Privacy policy

Privacy policy

This policy explains how Scubbl collects, uses, and protects your personal data when you use our web and mobile services for diving enthusiasts. It is based on GDPR and transparency principles: we collect only what is necessary for platform operation and account security.

Collected data

• Account data: name, email, encrypted password, language, preferences.

• Profile and shared content: bio, interests, photos and videos you upload, comments and messages.

• Technical and usage data: IP addresses, device identifiers, connection logs, performance metrics, visited pages.

• Location data: GPS coordinates or approximate zones when enabling dive-spot and weather alert features.

• Payment data: payment tokens and subscription information managed via Stripe (no card number stored by Scubbl).

Purposes and legal bases

• Provide the service, ensure account access, and personalize experience.

• Ensure diver safety and content moderation (legitimate interest).

• Manage subscriptions and payments (contract performance).

• Measure audience and improve the app (consent for advertising tracking).

• Comply with legal obligations (billing, fraud prevention).

Partners and storage

Data is hosted on Supabase and payments are processed by Stripe. In-app advertising may be provided through Google AdMob. Anonymized statistics may be collected through analytics tooling. Each processor is governed by GDPR-compliant data protection clauses.

Photos, videos, and location

Photos and videos uploaded to Scubbl remain under your control; you can delete them at any time from your profile. Location data is used only for spot and alert features and can be disabled in app or device settings.

Cookies, trackers, and consent

The website uses essential cookies for login and audience/advertising cookies subject to your consent. You can manage choices through the consent banner and your browser. Refusing non-essential cookies does not block the service but may limit personalization.

Retention periods

Data is retained while your account is active and for durations required to comply with legal obligations. Technical logs are stored for a limited security period. Payment receipts are retained according to accounting requirements.

Your rights

You may access, correct, delete, or restrict processing of your data. You may also object to processing based on legitimate interest or withdraw consent for tracking. To exercise your rights or ask questions, write to privacy@scubbl.com. You may also file a complaint with CNIL.

Security

We apply in-transit encryption, strict access controls, and regular backups. Passwords are stored hashed. In case of a high-risk data breach, we will notify you in accordance with GDPR.

Update: this policy may evolve. By continuing to use Scubbl after changes, you accept the current version.