DivePoint — Privacy Policy

App: DivePoint (com.xentracode.divepoint) · Provider: XentraCode Software & Consulting UG, Berlin, Germany · Contact: info@metaiosoft.com · Last updated: August 2026

1. What DivePoint is

DivePoint is a social app for scuba divers: a worldwide dive-spot map, a digital logbook with instructor signatures, buddy connections, certifications, and club offers. This policy explains what data we process, why, and what your rights are.

2. Data we collect and why

Data	Why we process it
Account — email address, password (stored as a hash)	Sign-in, account security, confirmation and password-reset emails
Profile — display name, handle, bio, photos/banner, role (diver/instructor/club), optional social handles, optional club contact details	Your public profile inside the app
Content you create — dive logs, dive plans, dive spots, photos, likes, offers, checklist	The core features of the app; spots and spot photos are visible to other signed-in users
Certifications — card photos or PDFs you upload	Stored privately; used for verification features. Never shown publicly
Dive-safety info (optional) — blood group, emergency contact, allergies, medication	Only if you enter it, and only shared with buddies you accepted while the visibility toggle is on. This is health-related data you provide voluntarily
Location — device position (while using the app)	Centering the map and creating dive spots near you. No background tracking, no location history stored
Buddy graph — follow requests and connections	The social features; buddies see what you choose to share

3. Advertising

DivePoint shows banner ads served by Unity LevelPlay (ironSource). The ad SDK may process your device's advertising ID and technical device data to deliver and measure ads, in line with Unity's privacy policy. You can reset or delete your advertising ID in Android settings.

4. Where your data lives

Supabase (database, authentication, file storage) — hosted in the EU (Ireland, eu-west-1)
Resend — sends account emails (confirmation, password reset) on our behalf
Map tiles are loaded from OpenFreeMap; place search uses OpenStreetMap Nominatim. These services receive standard technical request data (IP address) but no account data

We do not sell your data, and we do not share it with anyone beyond the processors listed above.

5. How long we keep it

Your data stays as long as your account exists. When you delete your account, everything listed in section 2 is deleted immediately and purged from backups within 30 days. Dive spots you created remain on the community map without your name (they are collective map data, like their OpenStreetMap counterparts).

6. Deleting your account or data

In the app: Profile → Settings → Delete account (immediate and permanent). Without the app, or for partial data deletion, see our deletion page or email info@metaiosoft.com.

7. Your rights (GDPR)

You have the right to access, correct, export, restrict, or delete your personal data, and to object to processing. Email info@metaiosoft.com — we respond within 30 days. You may also complain to your local data-protection authority.

8. Children

DivePoint is not directed at children under 16. If you believe a child has created an account, contact us and we will delete it.

9. Changes

If this policy changes materially, we will note it here and inform you in the app.