Privacy Policy

1. Introduction

SpearLog (“we”, “our” or “us”) is a mobile-first logbook and community platform for spearfishing and freediving. This Privacy Policy explains how we collect, use, store, share and protect your personal data when you use the SpearLog app or website.

By using SpearLog, you agree to the practices described in this policy. If you do not agree, please do not use the service.

2. Data we collect

We collect the minimum information needed to provide the service:

• Account information. When you create an account we collect your email address, authentication provider (Google, Apple or email/password) and, if you provide it, your display name.
• Dive logs and catch records. You may log dives, catches, species, measurements, weights, quantities, duration, depth, weather, tide, visibility, buddy names and comments.
• Photos. You may upload photos of catches, dives or your profile. These are stored securely and linked to your account.
• Location data. Dives, catches and spots can include location coordinates. You choose the privacy level for each location: exact, approximate (general area) or hidden. Exact coordinates are only shared publicly if you explicitly select “Exact location”. Approximate locations are rounded to a wider area before being shown to the community. Hidden locations are never shared.
• Profile information. Your profile may include a display name, bio, home spot, avatar, “spearo since” year and equipment preferences.
• Instructor profiles. If you apply to be listed as an instructor, we collect your instructor profile, pricing, availability, location, verification status and any notes you submit.
• Community content. Public posts, comments, likes, group chat messages and other interactions you create in the community areas of the app.
• Analytics data. We collect product analytics such as feature usage, screen views, app version, platform (iOS, Android or web) and session events. These are stored in our own database and do not include exact coordinates, private messages, notes or personal identifiers beyond an anonymised user ID.
• Crash and diagnostic information. If the app encounters an error, we may collect the error message, stack trace, app version, platform, device description and the current screen. This helps us fix bugs and improve stability.

3. How we use your data

We use your data to:

• Provide your personal dive log and statistics.
• Show public content you choose to share on the community map and feed.
• Enable messaging, comments, likes and community chat.
• Display instructor listings and allow users to contact instructors.
• Improve the app through product analytics and crash reporting.
• Keep the service secure and enforce our policies.

4. Location privacy choices

SpearLog gives you clear location controls for every dive, catch and spot:

• Exact location — shows your precise pin and full location label publicly.
• General area — shows a wider, rounded region (approximately 5 km) rather than your exact coordinates. This is the default for community sharing.
• Hidden — no location or map marker is shown publicly. Your own records still keep the location privately for your personal log.

You can change the location privacy setting for any of your dives or catches at any time.

5. Sharing and disclosure

We do not sell your personal data. We only share information in the following limited circumstances:

• Content you choose to make public. When you mark a dive, catch, spot or profile as public, it is visible to other SpearLog users.
• Service providers. We use third-party providers (listed below) for hosting, authentication, maps and analytics. They only process data on our behalf and are contractually bound to protect it.
• Legal requirements. We may disclose data if required by law, court order or to protect the rights, safety or property of our users or the public.

6. Third-party services

SpearLog uses the following third-party services:

• Lovable Cloud / Supabase — hosts our database, authentication, file storage and backend services. Data is stored on secure cloud infrastructure.
• Google — provides Google Sign-In. Google shares your name, email address and profile identifier with us when you choose to sign in with Google.
• Apple — provides Sign in with Apple. Apple shares your name and email address (or a private relay email if you choose to hide it) with us when you sign in with Apple.
• OpenStreetMap / Nominatim — provides map tiles and location search (geocoding) when you look up dive spots or locations in the app.
• Google Maps — we may provide a link to open a spot’s coordinates in Google Maps. Google Maps is only invoked when you actively tap that link.

7. Data storage and security

Your data is stored in Lovable Cloud databases hosted on enterprise-grade cloud infrastructure. We use industry-standard measures including encrypted connections (HTTPS/TLS), row-level security policies, authenticated access controls and encrypted storage at rest for sensitive data.

While we take reasonable precautions, no internet service is completely secure. Please keep your account credentials safe and use a strong password.

8. Data retention

We keep your personal data for as long as your account is active or as needed to provide the service. If you delete your account, we delete or anonymise your personal data within a reasonable time, except where we are required to keep it for legal, security or fraud-prevention purposes.

Analytics and crash logs may be retained for up to 24 months to help us improve the app and diagnose issues.

9. Your rights

Depending on your location, you may have the right to:

• Access, update or correct your personal data.
• Delete your account and associated data.
• Export your dive logs and catches.
• Object to or restrict certain processing.
• Withdraw consent where processing is based on consent.

10. Account deletion

You can request deletion of your account and personal data at any time by emailing us at the address below. We will delete your profile, personal dive logs, catches, photos, comments, likes, spots, messages and other associated personal data within 30 days, unless a legal obligation requires us to retain specific information.

Full details, including what is retained and for how long, are on our Account Deletion page.

11. Children

SpearLog is not intended for children under the age of 13 (or the minimum age in your jurisdiction). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. We encourage you to review the policy periodically.

13. Contact us

If you have questions, concerns or requests about your privacy or personal data, please contact us at:

support@spearlog.app