Privacy policy
Last updated: 20 September 2026
The principle
Your log is stored locally on your device. Riseform creates no account and runs no log synchronisation server. Your trips, catches, photographs, notes and spot names are neither published nor sold. Backup and export are free: the application prepares a file that you send yourself to the destination of your choice.
Location
Riseform does not track you, never accesses location in the background, and does not ask for permission on launch. It may ask after an explicit action, for example when you choose to use your current position. You can refuse without blocking the log, use photograph metadata, or place a point by hand.
A saved position remains in the local log. Some network features do, however, send a coordinate or search query to the provider needed to return the result; those flows are listed below. A shared card may show a town, but contains neither coordinates nor the exact spot name.
Services called by the application
| Service | Data sent and purpose |
|---|---|
| Open-Meteo | A coordinate rounded to four decimals and a date or period, for weather, marine data and some river flows. |
| Hubeau — Eaufrance | A coordinate rounded to four decimals, then station code and dates, to find and read river flow in France. |
| Nominatim — OpenStreetMap | Text entered in place search, or a coordinate rounded to three decimals when resolving a coordinate to a town. |
| Google Cloud Storage | Byte-range requests needed for the worldwide PMTiles basemap; no log content is attached to those requests. |
| RevenueCat | A random customer identifier, technical device information and purchase history needed to validate Plus or Founder, restore a purchase, and apply an expiry, revocation or refund. |
Open-Meteo and Nominatim calls pass through the Riseform proxy hosted by Cloudflare. Cloudflare receives the IP address and request, then sends the provider the useful coordinate, period or search text without the device IP address. Geocoding responses are retained for 30 days in a shared cache indexed by the search or rounded coordinate; past weather responses may also remain cached for 30 days. These caches contain no installation identifier, photograph, note, species or log history.
Purchases and subscriptions
Apple or Google processes the payment; Riseform receives no payment-card data. RevenueCat acts as a processor to validate store receipts and tokens and keep the Plus or Founder entitlement up to date. The application uses a random customer identifier without a Riseform account and sends RevenueCat no logbook, spot, photograph, note or coordinate. This processing is required to buy or restore an entitlement and does not depend on usage-measurement consent.
Usage measurement in the application
With your explicit consent, the application may send pseudonymised usage events and Dart errors to PostHog in order to identify friction. This choice is off by default, can be withdrawn at any time under Profile ▸ Privacy, and revocation takes effect immediately. The application's allowlist excludes spot names, coordinates, photographs, notes and entered text. A random installation identifier links events together, without an account or real-world identity. Their context includes the app version, platform, device region and plan status (Free, Plus or Founder), without payment card details.
This website
At the date of this policy, the website loads no audience measurement tool and sets no PostHog identifier. It only remembers the site language in browser local storage after you make a choice. Cloudflare processes the technical logs required to host and secure the site.
Recipients
| Provider | Role | Stated region |
|---|---|---|
| PostHog | Optional in-app measurement, after consent | European Union |
| Cloudflare | Site hosting and security, weather and place request proxy and cache | Outside the EU, standard contractual clauses |
| Open-Meteo | Weather, marine and hydrological data | European Union |
| Hubeau — Eaufrance | French hydrometry | France |
| Nominatim — OpenStreetMap | Place search and naming | European Union |
| Google Cloud Storage | Basemap distribution | Google Cloud infrastructure |
| RevenueCat | Purchase, subscription, restoration and refund validation | United States, applicable contractual safeguards |
| Apple / Google | Distribution and billing once listings open | Under their own policies |
Your choices and rights
There is no Riseform account to delete. You can erase local data in the application or by uninstalling it; backups you exported remain under your control and must be deleted where you stored them. You may also request access, rectification, erasure, restriction or objection for data processed by Riseform, including the customer identifier and purchase history retained by RevenueCat, and withdraw measurement consent without retroactive effect.
For any request: confidentialite@getriseform.com. You may also complain to the CNIL (cnil.fr) or your local supervisory authority.