Privacy Policy

1. Who we are

Apnea Core ("we", "our", "us") is a training tracking application for freedivers. For any privacy-related inquiries, contact us at hello@apneacore.app.

2. Data we collect

We collect and process the following personal data:

• Account data: email address, full name, username
• Profile data: bio, experience level, training environment, weekly training frequency, social links
• Photos and media: profile photo, images and videos attached to community and group posts
• Training data: session records, dive metrics (depth, duration, discipline), personal bests
• Performance metrics: comfort index, recovery efficiency, CO₂ tolerance score
• Certifications: organisation, level, and card number of diving certifications, medical certificate expiry date
• Social data: community posts, group messages, group memberships, connections with other users
• Push notification token: device identifier used to deliver push notifications (mobile app only, can be disabled in settings)

3. Legal basis (GDPR Art. 6)

• Contract performance: account creation, training tracking, and app features
• Legitimate interest: app security, abuse prevention, and service improvement
• Consent: optional features such as community posts and profile visibility

4. How we use your data

• Providing and personalising the training tracking service
• Generating training recommendations based on your metrics
• Enabling community and group features
• Sending transactional emails (account confirmation, password reset)
• Improving the application through aggregated, anonymised analytics (no cookies, no identifying data)

5. Data storage and processors

Your data is stored on Supabase (PostgreSQL database and authentication), hosted on infrastructure within the European Union. For aggregated, anonymous usage statistics we use Umami, self-hosted on Vercel. On the mobile app, we use Firebase Cloud Messaging (Google) on Android and the Apple Push Notification service on iOS to deliver push notifications. We do not sell your personal data to third parties.

6. Data retention

We retain your data for as long as your account is active. Upon account deletion, your personal data is permanently removed immediately, except where retention is required by law.

7. Your rights (GDPR)

Under the GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data ("right to be forgotten")
• Restrict or object to processing
• Data portability : export your data in a machine-readable format
• Withdraw consent at any time for consent-based processing

To exercise any of these rights, contact us at hello@apneacore.app. You also have the right to lodge a complaint with your local data protection authority.

8. Cookies and similar technologies

We do not use cookies for authentication: your login session is stored locally on your device (local storage) to keep you signed in. For aggregated usage statistics we use Umami, an analytics tool that does not use cookies and does not collect identifying data. We do not use tracking or advertising cookies.

9. How to delete your account

From the app: go to Profile → Delete account. Your personal data is removed immediately and permanently.

If you can't access the app, you can request deletion by emailing hello@apneacore.app and including the email address associated with your account. We process requests within 30 days.

10. Changes to this policy

We may update this policy from time to time. We will notify you of significant changes via email or an in-app notice.