Privacy Policy

1. Data Controller

Stream Rise is responsible for processing the personal data collected through the mobile application and the associated web system.

2. Data We Collect

We collect: (a) account data: name, username, email address, phone number (optional), profile photo (optional); (b) operational data: observations logged by guides, staff, kitchen, and maintenance; activity photos uploaded by guides; assigned fishing locations and the history of which guide has been assigned to each client, including the planned date and time for each location; (c) basic technical data: server access logs (date, time, IP address) for security and technical support purposes; (d) device location: if you use the fishing access map, the app accesses your approximate or precise location while that screen is open, to show your position and draw a visual reference toward an access point -- this momentary location is not sent to or stored on our servers, it is only used on your device, except in two specific cases: (1) if you choose to register a new fishing access point from the map (the "Register point" feature), the point's coordinates are stored on our servers together with your identity as the person who created it, and a lodge administrator reviews and approves the point before it becomes visible to the rest of the team; and (2) if you request a real road route to an access point, your location at that moment is sent to our server solely to calculate that route -- it is not stored, and is discarded as soon as the response is generated; (e) push notification token: a technical identifier for your device so we can send you operational alerts (for example, a new assignment or a resolved incident), which you can turn off by category from Settings → Notifications. We do not collect card payment data or biometric data.

3. How We Use Your Data

We use the data exclusively to: operate and coordinate the lodge's activities (guide assignments, guest follow-up), enable internal communication within the lodge team, maintain historical guest service records, send you operational notifications relevant to your role, and provide technical support. We do not use the data for advertising, commercial profiling, or sale to third parties.

4. Contractual Relationship Between Lodge and User

Each user account is associated with a lodge subscribed to the service. The lodge, as employer, is responsible for authorizing the creation of its staff's accounts and for the accuracy of the operational data entered. Stream Rise acts as the provider of the technology platform that hosts and processes that data on the lodge's behalf.

5. Administrator Profile and Supervision

Lodges may enable administrator accounts with access to the same operational views as guides, staff, kitchen, and maintenance, for supervision and team support purposes. When an administrator accesses an operational view on behalf of another user, the action performed is recorded under the represented user's identity for operational purposes, and an internal audit log identifying the administrator who performed it is also kept, for traceability and internal control of the lodge.

6. Who We Share Data With

We do not sell or share personal data with third parties for commercial or advertising purposes. Data may be accessed by: authorized personnel of the lodge you work for (for operational purposes), technical infrastructure providers (hosting and storage) under confidentiality obligations, and authorities when required by law.

7. Tracking and Advertising

Stream Rise does not track users across third-party apps or websites for advertising purposes, does not use advertising networks, and does not share device identifiers with data brokers. For this reason, the application does not request Apple's App Tracking Transparency (ATT) permission: it does not apply, because the activity that permission regulates does not take place.

8. Storage and Security

Data is transmitted encrypted via HTTPS/TLS and stored on servers with restricted access. Credentials are managed using secure authentication tokens (passwords are never stored in plain text). Some features use third-party services -- Google Maps Platform for the fishing access map, and Firebase Cloud Messaging for push notifications -- which process limited technical data (such as location while the map is open, or the notification token) under their own privacy policies. Real road route calculation uses our own routing engine (OSRM), hosted on our own server -- unlike the services above, it is not an external provider and does not share data with anyone else. No system is 100% infallible; in the event of any significant security incident, we will notify affected lodges.

9. Data Retention

We retain data while the account is active and the lodge maintains an active subscription. After an account is deleted, the associated personal data is permanently erased, except where legal retention obligations apply (for example, the lodge's accounting records).

10. Your Rights

You have the right to access, rectify, update, and request deletion of your personal data at any time. You can exercise these rights directly from Settings inside the app or by contacting us.

11. Account and Data Deletion

You can permanently delete your account and personal data from Settings → Delete Account. The process is immediate upon confirmation and requires no additional steps outside the app.

12. Minors

This service is intended for operational staff over 18 years of age. We do not knowingly collect data from minors.

13. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of relevant changes by updating the "last updated" date shown in this section.

14. Contact

For questions about privacy and data protection: [contact email: privacidad@streamrise.cl].