Privacy Policy

Floe is a journal and timer for cold-water dips — open water, ice baths and cold showers — on iPhone and Apple Watch. It is made by Georgiy Gorokhov, the developer of Sea Temperature. This policy explains what data Floe uses, where it goes and the choices you have.

Effective 9 October 2026

The short version

• Your dip journal is stored on your own devices. We don't receive your journal.
• Clubs are optional. If you join or start one, you sign in with Apple, and the members of your clubs see your club name and this week's cold time, dips and streak. You can leave or delete your account in the app at any time.
• Apple Health data stays in Apple Health and on your devices. It is never sent to us or anyone else, and never used for advertising.
• To show water temperatures near you, Floe sends your location to the Sea Temperature service (and to Apple Weather for the forecast) when you look for nearby spots.
• The free version shows ads from Google AdMob. You decide about personalised ads and tracking in the consent and Apple tracking prompts.
• We use Google Firebase to count how the app is used, to receive crash reports and to send occasional push notifications.

Data stored on your devices

Your journal — date, length, water temperature, place, how you felt, notes and sauna ↔ cold rounds of every dip — is saved in Floe's storage on your iPhone; your Apple Watch keeps a summary (recent dips, calendar, totals) and the dips it measured until the iPhone has them, so it works without the iPhone nearby. It is included in your device backup (iCloud or computer) like other app data. You can export it as a CSV file and delete single dips or everything in the app.

Settings such as your cold level, units, favourite spots, alerts and reminders are stored on your device. Favourite spots and the spot you dip at are also used to fetch their water temperatures (see below).

Apple Health and Apple Watch

If you turn on Apple Health in Floe, the app asks your permission to write workouts (your dips, with water temperature) to Apple Health and to read your heart rate and workouts. On Apple Watch, Floe runs a workout session during a dip to measure your heart rate live; on Apple Watch Ultra it can also read the water temperature and depth from the watch's sensor.

Health data is used only to show you your heart rate, recovery and dip history inside Floe. It is not sent to our servers or to any third party, it is not used for advertising or marketing, and it is not sold. You can change Floe's Health permissions at any time in the Health app or in Settings → Health → Data Access & Devices.

Your iPhone and Apple Watch exchange your dips, settings and Premium status directly with each other through Apple's WatchConnectivity.

Location

With your permission, Floe uses your location to find water temperature points near you, sort spots by distance and show the weather and the best time to go in. For this the app sends your coordinates to:

• The Sea Temperature service (seatemp.link), run by the same developer, which answers with nearby water temperatures and forecasts;
• Apple Weather (WeatherKit), which answers with the weather forecast.

Floe does not track your location in the background and does not keep a location history. You can use Floe without location access by choosing spots on the map or by search.

The Sea Temperature service

Water temperatures come from the Sea Temperature service. When Floe starts for the first time it receives a random identifier from the service; requests then include this identifier, the spot or coordinates you asked about, your device language, the platform and whether you have Premium. The identifier is not linked to your name, email or Apple ID. The service keeps standard server logs (such as IP address and time of request) for security and to keep the service running.

Advertising (free version)

The free version of Floe shows ads provided by Google AdMob. Before any ads are loaded, users in the EEA, the UK and Switzerland are asked for consent through Google's consent form, and on iOS Apple asks whether Floe may track you across other companies' apps and websites. If you decline tracking, AdMob does not receive your device's advertising identifier and shows non-personalised ads. AdMob may collect device information, an advertising identifier (only with your permission), approximate location derived from your IP address and ad interaction data. Premium removes ads.

Analytics and crash reports

Floe uses Google Firebase:

• Firebase Analytics — which screens and features are used (for example that a dip was saved or the paywall was opened), device model, OS version, app version and country. It does not include your journal contents, Health data or precise location.
• Firebase Crashlytics — crash reports with technical details (device, OS, the code that failed) so bugs can be fixed.
• Firebase Remote Config — downloads app settings so features can be adjusted without an update.
• Firebase Cloud Messaging — delivers push notifications (see Notifications below).
• Firebase App Check — confirms through Apple's App Attest that requests to clubs come from the genuine Floe app. It sends no personal data.

Clubs

Clubs let friends compare their time in cold water each week. They are optional: you only use them if you join or start one.

• Sign in with Apple. To use clubs you sign in with Apple through Google Firebase Authentication. Floe asks Apple only for your name, never for your email address. Firebase keeps an account identifier linked to your Apple sign-in.
• What is stored. Your name in clubs (you choose it), the clubs you are in, and for each club this week's total time in cold water, the number of dips and your current streak, with the time they were last updated. Clubs you start store their name, an invite code and that you run them. This data is stored in Google Cloud Firestore in the European Union.
• Who sees it. Only the members of each club see its name, its members' names and their weekly numbers. Anyone with a club's invite code can see the club's name and join it, so share codes only with people you want in your club. The person who runs a club can remove members.
• What is not shared. Your journal entries, notes, places, water temperatures, Health data and location are not sent to clubs — only the weekly totals above.
• Leaving and deleting. Leaving a club removes your numbers from its board. In Settings → Delete clubs account you can delete everything: you leave all clubs, clubs you run are deleted, your name and account are deleted, and Floe's access to your Apple Account is revoked. You can also stop Floe's access in your Apple Account settings (Sign in with Apple).

Purchases

Floe Premium is sold through Apple's App Store. Apple handles payment; we never see your payment details. The app checks with Apple whether your subscription or purchase is active, on iPhone and on Apple Watch. You can manage or cancel your subscription in Settings → your name → Subscriptions.

Notifications

Reminders (such as the best window to go in) and water alerts are scheduled on your device; no data leaves it for these.

Floe can also receive occasional push notifications from us — season news, challenges and offers — through Firebase Cloud Messaging. For this the app registers a push token for your device and joins two topics: all Floe users and your app language. To choose who gets a message, Firebase Analytics keeps a few settings with your app instance: whether you have Premium or a trial, whether notifications are allowed, whether you set a water alert and the app language. Notifications only appear if you allow them, and you can turn them off at any time in iOS Settings → Notifications → Floe.

Children

Floe is not directed to children under 13 and we do not knowingly collect personal data from children. Cold-water exposure carries real health risks; children should only dip with an adult.

Your choices and rights

• Location, Health, notifications and tracking can be turned off at any time in iOS Settings.
• You can export or delete your journal in the app. Deleting the app removes the data stored by Floe on that device (Apple Health keeps the workouts it stored until you delete them there).
• Depending on where you live (for example under the GDPR) you have the right to access, correct or delete personal data and to object to processing. Most of your data never reaches us: club data can be deleted in the app at any time, and for anything held by the Sea Temperature service (such as your random identifier) write to us and we will help.

Changes

If Floe starts using data in a new way, this policy will be updated before that version is released, and the date at the top will change.

Contact

Questions about privacy: gorokhov.gw@gmail.com