Privacy Policy
The short version. Your dive log lives on your device. If you create an account and subscribe to Pro, a copy is stored on our servers so it can be backed up and synced. There are no ads and no tracking, and we never sell your data. You can export your log or delete your account at any time, in the app.
Who we are
DiveDiveDive ("we", "us") makes the DiveDiveDive app for iPhone and iPad. You can reach us at app@divedivedive.io.
What stays on your device
You can use the app without an account. Everything you log (dives, depth profiles, tanks, trips, dive sites, buddies, notes) is stored on your device. Nothing is sent to us unless you create an account and have Pro, apart from dives you log a linked buddy on and your profile photo while you're linked with a Pro diver (see Linking with buddies).
What we collect when you create an account
- Your email address and your name (accounts made with early versions of the app also have a username).
- Your password. It is handled by our sign-in provider and stored in hashed form; we cannot read it.
- If you forget your password, we email a one-time code to your address. To limit guessing, we keep the address and the time of each code requested or wrong code tried for a day.
- If you use Sign in with Apple: Apple shares your name (the first time only) and an email address, which can be a private address that forwards to yours. We keep Apple's identifier for your account to sign you in. There is no password. When you delete your account, we also tell Apple to end the sign-in.
What we store when you have Pro and sync
To back up and sync your log, we store a copy of it on our servers:
- Your dives: date, time, depth, duration, depth profile, temperatures, tank and gas details, conditions, weather, tide, notes.
- Your trips, dive sites (names and coordinates) and buddies (the names you enter).
- Your profile settings: units, your home town and its coordinates, and your certifications.
- Your profile photo, if you add one.
Only you can read this data, apart from what you share with buddies you link with (below), and the names and positions of your dive sites, which help build the shared site catalog without your name (below). Please only enter names of buddies that you are comfortable recording.
The dive site catalog
The app can search a shared catalog of dive sites, to show sites on the map and fill in where a site is. The catalog is built from published lists of dive sites and from the dive sites Pro members sync: each site's name, location and coordinates. When several divers log the same place, the catalog uses what most of them agree on.
- The catalog does not record who logged a site. No one can see your own sites, your dives, or that you have dived somewhere.
- Your own sites stay exactly as you logged them, whatever the catalog says.
- If you delete your account, your sites stop counting, and a site only you logged leaves the catalog.
- A site only you have logged shows only to you. Other divers see it once another diver logs the same place, or if a published list has it, and never with a name our word filter blocks.
- Searching the catalog needs an account. It sends what you search for (a site name, or the part of the map you are looking at) to our servers.
- If you report a catalog site, we keep the report with your account (the site, the reason you chose and the name you saw) so we can review it and stop showing you that site. Reports are deleted with your account.
Linking with buddies
You can link your account with another diver's by scanning their code in the app, or entering it. Your code stays the same until you reset it (Buddies, then Link a Buddy, then Reset Code), which stops the old one working. Linking is optional and needs an account on both sides.
- When you link, each of you sees the other's name, and we store which accounts are linked.
- If you add a profile photo, linked buddies see it when either of you has Pro. Without Pro, your photo is sent to our servers only while you're linked with someone who has Pro, so they can see it, and it is removed when you no longer are.
- When you log a linked buddy on a dive and either of you has Pro, that buddy can see that dive: its date and time, site, depth, duration, depth profile, tank pressures, temperatures, water type, conditions, weather and tide.
- Without Pro, the dives you log a linked buddy on (and only those) are sent to our servers so your buddy can see them. They are kept only for that: they are not a backup of your log and are not sent back to you. They are removed when you take the buddy off the dive, delete the dive, or unlink.
- They don't see your notes unless you turn on sharing notes for that dive (it is off until you do). They never see the name you gave the dive, who else was on it, or any of your other dives.
- Either of you can unlink at any time (Buddies, then the buddy, then Unlink). Sharing stops at once.
Subscriptions and payment
Purchases are handled entirely by Apple. We never see your card details or Apple ID. We do receive and store the status of your subscription from Apple: which plan it is, when it ends, whether it renews, and Apple's transaction identifier. We use this only to know whether Pro is active.
Photos and videos
If you use the "Find Photos" feature and allow access, the app reads the date and time your photos and videos were taken to find the ones from a dive. The pictures stay in your Photos library. The app keeps only identifiers that point to the ones you choose. They are stored on your device and are not uploaded to us.
Searching Photos from the app (for example for "scuba") runs in Apple's own photo picker; the app sees only the photos you pick there. When you share a photo or video from the app, it makes a temporary copy on your device for the app you choose to share it with.
Location, weather, tides, camera and Bluetooth
- Location (only while you are using the app, and only if you allow it) is used to show dive sites near you. We do not track your location in the background.
- Weather (Pro): to fill in the weather for a dive, the app sends the dive site's coordinates and the dive's date and time to Apple's weather service (WeatherKit). Nothing that identifies you is sent with it. The result is saved with the dive.
- Tides (Pro): the app works out the nearest tide station to a dive site on your device, from NOAA's public list of US tide stations. To fill in the tide for a dive, or to show the tide right now on a site's page, it asks NOAA for that station's predictions around the dive's date and time (or around now). The site's coordinates are not sent, and nothing that identifies you is sent with it. The result is saved with the dive.
- Maps: the map pictures and finding a site's position from its name use Apple Maps. When you import a dive whose file has GPS but no site name (a Garmin's, for example), the app looks the position up: among the shared dive sites if you are signed in, and otherwise asks Apple Maps for the nearest town to name the site. Nothing that identifies you is sent with it.
- Camera (only if you allow it) is used to scan a buddy's code. Nothing is recorded or sent to us.
- Bluetooth is used to download dives from your dive computer to your device.
Who else handles your data
- Supabase hosts our database and sign-in service. Your account and synced log are stored with them.
- Apple provides the App Store, subscriptions and, if you use it, iCloud Photos.
- Resend delivers the emails we send you, such as a password reset code. They receive your email address and the message.
- NOAA (Pro) provides tide and current predictions. They receive a station and a time, as described above, and keep standard technical logs of their own.
We do not use advertising or analytics services, and we do not sell or share your data for advertising. Our hosting providers keep standard technical logs (such as IP address and request time) for security and troubleshooting. We may disclose information if the law requires it.
Keeping and deleting your data
- Delete your account in the app: Settings, then your name at the top, then Delete Account. This removes your login and all of the data we store for you. Your log stays on your device until you delete the app or erase it.
- Backups: our providers may keep encrypted backups for a limited time after deletion.
- If you cannot reach the app, email us from the address on your account and we will delete it.
Your choices and rights
You can export your whole log at any time, free (Settings, then your name at the top, then Export Dive Log). You can edit anything you have entered. If you live somewhere with data protection rights (for example the EU, UK or California), you can ask us for a copy of your data, to correct it, or to delete it, by emailing us.
Security
Data travels between the app and our servers over encrypted connections, and the database allows each account to read only its own data and the dives linked buddies have shared with it.
Children
DiveDiveDive is not directed at children under 13, and we do not knowingly collect their personal information.
Changes
If we change this policy, we will update the date above and, for significant changes, tell you in the app.