Legal
Privacy policy
7SeasAI is a dive logbook. To keep a logbook for you, we have to store it — this page says exactly what we store, why, who can see it, and how you delete it. We do not sell data, we show no advertising, and the app contains no analytics or tracking software.
1. Who is responsible
Adrien Luthi, Switzerland — the developer and publisher of 7SeasAI, acting as the
controller of your personal data.
Contact for anything about your data: support@7seasai.com.
This policy follows the Swiss Federal Act on Data Protection (FADP). If you live in the European Economic Area, the General Data Protection Regulation (GDPR) also applies, and the legal bases mentioned below refer to it.
2. What we collect
Everything below is information you enter in the app, or that the app needs to work. Fields marked optional can be left empty.
2.1 Account
- Email address and password (the password is stored only as a cryptographic hash by our authentication provider — we never see it).
- Username, first name and last name (shown to other divers), date of birth (optional), profile photo (optional).
- Your profile visibility setting (public or private) and the number of dives you had logged before using the app (optional).
2.2 Diver profile
- Certifications: organisation, level, expiry date, and — optional — a photo or PDF of the certification card.
- Date of your last diving medical check-up (optional). This is health-related information; you provide it only if you want the app to remind you when it expires.
- Emergency contact: a name and a phone number (optional). This is information about another person — by entering it you confirm that you may share it with us for this purpose. It is shown only to you.
2.3 Your dives
- Date and time, dive site (including the site's GPS coordinates), maximum depth, duration, water temperature, visibility, weather, dive type, dive mode, entry type, equipment (tank, gas mix, suit, weights), notes and dive profile text.
- Species you tag on a dive.
- Photos you attach to a dive (at most five per dive), stored as files on our servers.
- Buddies you tag on a dive, chosen among your accepted friends.
- The visibility of each dive: private (you and your accepted friends) or public (all users of the app).
2.4 Social features
- Friend requests and friendships, likes, comments and replies, likes on comments.
- Users you block, and reports you file about content or users (reason and optional details).
2.5 Dive sites you create
When you add a dive site that is missing from the map, its name, coordinates, water body, country, type, depth, difficulty and description become part of the shared site database visible to all users. Internally the site keeps a reference to your account as its creator; that reference is removed if you delete your account, and the site stays.
2.6 Location
With your permission, the app reads your device's location to centre the map on you and to let you create a dive site at the place where you are. Your location is not stored and not sent to our servers. The only exception is the one you choose: if you create a site “at my position”, the site's coordinates are saved as part of that site. You can withdraw the permission at any time in your phone's settings; the map and the app keep working without it.
2.7 Technical data
- The app keeps a local copy of your data on your phone so that it works offline; it is protected by your device's own security.
- A session token that keeps you signed in.
- Bug reports you choose to send from the app: your message, the app version and the platform (Android or iOS).
- No advertising identifier, no analytics, no crash-reporting software, no tracking of any kind.
3. Why, and on which legal basis
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Provide the logbook and sync it between your devices | Account, dives, photos, species, equipment | Performance of the contract (our Terms of use) |
| Social features you use: friends, feed, likes, comments, buddy tags | Account, dives you share, social data | Performance of the contract |
| Medical check-up reminder | Medical check-up date | Your explicit consent (the field is optional; clear it to withdraw) |
| Emergency contact shown on your profile, for you | Contact name and phone | Your consent (optional field) |
| Centre the map on you, create a site where you are | Device location, not stored | Your consent (phone permission) |
| Keep the service safe: blocking, reports, moderation, abuse prevention | Blocks, reports, account data | Legitimate interest, and legal obligations applying to app stores |
| Answer your support requests and bug reports | Email, bug reports | Legitimate interest |
| Shared dive-site database | Sites you create | Performance of the contract; legitimate interest of all divers in a complete map |
We make no automated decisions about you and do no profiling.
4. Who can see what
4.1 Other divers
- Any user can find your profile by name or username in order to send a friend request, and sees your name, username and profile photo.
- If your profile is public, any user can open it and see your dive count, your highest certification per organisation and your dives marked public. If it is private, only your accepted friends see your profile and your dives.
- Your accepted friends see your dives (with photos, notes, conditions and species), can like and comment on them, and see dives on which you are tagged as a buddy.
- A dive marked public is visible to all users, with its photos, notes and comments.
- Your likes and comments are visible to whoever can see the dive they relate to, with your name.
- A buddy tag concerns you: it appears on your profile and on the dive, and you can remove it yourself at any time.
- Users you block no longer see you or your content, and cannot contact you. They are not told.
- Your medical check-up date, emergency contact, date of birth and email address are never shown to other users.
4.2 Service providers (processors)
We use a small number of providers that process data on our behalf, under contracts that bind them to use it only for our service:
- Supabase — database, authentication, file storage and server functions. Your data is stored in Supabase's data centre in Frankfurt, Germany (European Union). Supabase also delivers the emails the app sends you (sign-up confirmation code, password reset).
- Mapbox — the map in the app is drawn by Mapbox's software. When you look at the map, your phone requests map tiles from Mapbox servers, which receive your IP address, the area of the map you are viewing and basic device information. Mapbox's software also collects anonymised usage telemetry by default; you can switch it off from the information (ⓘ) button on the map. See Mapbox's privacy policy.
- Google Play — distributes the app. Google processes your store account and downloads under its own policy; we only receive aggregated, anonymous statistics.
- Infomaniak (Switzerland) — hosts this website. Like any web host it keeps standard server logs (IP address, pages requested, browser type) for a limited time for security purposes. This website sets no cookies, loads nothing from third parties and runs no analytics.
We do not sell, rent or share your personal data with anyone else. We would disclose it only if a law or a court required us to.
4.3 Where your data is stored
Your account and logbook data are stored in the European Union (Frankfurt). Switzerland and the EU recognise each other's data-protection law as adequate, so no additional transfer safeguard is needed between them. Mapbox and Google are US companies; their processing of the limited technical data described above is covered by their own safeguards (standard contractual clauses and the EU–US Data Privacy Framework, as published in their policies).
5. How long we keep it
- Your data is kept for as long as your account exists.
- When you delete your account — from the app or by email, see Delete your account — your dives, photos, species, certifications, profile details, likes, comments, buddy tags, blocks, bug reports and the reports you filed are deleted immediately, and your sign-in account is removed.
- Three things remain: an empty, anonymised placeholder of your profile and friendships (a deletion date, nothing else) so that your friends' phones remove your data at their next sync; dive sites you created, with the reference to you removed; and reports other users filed about your content, for moderation traceability.
- Copies may persist for a limited period in our hosting provider's backups before they are overwritten.
- The local copy on your phone is removed when you uninstall the app.
6. Your rights
You can, at any time:
- See and correct your data — directly in the app (profile, dives, settings).
- Delete your account and data — in the app, or by email (see Delete your account).
- Receive a copy of your logbook in a machine-readable format — email us with the subject “Export my data”.
- Withdraw consent — clear the optional fields (medical date, emergency contact), or revoke the location permission in your phone's settings. This does not affect what happened before.
- Object to a processing based on our legitimate interest, or ask us to restrict it.
- Complain to a supervisory authority: in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC); in the EEA, the authority of the country where you live.
Write to support@7seasai.com. We answer within 30 days.
7. Security
Data travels encrypted (TLS) between your phone and our servers. On the server, access rules enforce that each user — and each friend — only reads what this policy says they may see; passwords are stored as hashes; photos and certification cards live in private storage reachable only through short-lived signed links. No system is perfectly secure: keep your device locked and your password to yourself, and tell us at once if you suspect a problem.
8. Age
7SeasAI is for people aged 16 or over. We do not knowingly collect data from anyone younger; if you believe a child has created an account, contact us and we will delete it.
9. Changes
When this policy changes, we update the version and date at the top of this page. If a change affects what we collect or who can see it, we also tell you in the app before it applies.