, to keep it secure, to prevent fraud and to comply with law. We do not use it to infer characteristics about you.

No sale or sharing. We do not sell or share personal information, including that of users under 16. Our practices on Do Not Track and Global Privacy Control are described in Section 3.4.

Your rights. The rights described in Section 6 are available to you as a California resident, in addition to any rights you have under California law.

11.2. Nevada

We do not sell covered information as defined in Nevada law. Nevada residents may nevertheless submit a request not to sell their information to support@depthrix.com, and we will respond to a verified request within 60 days. See Section 3.4 about tracking.

11.3. Other states

If you live in a state with a consumer privacy law that gives you additional rights, you may exercise them by contacting us as described in Section 6, and you may appeal a decision on your request by replying to our response.

12. Changes to this Policy

We may update this Policy. We will post the new version with its effective date. If we make a material change, we will tell you in the App or by email before it takes effect. We will not use information we collected before a change in a materially different way without your consent.

13. Contact us

L&K Sierra LLC
2902 Shady Acres Loop, Rocklin, CA 95765
Email: support@depthrix.com