Privacy Policy

The short version

Downstream stores your training data so you can use it. We don't sell it, we don't run ads, and we don't embed third-party trackers. Your workouts are shared only where you point them: your own devices, teammates and coaches you join, and integrations you connect.

1. Who we are

Row Downstream LLC, a Virginia limited liability company, operates Downstream — the mobile app, rowdownstream.app, and the services behind them. Questions: support@rowdownstream.app.

2. What we collect

• Account. When you sign in with Google we receive your name, email address, and a Google account identifier. We never see your Google password.
• Training data. Workouts and results from your rowing monitor — distance, time, pace, stroke data, splits, drag factor, machine serial — plus workouts you author, your calendar, plans, reference times, weight class, and screen layouts.
• Heart-rate data. If you use a heart-rate device or set a max heart rate, we store heart-rate readings and the zone analytics derived from them. This is health data; we treat it as part of your training record and use it for no other purpose.
• Device and technical data. Basic records needed to run the service: paired equipment (erg serials and labels you assign), sync timestamps, and server logs (IP address and requests) kept for security and debugging. The app also writes a local diagnostic log on your device that you can share with us for troubleshooting; it stays on your device unless you send it.

We do not collect your precise location, contacts, or advertising identifiers.

3. How we use it

• To provide the Service: capture, sync, display, and analyze your training across your devices and the web.
• To share within teams — exactly as your team membership and settings allow, and no further.
• To upload results to integrations you connect: the Concept2 Logbook (your results, including heart rate where present, are sent to your Concept2 account under Concept2's own privacy policy). If you connect Strava, we import your activities read-only and never post to Strava. Disconnecting stops future syncing.
• To operate, secure, and improve the Service, and to communicate with you about it.

We do not sell or rent your data, use it for advertising, or share it with data brokers.

4. Where it lives

Your data is stored on our servers in the United States (hosted on Amazon Web Services), encrypted in transit, with routine backups. Subscription payments (web only) are handled by Stripe; we never see or store your card number — only your subscription status and Stripe customer reference.

5. When we share

• Teammates and coaches you join, per your team settings.
• Live streaming: if you turn on streaming for a session, its live numbers are visible to your team and to anyone holding your overlay link, for the duration of the piece.
• Integrations you connect, per Section 3.
• Service providers that host and operate our infrastructure (e.g., AWS), bound to process data only for us.
• Legal: if required by law, or to protect the Service and its users.
• Business transfer: if Downstream is acquired, your data goes with the Service under this policy's promises.

6. Apple Health (iOS)

On iPhone and Apple Watch, if you turn it on, Downstream writes your completed rows to Apple Health as workouts — type, start and duration, distance, estimated energy, and heart rate where available — so they appear in the Fitness app and count toward your Activity rings. With a paired Apple Watch, the Downstream watch app records the workout directly. We write only what you row, only while the setting is on; turn it off, or revoke access in iOS Settings → Health, and we stop.

If you grant it, we also read heart rate from Apple Health during a piece (for example from an Apple Watch) to show and store it with that workout. Data read from or written to Apple Health is never used for advertising or marketing, and is never sold or shared with third parties or data brokers. It stays in your own Health store and your Downstream log, going no further except to an integration you connect yourself (Section 3).

7. Retention and deletion

We keep your data while your account exists. Delete your account and we delete your data from the live service, with backup copies aging out on our backup schedule. To delete your account, use the account deletion option in the app's settings or email support@rowdownstream.app from your account address — either way works, and we'll confirm when it's done. Note that results already uploaded to your Concept2 Logbook live in your Concept2 account and are deleted there, not by us.

8. Your rights

You can access and correct your data in the app and on the web, export your workouts, disconnect integrations, and delete your account. Depending on where you live you may have additional legal rights (such as access, portability, and erasure requests) — email us and we'll honor them.

9. Children

The Service isn't directed to children under 13, and we don't knowingly collect their data. If you believe a child under 13 has an account, contact us and we'll delete it.

10. Changes

We'll announce material changes to this policy in the app or by email before they take effect.

11. Contact

Row Downstream LLC · Richmond, Virginia
support@rowdownstream.app