← iCanyons

Privacy Policy

Last updated: 6 October 2026

This Policy explains how iCanyons (“the app”, “we”) processes users' personal data, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish data protection law.

1. Data controller

Roger Arcarons Llonc (natural person) · Lleida (Spain) · Contact: [email protected]

2. What data we process

CategoryDataPurpose
AccountEmail, password (encrypted), name and username (@handle)Create and manage your account and identify you
Profile (optional)Profile photo, bio, languagePersonalise your profile
Emergency contacts (optional)Name and phone number of the people you add, visible only to youAlert them by SMS from the emergency screen, with your location
LocationApproximate or precise device location, only while you use the appShow nearby canyons on the map and list
ContentWater-flow reports (level, date, rating, comment), photos and videos, comments, likes, tagged companions, followsProvide the service and the social features
TechnicalDevice identifier, usage and error data; advertising identifier only when the app shows advertisingOperation, security and, where applicable, advertising
Push notifications (optional)Technical device notification identifier (token), platform and registration dateSend you alerts on your phone (new reports for canyons you follow, tags, replies)
Acceptance recordDate and version of the terms of use and safety notice you acceptShow that you have accepted the terms and the safety notice
Data on your deviceCopy of the canyon pages you view, reports waiting to be sent (with their photos and videos) and preferencesView pages and save reports offline. Stored only on your device and removed when you uninstall the app

3. Legal basis

4. Public content

The water-flow reports, photos, videos and comments you publish are visible to the rest of the community. By default only your @username is shown, not your real name. You can enable the “Private descents” option so that your descents do not appear publicly with your name or photos (the water level still contributes anonymously), and decide whether to show your real name.

5. Processors and third parties

We use providers that process data on our behalf:

ProviderUse
Google Firebase (Google Ireland Ltd.)Authentication, database and storage of images/videos
Google Maps PlatformCanyon map
Google AdMobAdvertising in the free version, when shown (advertising identifier)
Apple App Store / Google PlayDistribution and purchase of the premium version
Expo (650 Industries, Inc., USA)Sending push notifications: receives the device token and the alert content (canyon name and a short text) and delivers it through Apple (APNs) and Google (FCM)
Sentry (Functional Software, Inc.)App error logging

Some providers may process data outside the EEA with the safeguards provided for by the GDPR (standard contractual clauses).

6. Retention

We keep your data while your account is active. If you request deletion, we will erase your account and content within a reasonable period, except for legal retention obligations. Push notification tokens are deleted when you turn alerts off, when you sign out, and when the provider reports they are no longer valid.

7. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to [email protected]. You may also lodge a complaint with the Spanish Data Protection Agency (aepd.es).

8. Minors

The app is not intended for children under 14. If we detect an account of a minor without authorisation, we will delete it.

9. Security

We apply reasonable technical and organisational measures to protect your data. No system is 100% secure, but we work to minimise risks.

10. Changes

We may update this Policy. We will publish the current version on this page with its update date. This English version is provided for convenience; in the event of any discrepancy, the Spanish version prevails.