Política de privacidad

1. Who we are

DiveHub (“we”, “us”, “our”) provides a digital logbook and related services for scuba divers. This Privacy Policy explains how we collect, use, store and protect personal data when you use the DiveHub website, mobile and web applications, and related services (together, the “Services”).

If you have questions about this policy or your data, contact us at hello@dive-hub.net.

2. Data we collect

We only collect data needed to run and improve the Services, keep your account secure, and meet our legal obligations.

2.1 Account and profile

When you create an account we may process information such as your name, email address, username, password (stored using secure one-way hashing), and preferences you choose to save in the app (for example language or display settings).

2.2 Dive log and activity data

The core of DiveHub is your dive log. We process information you enter or upload, which may include dive site names, dates and times, depth and time information, equipment or buddy notes, certification details, photos or other content you add, and approximate or precise location you associate with a dive (for example map coordinates) when you provide it.

2.3 Technical and device data

When you use the Services, our servers and partners may automatically receive technical data such as IP address, device type, operating system, app version, general region derived from your IP, timestamps, and diagnostic information needed to deliver the Services, prevent abuse, and fix errors.

2.4 Cookies and similar technologies (website)

Our public website may use cookies or local storage for essential operation (for example session or language choice), for security, and to understand aggregate traffic. You can control cookies through your browser settings; some features may not work if you disable them.

3. How we use your data

We use personal data to: create and manage your account; provide, maintain and improve the Services; sync your logbook across devices; show statistics and features you have enabled; send service-related messages (for example security alerts or product updates, where appropriate); protect users and the platform from fraud and misuse; comply with the law; and, where you have consented or applicable law allows, to send marketing communications (you can opt out at any time).

4. Legal bases (where applicable)

If the UK GDPR, EU GDPR or similar laws apply, we rely on one or more of: performance of a contract with you; our legitimate interests (for example securing our systems, improving the product, and limited analytics that do not override your rights); compliance with a legal obligation; and consent, where we ask for it (for example optional marketing or non-essential cookies).

5. Sharing and processors

We do not sell your personal data. We share it only with:

Service providers that host, store or help us operate the Services (for example cloud infrastructure in regions we configure), and who process data on our instructions under contract;

Professional advisers where required (for example lawyers or auditors); and

Law enforcement, regulators or others if we are legally required, or if we need to protect the rights, safety or property of our users, DiveHub or the public.

We may also share data in connection with a merger, acquisition or sale of assets, under safeguards required by law.

5.1 Annoymous research and statistics

We may use your anonymous data for statistical and research purposes. We may use data, including water temperature, depth, and marine life observations, to improve information on diving and dive sites.

We may also share anonymised data with academic researchers for scientific research.

6. International transfers

Your data may be processed in your home country and in other countries where we or our providers operate. Where we transfer personal data from the UK, EEA or other regions with data transfer rules, we use appropriate safeguards (such as standard contractual clauses) where required.

7. Retention

We keep personal data only as long as needed for the purposes in this policy, including to provide the Services, resolve disputes, and meet legal, tax or accounting requirements. When you delete your account, we will delete or anonymize your personal data within a reasonable period, except where we must keep limited information to comply with law or enforce our terms.

8. Security

We use industry-standard technical and organizational measures to protect your data, including encryption in transit where appropriate, access controls, and secure development practices. No system is 100% secure; please use a strong, unique password and keep your account credentials private.

9. Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to restrict or object to certain processing, to withdraw consent where we rely on it, and to complain to a supervisory authority. You can manage much of this in the app or by contacting us at hello@dive-hub.net. We will respond in line with applicable law.

10. Children

The Services are not directed at children under 13 (or a higher age where local law requires parental consent for online services). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will take steps to delete it.

11. Third-party services

The Services may link to or integrate with third parties (for example app stores, mapping or sign-in providers). Their collection and use of data is governed by their own privacy policies, not this one. Please review their terms before you use them.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the new version on this page and, where the changes are material, we will take additional steps that the law may require (for example notifying you in the app or by email). The “Last updated” date below reflects the latest version.

13. Contact

Data protection questions, requests, or concerns: hello@dive-hub.net. You may also have the right to contact your local data protection authority.