← Back to home

Privacy Policy

Last updated: 2026-06-19

This Privacy Policy explains what personal data Scuba Diving World ("the app") collects, why, and the rights you have under the EU General Data Protection Regulation (GDPR). The data controller is Marco Modena. You can reach us at legal@scubadivingworld.com.

Data we collect

Depending on how you use the app, we may process:

  • Account data: email address, first and last name (via Supabase Auth) when you register.
  • Profile data: license number, dive school, emergency contact and avatar image, if you choose to enter them.
  • Dive logbook data: dates, dive sites and coordinates, depths, durations, gas use, buddies, notes and photos you add.
  • Technical/preference data stored locally on your device: theme, language, consent choice and (in local-only mode) your dives.

Why we process it (legal bases)

  • Performance of a contract: to provide the logbook, planner, map and profile features you sign up for.
  • Consent: for any optional, non-essential processing (e.g. analytics, if introduced); you can withdraw it at any time.
  • Legitimate interest: keeping the service secure and functioning.

Where your data is stored (processors)

When you use an account, your data is stored and processed by the following service providers acting as processors on our behalf:

  • Supabase — authentication, database and file storage for your account, profile, dives and photos.
  • Netlify — hosting and delivery of the application.
  • OpenStreetMap Foundation — map tiles and the Nominatim geocoding service, contacted only when you use the map or search a location; this transmits your IP address to OpenStreetMap.
  • Google Fonts — web fonts are currently served by Google, which transmits your IP address to Google. (We plan to self-host fonts to avoid this.)

Local-only mode

If the app runs without a configured backend, your dives and profile stay only in your browser (localStorage) and are not transmitted to us. Clearing your browser data deletes them.

Data retention

Account and dive data are kept until you delete them or delete your account. Locally stored data remains until you clear it from your device.

Your rights

Under the GDPR you have the right to:

  • Access, rectify or erase your data.
  • Export your data in a portable format (available from your Profile).
  • Delete your account and associated data (available from your Profile).
  • Restrict or object to processing, and withdraw consent at any time.
  • Lodge a complaint with your local data protection authority.

Children

The app is not intended for children under 16. If you believe a minor has provided us with personal data, contact us and we will remove it.

Contact

For any privacy request, email legal@scubadivingworld.com.