Privacy Policy

1. Introduction

StokeBot ("we", "us", or "our") operates the StokeBot web application, mobile application, and related services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service, including the StokeBot mobile app for iOS and Android.

2. Information We Collect

Account Information

When you create an account, we collect your email address, name, and an optional profile photo. If you sign up via a third-party provider (e.g., Google), we receive basic profile information from that provider.

Mobile Device Information

When you use the StokeBot mobile app, we collect device information including device type, operating system version, and unique device identifiers. We also collect push notification tokens (Expo Push Tokens) to deliver in-app notifications about mountain conditions and alerts.

Communication Channels

If you opt in to receive notifications via WhatsApp or other messaging platforms, we collect the phone number or identifier you provide. These are used solely for delivering the notifications you subscribe to.

Usage Data

We collect information about how you interact with the service, including chat messages sent to our AI assistant, notification preferences, mountain preferences, and subscription settings. Chat messages are stored to maintain conversation history and improve the service. Usage analytics help us understand feature adoption and service performance.

Local Storage

The mobile app stores certain data locally on your device for performance and offline access, including cached mountain conditions, feed content, chat history, and your preferences. Authentication tokens are securely stored using encrypted device storage (SecureStore).

Messaging Data

When you send messages to StokeBot via WhatsApp, SMS, or the web chat, we receive and store the content of those messages, your phone number or email address, and associated metadata (timestamps, message IDs). When we send you messages — including notification alerts, snow reports, and AI chat responses — we log the delivery status, recipient, and message content for troubleshooting and service quality.

AI Interaction Data

When you use our AI chat feature (via web or WhatsApp), we log token usage, model information, and response times for monitoring and cost management. We do not use your chat content to train AI models.

3. How We Use Your Information

• Deliver mountain condition reports and notifications via email, WhatsApp, mobile push notifications, and other channels you subscribe to
• Receive and process your inbound messages (WhatsApp, web chat, mobile app chat) to provide AI-powered responses
• Send outbound notifications including snow reports, parking alerts, stoke alerts, daily digests, and broadcast messages
• Provide AI-powered chat responses about mountain conditions and local area information
• Personalize content based on your selected mountain preferences
• Manage your account, notification preferences, and delivery channel settings
• Log message delivery status for troubleshooting failed deliveries
• Monitor service performance and manage AI usage costs
• Send service-related communications (e.g., account verification, channel verification)

4. Third-Party Services

We use the following third-party services to operate StokeBot:

• Supabase — database hosting and authentication
• Anthropic & OpenAI — AI language models for chat responses
• Expo — mobile push notification delivery and app infrastructure
• Twilio — WhatsApp message delivery
• Resend — email delivery
• Vercel — application hosting
• Open-Meteo — weather forecast data (no personal data shared)

Each third-party service processes data in accordance with their own privacy policies. We only share the minimum information necessary for each service to function.

5. No Sharing for Marketing

We do not sell, rent, or share your personal information with third parties for marketing purposes. Your data is never shared with advertisers or data brokers. Information is only shared with the third-party service providers listed above to the extent necessary to operate the Service (e.g., sending your phone number to Twilio to deliver a WhatsApp message you requested).

6. Data Retention

We retain your account data and chat history for as long as your account is active. Notification logs are retained for 90 days. You can delete your account at any time via the Settings screen in the mobile app or by contacting us. Upon account deletion, your data is anonymized within 30 days. Some data may be retained for legal or security purposes as required by law.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including encryption in transit (TLS), secure authentication, and row-level security on our database. However, no method of electronic transmission or storage is 100% secure.

8. Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate personal data
• Request deletion of your personal data via Settings > Delete Account (mobile app) or by contacting us
• Opt out of notifications at any time via your settings or by messaging "STOP" on WhatsApp
• Export your data in a portable format (contact [email protected])

9. Cookies

We use essential cookies for authentication and session management. We do not use third-party tracking cookies or advertising cookies.

10. Children's Privacy

StokeBot is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

12. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at [email protected].