Privacy Policy

1. Who we are

The Dive App is operated by POSEIDON DYNAMIC SOLUTIONS LLC, a Florida limited liability company ("we," "us"), 7901 4th Street N, Suite 300, St. Petersburg, FL 33702, USA. We are responsible for the personal information described in this policy. Contact: hello@the-dive-app.com. Please read this policy together with our Terms of Use.

2. Information we collect

Information you give us:

• Account: email address, display name, password (stored only in hashed form by our authentication provider), avatar, preferred language, your confirmation that you are 18 or older (we record the time you confirmed; we do not collect your date of birth), and the version and time you accepted the Terms of Use.
• Certification records: photos or PDFs of certification cards and any details you type. These may show your name, photo, date of birth and certification number. They are self-reported and stored privately for your own reference.
• Dive log: dives you enter, or import from a dive computer or log file. The log stores the site name; it does not record a GPS track of your dive.
• Social features: dive plans and requests, dive groups, direct messages, comments, ratings, site notes, site suggestions and photos you post.
• Feedback you send us, including an optional photo and email address.

Information collected automatically or from others:

• Location, only with your permission: if you turn on Nearby Discovery, a one-time GPS fix is stored as your approximate home location. Dive-computer sync may take a one-time fix. We never track your location in the background. While you use the map, your device may use its location locally to center the map.
• Subscription status from Apple, Google and RevenueCat (active or expired, plan, transaction identifiers). We never receive your payment card details.
• Safety acknowledgments: which site warnings and feature notices you accepted, with the time, app version and platform.
• Technical data: device type, operating system, app version, IP address (in server and security logs), error information and push-notification tokens.

3. How we use information

• To provide the App: your account, dive log, certification storage, maps, conditions, messages, groups and subscription. (Legal basis where GDPR applies: performance of our contract with you.)
• Nearby Discovery and distances between opted-in divers. (Your consent; you can turn it off at any time.)
• AI features you choose to use: fish identification, note polishing, translation and AI search. (Performance of contract, at your request.)
• Safety and integrity: automatically screening uploaded photos for inappropriate content, checking that an uploaded file looks like a certification card, CAPTCHA at sign-up, blocking and reporting, and preventing fraud and abuse. (Our legitimate interest in a safe service.) A flagged item may be reviewed by a person. These checks do not verify your training and do not make decisions with legal or similarly significant effects on you.
• Recording your acceptance of the Terms and of safety warnings. (Legitimate interest and legal obligations.)
• Service emails (for example, account messages, Founder-status reminders and annual-subscription renewal reminders) and push notifications you allow. (Performance of contract and legal obligations; push notifications by your device permission.)
• Complying with the law and enforcing our Terms.

We do not sell your personal information, and we do not share it for targeted advertising. We do not sell precise location or any other sensitive information.

4. Who we share information with

We share personal information only with service providers that process it for us, with other users as you choose, and where required by law. Our service providers are:

• Supabase (USA): database, authentication, file storage and server functions. All App data.
• RevenueCat (USA): subscription management. An anonymous app user ID and purchase status.
• Apple and Google: app distribution, payments and push notifications, and the maps in the mobile App (Apple Maps on iPhone, Google Maps on Android). Map requests reveal your IP address and the map area you view.
• Esri / ArcGIS (USA): map tiles on our website. IP address and the map area you view.
• Google (Gemini API): fish identification, photo screening, note polishing, translation and AI search. Only the photo, text or query you submit for that feature.
• Anthropic (USA): checking whether an uploaded file looks like a certification card. The uploaded image or PDF.
• Resend (USA): sending service emails. Your email address and the message.
• Expo (USA): delivering push notifications. Your push token and the notification.
• Cloudflare (USA): CAPTCHA at sign-up. Browser and device signals and IP address.
• Netlify (USA): website hosting. IP address and request logs.

Other users see what you choose to make visible: your display name, avatar, public posts, comments, site notes and photos, dive plans and group membership. Nearby Discovery shows other opted-in users only your distance, rounded to the nearest 5 miles, never your coordinates. Exact meeting details of a dive plan are shown only to its host and approved participants.

Public data sources, such as NOAA and Open-Meteo, are queried by our servers using a dive site's coordinates. We do not send them your personal information.

We may disclose information if required by law, or to protect the rights, safety or property of our users, the public or us. If our business is sold or merged, information may transfer to the new owner under this policy.

5. Location data

Your precise home coordinates, if collected, are never shown to other users by any App feature. Only a distance rounded to the nearest 5 miles is shared, only after you opt in, and never with users you have blocked. Database access controls restrict reading another user's location to a single server function that enforces this rounding. We treat precise location as sensitive information: we collect it only with your permission, use it only for the features described, and never sell it.

6. How long we keep information; deleting your account

We keep your information while your account is active. You can delete individual items (certifications, photos, dive log entries, messages you sent) at any time in the App.

You can delete your account at any time: in the App under Settings → Delete Account, or on the website's Account page. This permanently deletes your login, profile, avatar, certification files, dive logs, photos, comments, reviews, messages, group memberships and your other personal data. Dive sites you added to the shared site database stay in the database without your name.

We may keep limited records where the law requires it or where needed to establish or defend legal claims, and server logs and backups are deleted on our providers' normal schedules.

7. Security

We use reasonable safeguards, including encryption in transit, database access controls, private storage for certification files and limited staff access. No system is completely secure. If a security breach affects your personal information, we will notify you and the authorities as the law requires (for Florida residents, within 30 days).

8. International transfers

We are based in the United States, and our providers mainly process data in the United States. If you use the App from another country, including the European Economic Area, the United Kingdom, Switzerland, Brazil, Japan or Indonesia, your information is transferred to the United States. We rely on our providers' standard contractual clauses or their certification under the EU–U.S. Data Privacy Framework, where available, to protect these transfers.

9. Your rights

Depending on where you live, you may have the right to access, correct or delete your information, receive a copy in a portable format, object to or restrict certain processing, withdraw consent (for example, by turning off Nearby Discovery), and complain to your data-protection authority. Many of these you can do directly in the App. For anything else, email hello@the-dive-app.com. We respond within 30 days, may need to verify your identity, do not charge for requests, and will not treat you differently for using your rights.

10. Children

The App is only for people 18 and older. We do not knowingly collect information from anyone under 18. If we learn that we have, we delete it and close the account.

11. Changes to this policy

If we change this policy, we will post the new version here with a new version number and date, and tell you in the App before any material change takes effect.

12. Contact

POSEIDON DYNAMIC SOLUTIONS LLC, 7901 4th Street N, Suite 300, St. Petersburg, FL 33702, USA. Email: hello@the-dive-app.com.