Privacy Policy
What Abyss Divelog knows about you — and what it doesn't.
TL;DR: Abyss collects no data about you. Everything you log stays on your iPhone. No servers, no account, no tracking.
What data does the app collect?
None. The app has no backend, no server, no account, and no analytics system. We do not collect, process, or share any personal data.
Where is my dive data stored?
Exclusively on your iPhone, in the app's private container (SwiftData / Core Data). You can export it any time (CSV / UDDF) or wipe it completely by deleting the app.
There is no automatic iCloud sync. If you have iCloud Backup enabled for your iPhone, an encrypted backup of the app's data may end up in your iCloud account — that is Apple's iCloud Backup mechanism, not something we operate or can see into.
Which external services does the app use?
Exactly one: Apple WeatherKit.
- Purpose: showing the current air temperature at your most recent dive spot
- Data sent: the coordinates of your most recent dive (latitude / longitude)
- Provider: Apple Inc.
- Privacy: WeatherKit is run by Apple as part of iOS. Requests are processed anonymously by Apple. Details: apple.com/legal/privacy/data/en/weather/
If you don't want this, you can revoke Location access in iOS under Settings → Privacy & Security — the weather field then simply falls back to "–" while the rest of the app keeps working.
Which iOS permissions does the app request?
- Location ("While Using") — only so you can see your current position on the Spots map and find nearby spots. Never transmitted.
- Camera — exclusively for scanning a QR code when importing a shared dive from a buddy. No photo leaves your device.
- Photo Library (add only) — if you want to save exported images (e.g. your QR code) to your photo library.
You can revoke any permission any time under Settings → Abyss Divelog.
Tracking, advertising, analytics
None. The app contains no tracking SDKs, no ad IDs, no Crashlytics, no Firebase, no Mixpanel, nothing of the kind.
Cookies
The app is not a web service and does not set cookies.
Legal basis for processing (GDPR Art. 6)
Since no personal data is processed on our servers, a legal basis under GDPR Art. 6 is not required. The dive data stored locally on your device remains fully under your own control.
When using Apple WeatherKit, Apple Inc. processes spot coordinates as a service operator under its own terms (there is no contractual relationship between Abyss and Apple in this regard — the request goes directly from your iPhone to Apple's servers).
Your rights (GDPR Art. 15–22)
You have the right at any time to:
- Access the data stored about you (Art. 15)
- Rectify inaccurate data (Art. 16)
- Erase ("right to be forgotten", Art. 17)
- Restrict processing (Art. 18)
- Data portability (Art. 20) — already covered by Abyss Divelog via CSV / UDDF export
- Object to processing (Art. 21)
- Lodge a complaint with a supervisory authority (Art. 77)
Because Abyss Divelog does not collect personal data, most of these rights are already de facto fulfilled. Your locally stored dives can be exported, edited or deleted by you at any time.
Children (GDPR Art. 8)
Abyss Divelog is not specifically targeted at children under 16. Since no personal data is collected, parental consent is not required. The app contains no communication or social features and is safe for younger users.
Contact
Questions, concerns, or subject access requests under GDPR Art. 15:
visit the support page or
open a GitHub issue with the privacy label.
Changes
If this policy changes, the new version will be published on this page. The date at the top reflects the current revision.