Privacy Policy: Holokai and Outriggerzone

Takes effect: November 10, 2026

Who we are

This policy covers the Holokai phone app (iPhone and Android), the Holokai website and the Outriggerzone website (www.outriggerzone.com). Both products use the same accounts and the same server.

"We" means Outrigger Zone, LLC, 75 Kamalii Place, Haiku, HI 96708.

The short version

• Holokai records your precise location while a trip you started is running, even with the app closed and the screen off. It doesn't track you between trips.
• Today, a trip can be seen only by you, your safety contacts, people you share it with, a race's staff, and anyone you give its link to. We plan to add a public map soon (see "What's changing soon").
• Race start lists and results are public on race pages.
• Your email, phone, address, birth date, sex, emergency contacts, safety contacts, waivers and payments aren't public. A race's organizers see what you give when you register for their race.
• We don't sell your information or show ads.

What we collect

Your account

• Name, email address and password. We store the password only as a hash, not as you typed it.
• If you give them: phone number, address, birth date, and sex or gender.
• Whether your email is verified, and when you last signed in to Holokai.
• A profile picture, if you add one. On Outriggerzone, also a bio, country, and website or social links, if you add them.
• If you had an account on our older website, the details we carried over from it.

Your trips (GPS tracking)

While a trip is running, the app records:

• Your precise GPS position, about every 2 seconds (every second if you pick the one-second reporting option).
• The accuracy, speed and heading of each position, and when it was taken and received.
• Your phone's battery level at each position.

We also keep each trip's name, start time, planned end, actual end, distance and reporting interval. If you set them up, we keep its boundary, its alerts, your saved boundaries and your default trip settings.

Alerts (SOS, off course, not reporting, low battery, overdue) are stored with your position at the time, and with who acknowledged them.

The app sends positions to our server as often as you choose, from every second to every 5 minutes (15 seconds by default). With no signal, it keeps them on your phone and sends them when signal returns.

Your location at other times

• Near me: when you ask for races or clubs near you, the app or website gets your location once and uses it to find them. It isn't saved to your account.
• Maps: a map can show where you are, or center on your last known location. That stays on your phone unless a trip is running.
• Outriggerzone's weather page: this page asks for your browser's location when it opens, and your browser sends it to weather services (see "Service providers").

Your phone and app

• The phone's name, or its model if it has no name, and whether it's an iPhone or Android. A phone's name can include your own name.
• A key that lets the phone sign and encrypt its tracking messages, and when it last reached us.
• A push token, so we can send you notifications.
• The app's version.

The camera is used only to read QR codes at a race's check-in desk, and no pictures are saved. The app doesn't use your microphone, read your phone's contact list, or open your photo library. It can read alerts aloud using your phone's own speech.

Crash reports and error records

If the app or the Holokai website crashes, it sends us the screen's route (never the values in it), the error's name, its message with emails, numbers and quoted text masked, where in the code it happened, your browser or app version, and a scrambled ID for your account. The app holds a crash report for up to 7 days until it can send it.

When the server refuses a request or hits an error, it records the same kind of masked details.

Some records aren't masked. When the server itself fails, it emails our administrator a report that can include your account ID, name and email, IP address, browser details and parts of your request, with sensitive fields removed. Server logs can also contain details that identify you.

Website visits and cookies

Our server sees your IP address and browser details with each request. We use IP addresses to limit abuse, such as repeated failed sign-ins.

The websites use one sign-in cookie, which lasts up to a year. Outriggerzone also sets two small cookies to remember a greeting and a designer notice. Your browser may store small preferences, such as your choice of units. We use no analytics or advertising cookies. Embedded videos and maps can set their own (see "Service providers").

Our web servers can also keep standard logs of these requests.

Race registration

When you register, or someone registers you, we collect:

• First and last name, email, birth date, and sex or gender.
• Hometown, if the race asks.
• Shirt size, if the race asks.
• Emergency contact's name and phone.
• Answers to the organizer's own questions, which can be anything they choose to ask.
• Your boat: its name, bib, craft, hull color, canoe, crew, event and division.
• Check-in, timing marks, status, finish time and places.
• If the race asks at check-in: what you're wearing and your escort boat's name and radio channel.
• Messages the organizers sent you.

Waivers and signatures

For a waiver signed online, we keep the exact words of the waiver, the name typed, the racer's name and birth date at the time, the account that signed, the time, and whether a parent or guardian signed. For a paper waiver, we keep that it was handed in, when, and which staff member marked it.

Payments

You type your card details directly into Stripe's checkout page, so we never receive or store your card number. We keep what you owe and paid, Stripe's reference numbers, refunds, and who marked a payment as paid by hand (cash at the desk, say).

Organizers who take payments give their business, identity and bank details directly to Stripe on Stripe's forms. We keep the organizer's Stripe account ID, and we show them what Stripe reports, such as the last 4 digits of their bank account.

Canoes and pictures

We store your canoes' names, craft, hull color and number, and up to 6 photos of each. We also store profile pictures, race logos and covers, and club logos.

Holokai's canoe photos, race pictures and club logos are stored at public web addresses. Anyone with the link can see them.

These pictures are stored as uploaded, so if a photo's file includes where it was taken, that stays in the file. We plan to remove that data soon.

Chat

Chat isn't live yet. We'll update this policy before it starts.

Information about other people

Some of what we hold was given by someone else:

• Safety contacts. A paddler enters a contact's name, phone number and email. We email the contact the trip's link and its alerts, saying who chose them. If their email matches a verified account, we link it to that account so they can get notifications.
• Crewmates and people registered by someone else. A captain, parent, club or organizer can enter another person's name, email, birth date, sex or gender, hometown and emergency contact. We can email that person a link to claim the registration.
• Invitations. A crew seat or race staff invitation holds the invited person's name or email.
• Emergency contacts. A racer enters their name and phone. We don't contact them ourselves.
• Outriggerzone customers. Dealers and staff can enter a customer's name, email, phone and address.

If you're one of these people and want your details changed or removed, contact us.

Clubs and races you list

Anyone signed in can add a club to Holokai's public directory, with its summary, website, email, phone, address and location. It's public at once, and we record who added it. A race's page, including any contact email and phone its organizers give, is public once it's published. Please list public contact details, not someone's private ones.

Outriggerzone

We also collect what you send through Outriggerzone's forms, and we keep the records of boats and orders:

• Warranty registration: name, email, phone, dealer, model and boat.
• Warranty support: the same, plus your message and pictures.
• Contact form: name, email, phone, your message and any files.
• Custom design request: name, email, phone, your message, design and images.
• Boat orders, designs and comments, and support requests.

Email records

We keep a list of addresses that bounced or reported an email as spam, and of addresses that asked us to stop some emails. Whoever got the email may have no account, so we keep these by address. We also keep a scrambled copy of the addresses you've sent a trip to, to limit misuse.

Location in the background

Holokai collects location data to track your trip and alert your safety contacts, even when the app is closed or not in use and the screen is off. On the water, a phone is usually locked in a pocket or dry bag, so tracking couldn't work otherwise.

• When it starts: only when you start a trip.
• When it stops: when you end the trip, or at the planned end you set. If you turn on the overdue alert, it can keep going for up to 6 hours past that, until you end the trip, because that's when someone may need to find you.
• How you can tell: Android shows a notification saying "Tracking your session". iPhone shows its location indicator.
• If your phone restarts during a trip: the app can pick the trip back up when it next runs.
• What it needs: location access set to "Always" (iPhone) or "Allow all the time" (Android). Without it you can't start a trip, but you can still use the rest of the app.
• What it's used for: your track, speed and distance; your safety contacts and race control; and safety alerts. We don't use your location for ads.
• How to stop it: end the trip, or turn off location access in your phone's settings. Once tracking stops, the people watching over you stop getting your position.

Tracking needs a cell signal. Holokai isn't an emergency service, and it doesn't replace a VHF radio, a personal locator beacon or an escort boat.

How we use your information

• To run tracking, safety alerts and the maps.
• To run races: registration, waivers, payments, check-in, race control, start lists and results.
• To send emails and notifications about your account, trips and races, and messages from a race's organizers. We don't send marketing emails.
• To let people find and add crewmates and staff.
• To stop abuse, such as repeated failed sign-ins and mass emails.
• To find and fix problems.

Who can see what

The public

Your trips aren't public today. Your athlete page, with your name, races and results, is public. Your email, phone, address, birth date, and sex or gender are never on your public page.

People adding a crewmate, staff member or trip viewer can find you by name if you've used Holokai. The search shows only your name.

On Outriggerzone, only staff and team members have public profile pages, with a bio and picture.

Race pages

Start lists and results are public on race pages, unless the race's organizers hide them. That applies to private accounts too. They show names, boat name, bib, craft, hull color, event, division, status, times and places. A division's name can hint at your age and sex ("Women 40+").

A race's public map shows a boat's bib, name, craft, division, status and position, from 15 minutes before its start until 5 minutes after its finish. It doesn't show battery level, contacts or alerts.

People you share a trip with

• Your safety contacts get a link to the trip and its alerts. If you have someone to email, pressing SOS turns the link on. Alert emails include your last position.
• Anyone with a trip's link can follow it without signing in. They see your name, the trip's name and times, your track, speed and battery level. You can share the link yourself, and you can turn it off.
• A safety contact with a verified account can also see your email and phone while the trip is running.

Race staff and crews

Organizers can download registrations as a spreadsheet. Organizers run their own races and decide what to ask. Once they've downloaded something, we can't control what they do with it.

Dealers and our own people

• An Outriggerzone dealer can see the contact details and address of its own customers, and what you send about that dealer.
• Our management accounts can see every account's details, including birth date and address. They can't open your trips in the app or on the websites.
• The people who run our servers can reach the database directly when they need to, and they get the error reports described above. Copies of some notice emails also go to our administrator's inbox.

What's changing soon

These aren't live yet. We'll update this policy and tell you in the app or by email before they start:

• A public map. New trips will appear on a public map unless you choose otherwise, and accounts will be public by default. Trips you've already recorded stay private.
• Privacy choices. A private account will show only your name and picture, and hide your current trips. A public account will be able to hide its current trips. When you start a trip, you'll choose who can see it.
• Races. A race's settings will be able to override these. If a race lets paddlers hide, we'll ask you, starting from your own setting.
• Weather on the map. Opening the map will send a weather service your approximate location, to about 11 km, and your IP address, even with no trip running.
• Deleting your account in the app, and an age question at sign-up.

Service providers

We use these companies to run the service, and we share with them what they need to do that work. Their terms protect your information at least as well as this policy does.

We also use tools that help us monitor the service and fix problems. They can receive error details, which can include personal information.

We send text messages to no one today, even though the app lets you save a contact's phone number. If we add texting, we'll name the provider here first.

We may also share information if the law requires it, or to protect someone's safety.

How long we keep it

Deleting your information

A trip. You can delete your own trips in the app. The track, alerts and sharing are deleted for good, apart from backups.

Your account. To delete your account, contact us. A way to do it in the app is coming. Your profile, picture, contacts, canoes and trips are deleted. Race results and registrations stay with the race under your name, and we keep payment records as required.

A photo. Taking a photo off a canoe deletes it from storage, apart from backups.

If you have no account, such as a safety contact or a crewmate someone entered, contact us.

Your choices

• Change your details on your account page.
• Add or remove safety contacts, and turn a trip's link off.
• Turn off location access or notifications in your phone's settings. Signing out stops notifications to that phone.
• Stop one race's organizer messages, all races' messages, or emails sent on someone else's behalf, using the link in those emails. You can undo this in your account.

Safety emails have no unsubscribe link, because someone may be in trouble. They can still reach an address that reported one as spam. If you don't want to be someone's safety contact, ask them to remove you, or contact us.

To get a copy of your data, correct it or ask us to delete it, contact us.

Children

Under 13. Children under 13 shouldn't create their own account. A parent or guardian can register a child for a race as someone else. If you believe a child under 13 has an account, contact us and we'll delete it.

Under 18. Under-18s are treated the same as adults. Only waivers differ: for a racer under 18 on race day, a parent or guardian signs, either online by typing their name or on paper at check-in, as the race chooses.

Children a parent registers. A parent or guardian can register a child for a race. The child's name then appears on the race's start list and results like anyone else's, unless the race hides them. It doesn't appear on anyone's athlete page.

Security

• The websites and the app use encrypted connections (HTTPS).
• Tracking messages sent outside those connections are encrypted, and each phone has its own key.
• Passwords are stored only as hashes. Email codes are stored only as keyed hashes, and they expire.
• On your phone, your sign-in is kept in the iPhone Keychain or Android Keystore. Your trips are also stored in the app on your phone.
• Failed sign-ins and account searches are limited.
• Public access to our backups' storage is blocked.

No system is fully secure, and we can't promise that nothing will ever go wrong.

Where your information is

Our server is in the United States, in Amazon's us-west-1 (Northern California) region. If you use Holokai or Outriggerzone from elsewhere, your information comes here. We offer Holokai and Outriggerzone in the United States for now.

Changes to this policy

We'll post any change here with a new date. If a change affects who can see your information or how we use your location, we'll tell you in the app or by email before it applies, and we'll ask you first where the law or the app stores require it.

How to contact us

Email support@outriggerzone.com, or write to Outrigger Zone, LLC, 75 Kamalii Place, Haiku, HI 96708.