Privacy Policy
Scubra Dive Log is a logbook that works without an account. Most of what you put into it never leaves your phone. This page says exactly what happens to the rest.
You can use the app without giving us anything
You do not need an account to log dives. Install the app and start logging — your dives, photos and computer profiles are written to a database on the phone, and that database is the real logbook. We receive nothing until you sign in and turn on Cloud sync.
If you never sign in, this policy has almost nothing to describe. The rest of this page is about what changes when you do.
What stays on your phone
These never reach our servers, on any tier:
- Your location. Used to centre the map when you’re choosing a dive site. It is not stored and not transmitted.
- Your contacts. If you voice-log a buddy’s name, the app matches it against your contacts so it spells it correctly. The matching happens on the phone; contact data never leaves it.
- Diagnostic logs. The app keeps a rolling log you can read yourself under Settings. It is not sent anywhere — we run no crash-reporting service.
What we receive when you sign in
- Account: email address, display name, certification level, agency.
- Dive logs: every field you enter or import — depth, time, site, buddies, notes, gas mix, gear.
- Photos: only the ones you choose to upload.
- Sync metadata: a device identifier and per-field timestamps, so edits made on two devices can be merged in the right order.
AI features are off until you turn them on
Two features send data to a third party, and each has its own consent toggle in your account settings. Both are Cloud tier only, and both are off by default.
- Marine-life identification sends the photo you selected to Anthropic (Claude Vision) for a species suggestion.
- Voice logging sends the audio to Speechmatics for transcription. The audio is deleted within 24 hours of being transcribed.
Turning a feature off stops the transfer for everything after it. We never use AI to generate dive-planning, decompression or gradient-factor advice — that is a product line we don’t cross.
Device permissions
| Permission | What it’s for | Leaves the phone? |
|---|---|---|
| Bluetooth | Finding and downloading from your dive computer | No |
| Camera | Taking a photo for a dive | Only if you upload it |
| Photo library | Attaching existing photos to a dive | Only if you upload it |
| Microphone | Voice-logging a dive | Only with voice consent on |
| Location | Centring the map on a dive site | No |
| Contacts | Spelling buddies’ names correctly | No |
| Face ID | Confirming it’s you | No |
Analytics, and what we don’t do
We count aggregate usage with GoatCounter, self-hosted on our own EU infrastructure. A hit is an event name and nothing else — no identifier, no profile, nothing that points back at you.
We have never shipped a third-party tracking SDK, and we don’t intend to: no Google Analytics, no Facebook SDK, no advertising identifier, no ad networks. We do not sell your data and we do not share it for advertising.
Who else touches your data
Every service that stores or processes your information is listed below. Your data goes nowhere else.
| Service | Region | Purpose | Data | Status |
|---|---|---|---|---|
| Railway | eu-west (Amsterdam) | Application hosting (incl. self-hosted authentication service) | account, auth metadata, sync metadata | Active |
| Cloudflare R2 | EU Jurisdiction | Photo + export storage | photos, export bundles | Active |
| Anthropic (Claude Vision) | US (DPF + SCC) | Marine-life identification (Cloud-tier opt-in) | photos when consented | Active |
| Speechmatics | EU | Cloud voice transcription (Cloud-tier opt-in) | audio when consented | Active |
| Apple | global | iOS in-app purchase (StoreKit) | billing | Active |
| Resend | EU | Transactional email | email address | Active |
Where your data lives
In the EU. Application hosting and authentication run on Railway eu-west (Amsterdam). Photos and export bundles live in Cloudflare R2 EU Jurisdiction. Email goes through Resend EU. Voice transcription is Speechmatics EU. Apple handles iOS payments.
The one exception is marine-life identification: Anthropic (Claude Vision) is US-based, covered by the Data Privacy Framework plus Standard Contractual Clauses, and only ever receives a photo you consented to send.
We do not route data through US regions to keep the service up. If our EU region is unavailable, the cloud tier degrades to read-only instead.
How long we keep it
- Sync events: 30 days, then pruned.
- Account, billing and data-access records: 12 months minimum.
- Voice audio: deleted within 24 hours of transcription.
- Photos and dives: until you delete them, or delete your account.
Payments
iOS purchases are handled by Apple. We never see your card details. We receive a transaction identifier and whether your Cloud entitlement is active.
Your rights
You can ask for access, correction, a portable copy, deletion, restriction, or object to processing. Submit a request from the account screen in the app, or email us. You can also delete your account outright from within the app.
We respond within 30 days. At our current size the founder reads each request personally.
Lawful basis
We process your data to deliver the service you asked for (contract), on your explicit consent for the AI features, on legitimate interest for keeping the service secure and free of abuse, and on legal obligation for billing records.
Children
Scubra Dive Log is not directed at children under 16, and we don’t knowingly collect their data.
While the app is in public beta
The beta is distributed through Apple TestFlight. Apple passes us the email address you used to join, along with any feedback, screenshots and crash logs you choose to send. Apple’s own handling of that is covered by Apple’s privacy policy, not this one.
Breach notification
We commit to a 72-hour breach notification window under GDPR Article 33, and maintain an internal incident-response runbook covering detection, containment and notification.
Changes to this policy
If we change it, we update this page and the date below. Anything material gets announced in the app rather than quietly edited in.
Contact
Email privacy@scubra.com for anything on this page, including data-subject requests.
Read the full DPA · Read the data-permanence pledge
Last updated: 15 August 2026