Privacy Policy

Last updated: 21 September 2026

Levelwatch (“the app”) is published by Xaras Holdings LLC (“we”, “us”). This policy explains what the app collects, why, and who it is shared with. It is written to match what the app actually does — if the app changes, this document changes with it.

What we collect

Account information

When you create an account we collect your email address and a password. Authentication is handled by Supabase; passwords are stored only as salted hashes by Supabase and are never visible to us or stored on your device in plain text.

Your app settings

We store the lake you select as your default, your dock geometry (cleat elevation, horizontal distance, freeboard, estimated maximum height), and your acceptable slack limit. These are linked to your account so your setup follows you to a new device.

Purchase information

If you subscribe, Google Play processes the payment and RevenueCat records the resulting subscription status against an anonymous customer identifier. We never receive or store your payment card details.

What we do not collect

Levelwatch does not collect your location, contacts, photos, files, device identifiers for advertising, or any analytics or crash telemetry. The app requests only the INTERNET permission.

How your information is used

We do not sell your information, use it for advertising, or share it with third parties beyond the processors named below.

Service providers

ProviderRoleData it handles
Supabase Authentication, database, backend functions Email, password hash, app settings
RevenueCat Subscription status Anonymous customer id, purchase receipts
Google Play Billing Payment processing Payment details (never shared with us)

Lake level, generation release, and forecast data is sourced from the Tennessee Valley Authority (TVA), which publishes it publicly. Retrieving it sends no personal information.

Data retention and deletion

Your account data is kept for as long as your account exists.

In the app: open Settings → Account → Delete account and data. This immediately and permanently removes your account and every setting stored against it — your default lake, dock geometry, and slack limit. It cannot be undone.

By email: if you can no longer sign in, email [email protected] from the address on the account. We will delete it within 30 days and confirm by reply. Full instructions are on the account deletion page.

Deleting your account does not cancel a subscription — billing is handled by Google Play, so cancel there under Subscriptions. Purchase records held by Google and RevenueCat are subject to their own retention policies.

Your rights

Whatever your state or country, you can ask us to do any of the following with the personal data we hold about you:

Email [email protected] to exercise any of these. We will respond within 30 days and will not charge you or degrade your use of the app for asking. We do not sell personal data or use it for targeted advertising, so there is nothing to opt out of on that front.

Children

Levelwatch is not directed to children under 13 and we do not knowingly collect information from them.

Security

Traffic between the app and our backend uses HTTPS. Your session token is held in the device keychain / Android Keystore via expo-secure-store, not in plain storage.

Changes

Material changes to this policy will be reflected in the “Last updated” date above and, where the change is significant, surfaced in the app.

Contact

Questions about this policy: [email protected]