Last updated: September 2, 2026
Driflo supports account creation and identification through Sign in with Apple or an email verification code. Apple may provide an Apple user identifier, email address, and display name; you may also explicitly verify and bind an email address to sign in to the same Driflo account. An email address supplied by Apple never becomes an email sign-in identity automatically and is never used to merge accounts automatically.
When you grant location access, Driflo uses your precise location to show nearby waters, identify your current water area, load local weather and wind-risk information, and create a track after you actively start recording or a play session.
Waters, routes, waypoints, bookmarks, media, and other content that you create or edit in the app are sent to Driflo servers to display, synchronize, and maintain water-area data.
Activity tracks are stored locally first. iCloud backup is enabled by default and stores tracks and play reviews in your private iCloud account; it is independent of Driflo account sync. If you authorize HealthKit, Driflo writes paddling workouts and routes to HealthKit. Heart-rate data read from HealthKit is used only on your device and is not sent to Driflo servers. HealthKit data is not used for advertising or tracking.
Account sync is optional and off by default. Only after you enable it will completed activity tracks, associated play records, and private routes be synchronized. We store versioned, encrypted-at-rest private copies on infrastructure operated by Driflo for cross-device upload, download, and recovery. These copies are not displayed publicly.
After you explicitly delete synchronized content, it enters a deleted state and its payload remains recoverable for 30 days before being scheduled for removal. We retain the deletion record needed to prevent an older device from uploading the content again. When you delete your account, we schedule removal of synchronized payloads referenced by that account and retry any unsuccessful removal.
To provide weather and risk information, Driflo sends coordinates to its servers, which proxy requests to weather services. The servers may retain necessary security logs, error logs, and request statistics to keep the service reliable.
Driflo does not provide a social feed, publicly display activities, play records, or private routes from account sync, sell personal data, or use third-party advertising tracking.
To access or delete your data, or to ask a privacy question, contact support@driflo.app.