Florida WaterWise uses your location to show nearby launch points, local water conditions, and direction recommendations. Your location is used only when you request location-based features.

• We never request location permission on first page load. You'll see an explanation before any permission prompt.
• Location is requested only after you tap "Use My Location," and only in the foreground.
• We never request background location, and we never track your location continuously unless you explicitly start an active trip.
• If permission is denied or unavailable, the app remains fully usable through manual search.
• You can disable location features and delete saved location data anytime in Settings.

• We do not permanently store precise GPS coordinates by default. Current coordinates are used temporarily to find nearby locations and conditions.
• Any coordinates used in analytics or user reports are rounded or generalized so they can't identify you precisely.
• Precise coordinates are never included in logs, error reports, or analytics.
• Exact trip coordinates are saved only if you explicitly save a trip or choose to share it.
• You can delete saved trips, routes, and location data at any time. Temporary location data is discarded automatically once it's no longer needed.

• We never request compass or device-orientation permission until you tap "Enable Compass."
• Compass access is used only to show your heading and the recommended travel direction.
• Permission is requested through your browser's supported device-orientation system. On unsupported browsers, a manual direction indicator is shown instead.
• Raw compass readings are processed locally on your device and never transmitted to the server.
• Compass reading stops automatically when you leave the compass screen or end an active trip. A visible indicator shows when compass access is active.

• Trip sharing is opt-in. A share link is never created without your action.
• Before creating a share link, you'll see exactly what information will be shared.
• Live location is never shared by default.
• Share links use random, non-guessable tokens and include an expiration time.
• Your email address and account information are never included in a shared trip.
• You can stop sharing at any time, which invalidates the link.

• All data is transmitted over HTTPS.
• API keys are stored only in secure server-side environment variables — never in frontend code.
• User-submitted reports, descriptions, photos, and coordinates are validated and sanitized.
• Saved trips, emergency contacts, and reports require authentication. Users can access only their own saved trips and personal data.
• Administrative functions are protected with role-based access control.
• Internal API errors and database details are never exposed to users.
• An audit log may be kept for administrative changes, without storing unnecessary personal data.

You can disable location features, delete your saved trips and location data, and stop sharing any trip at any time. Visit Settings to manage these controls.