YAULABS LIMITED ("we", "our", "us") operates the Divé Go mobile and web application ("Divé Go", the "Service"). This policy explains what information we collect, how we use it, and your rights regarding your personal data.
1. Information We Collect
- Account Data: Email address, display name, avatar, certification status, and optional profile bio provided during registration or via third-party authentication providers (such as Google Sign-In or Apple Sign-In).
- Precise Location & Dive Activity: Precise GPS coordinates (latitude and longitude), dive site geographical names, water temperature, depth, duration, and dive log details you submit. Location access is requested to automatically tag dive spots, map species distribution, and calculate conditions.
- Media & Camera Data: Underwater photographs you upload or capture through the app for AI species recognition and dive logging. Access to camera and photo library is requested strictly upon your consent.
- Purchases & Financial Data: When you subscribe to Divé Go Pro, payment transactions are handled directly by Apple App Store or Google Play Store. We, alongside our subscription management partner (RevenueCat), process transaction receipts, subscription status, and expiration dates. We do not collect or store your payment card numbers.
- Advertising & Device Identifiers: For free tier users, rewarded video advertisements are served via Google AdMob. The app may process advertising identifiers (such as Google Advertising ID or IDFA if permitted) and ad interaction data to deliver ads and measure ad performance.
- Push Notification Data: If you enable notifications, we collect your device's push notification token, platform (iOS or Android) and language setting, linked to your account. We use it only to deliver notifications such as submission review results, replies and likes, and announcements you have opted in to.
- Diagnostics & Crash Reports: If the app crashes or fails to register for notifications, we receive technical information such as the error message, device model, operating system version and app state through Firebase Crashlytics. We do not include your name, email address or notification token in these reports.
2. How We Use Information & AI Processing
- To operate core functions (dive logs, citizen science species atlas, community hub).
- AI Species Identification: Photos submitted for identification are securely transmitted to cloud AI infrastructure (Google Cloud / Vertex AI) to identify biological species. Uploaded images are analyzed in an anonymized manner and are not used for personal profiling or commercial behavioral tracking.
- Pro Subscription Management: Validating subscription entitlement, restoring purchases across devices, and maintaining premium feature access via RevenueCat.
- Citizen Science & Marine Conservation: De-identified environmental and species observation data contribute to ocean big data to assist diver safety and international research.
3. Sharing & Third-Party Service Providers
We do not sell your personal data. We engage trusted third-party cloud infrastructure providers strictly to operate our platform:
- Database & Authentication: Supabase (PostgreSQL hosting with Row-Level Security).
- AI Computing & Storage: Google Cloud / Vertex AI and Cloudflare.
- In-App Purchases: RevenueCat, Apple In-App Purchase, and Google Play Billing.
- Rewarded Advertising: Google AdMob (Google Mobile Ads SDK).
- Analytics: Google Analytics for Firebase — We use Google Analytics for Firebase to understand how users interact with our app (e.g. feature usage, app performance), so we can improve the product. This may collect app interaction data, device identifiers, and diagnostic data, which is processed by Google in accordance with the Google Analytics for Firebase Terms and Google Privacy Policy.
- Push Notifications: Expo Push Notification Service, Apple Push Notification service (APNs) and Firebase Cloud Messaging (FCM). Your push token and the notification text are passed to these services solely to deliver notifications to your device.
- Crash Reporting: Firebase Crashlytics (Google).
4. User-Generated Content & Copyright Protection
Photos and observations you publicly contribute to the Atlas or Community Hub remain your intellectual property. By uploading, you grant us a non-exclusive license to display and distribute the media within the Service. If you believe any content on Divé Go infringes your copyright, contact our copyright agent at admin@divego.app for prompt investigation and removal under DMCA / applicable laws.
5. Data Retention & Account Deletion
You have full control over your data and can permanently delete your account at any time:
- In-App Deletion: Navigate to Settings → Delete Account to immediately and permanently wipe your account and records.
- Web Request Portal: If you cannot access the app, you may request permanent deletion via our dedicated web portal at https://divego.app/delete-account or by emailing admin@divego.app. Data will be purged within 7 business days.
You can turn off notifications at any time in the app (Settings → Notifications) or in your device settings. Your push token is deleted when you log out or delete your account.
6. Security
We enforce Row-Level Security (RLS) on database tables and encrypt all transmissions using HTTPS/TLS. However, no electronic transmission over the Internet can be guaranteed 100% secure.
7. Children's Privacy
Divé Go is not directed to individuals under the age of 13. We do not knowingly collect personal data from children under 13.
8. Your Rights & Contact Us
Depending on your location (such as under GDPR, CCPA, or Hong Kong PDPO), you have rights to access, correct, export, or erase your data. Contact us at admin@divego.app.