LoggerheadPrivacy Policy
Version 0.20 · Effective November 8, 2026 · Controller: Leemor Yuravlivker, Brooklyn, NY, USA
1. The short version
We hold your email address, the name and avatar you chose, and the dives, photos and species you log. We use them to run your logbook, to show divers how often each species is logged where they dive, with nobody named, and to test and improve identification, and nothing else. We do not sell your data, we do not show you ads, and we do not publish your logbook outside the app. There is no password to leak because we do not have one.
2. What we collect
Account. Your email address, the display name you give us, and your avatar choice. Sign-in codes we send, and the times you signed in.
If you sign in with Apple or Google, they share your name and email address with us; Apple may give us a private relay address in place of your own. We use the name only to fill in your profile, which you can change. If you sign in with Apple, we also keep a token Apple issues, so we can revoke your Apple sign-in when you delete your account.
Feedback. What you write in Send feedback or Suggest a new site, the kind of note you pick, and for a site the place you suggested it from, with your app version. It is emailed to our support inbox so we can read and answer it.
Location requests. The countries you ask us to support, when you tap the thumbs-up on one. We use them to decide where to add species lists and dive sites next.
Daily quiz. Which daily quiz you answered, the name you picked, whether it was right, and when. Your count of right answers is shown only to you, and your answers are deleted with your account.
Your logbook. Trips, dive sites, dates and times, the dive figures and gear you enter, notes, specialties and certifications, your species list, and the photos you attach and the stills from your videos. Your buddies can see them, except your notes. You can hide your dives, photos and species from buddies who were not on the dive, in Profile, Settings, Privacy and safety. Your dive notes are private to you: nobody else sees them, not the buddies on the dive and not the buddies feed. So are the logbook pages you keep. When you delete a photo, a dive or a trip, its files are deleted from our storage within a day; backup copies expire on their normal schedule.
Counts across divers. We may show divers how often a species has been logged at a dive site or in a place, and in which months, counted across everyone's logbooks. These are counts only: they never name you or show your photos, a species is shown at a place only once at least three divers have logged it there, and we leave out the dives you hide from buddies and the dive sites you typed in yourself.
Photos you submit. The photos you pick, the stills taken from a video you choose to analyze, and photos of the logbook pages you import. Photos usually carry capture time and, if your camera saved it, the location. We also keep the time each photo was taken and your camera’s make and model, to match your photos to your dives, and a code for each photo or video you pick, to notice one you have already added. Only you can see them. We remove location data from photos before they are uploaded.
Technical. Device model, operating system version, app version, crash reports, and basic logs needed to keep the service running and secure. Each identification, and each time the app checks how many analyses you have left, also sends your device's time zone, so a day and a month are yours; it is not stored.
Notifications. If you turn on notifications, we store your phone’s push token and your device’s time zone while notifications for Loggerhead are on for that phone, so we can send them and keep them to daytime hours. Both are deleted when you turn them off in your phone’s Settings (the next time you open the app signed in), when you sign out, and when you delete your account. Turning off the switches in Loggerhead’s Settings stops those notifications but keeps your phone registered. If you sign out without a signal, your phone stops showing notifications at once, but the token and time zone can stay until you sign in on it again and then sign out with a signal, you delete your account, or the push service tells us the token no longer works. A notification holds only its own line, such as a buddy’s name and a dive site’s name, and nothing from your photos or notes.
Identification records. Each time you identify a photo, we record which photo was checked, the species suggested and their match percentages, what you kept or removed, and how long it took. They contain no images and nothing you type. We keep them for 12 months.
Usage records. We record which screens you open and which steps you complete, errors you run into, whether you hide your dives from buddies, which Loggerhead widgets you have on your home screen on Android and at what size, and your device's text size and accessibility settings, so we can find what's confusing or broken. They contain no photos, nothing you write, and no location; the one exception is a search that finds nothing, whose text we keep so we can add what's missing. We keep them for 12 months.
We use your photos, your corrections and these records to test and improve identification. We never use them to train an AI model. You can turn both kinds of recording off with Help improve Loggerhead in Privacy and safety. We still count your identifications, without the photo or the result, so that the daily and monthly limits work.
Answers kept for a dropped connection. We keep each photo’s identification answer for an hour, with Help improve Loggerhead on or off, so that if it doesn’t reach your phone, for example because the connection dropped, the app can get it again without analyzing the photo a second time.
Reports and blocks. When you report a dive or a diver, we keep who reported it, what, and why, and email it to our moderation inbox. When you block a diver, we keep that you did; they aren’t told.
We do not collect contacts, advertising identifiers, or your location in the background.
3. What happens on your device, and what leaves it
When you add a video, the app samples frames and compares them on your device, keeping only frames that differ from each other and discarding frames with no subject in view. That comparison never leaves your phone.
To suggest species, your photos, the stills from your videos and the dive site’s name are analyzed by Google’s Gemini or Anthropic’s Claude. Photos of your logbook pages are read by Claude to fill in your dives’ stats and notes. Neither company uses them to train its models. If Keep logbook pages is on in Settings, a smaller copy of each page is kept on its dive, where only you can see it. Turn it off and new pages aren’t kept. This happens only after you say yes, and you can turn it off in Privacy and safety.
If you turn on sign-in with Face ID, Touch ID or your fingerprint, this phone keeps your sign-in after you sign out, locked so that only a face or finger enrolled on the phone when you turned it on can open it. Your face and fingerprint never leave the phone, and Loggerhead never sees them. Remove it from the sign-in screen, or turn it off on Profile, above Sign out.
If you add a Loggerhead widget to your home screen, the app keeps the coming week’s daily quiz, with its photos and your answer, and your next trip’s place, dates and what’s in season on the phone, so the widget can show them while the app is closed. They never leave the phone, anyone who can see your home screen can see them, and they are cleared when you sign out or delete your account.
4. Who processes your data for us
We do not sell your data or share it with advertisers. A few companies run parts of the service for us, and each sees only what its part needs: Supabase stores your account, your logbook and your photos, including the stills from your videos, and handles sign-in; Google and Anthropic analyze the photos you submit for identification, and Anthropic reads the logbook pages you import to fill in your dives’ stats and notes; Resend delivers our emails, including your sign-in codes, reports sent to our moderation inbox, and feedback you send us from the app; Sentry receives crash reports; Expo delivers app updates and, through Apple Push Notification service on iPhone and Firebase Cloud Messaging on Android, its push service carries your notifications; RevenueCat records the scan packs you buy, with your account’s ID, so they reach your account; Cloudflare hosts our website and the species photos in the catalog, keeps encrypted copies of our database for 14 days as a backup, and, when you sign in, checks that you’re a person rather than a bot, using signals from your device and browser; GitHub runs the nightly job that makes those copies; and Apple and Google distribute the app and, when you choose them, sign you in. Apple or Google takes the payment itself; we never see your card.
We may disclose data if the law requires it, or to protect the safety of a person.
5. How long we keep it
Your account and logbook are kept until you delete them. When you delete your account, your content is deleted from our storage within a day, and backup copies expire on their normal schedule. Identification records and usage records are kept for 12 months. A photo’s identification answer kept for a dropped connection is deleted after an hour. A report about an account is kept after the account is deleted, so that a repeat offender can be recognized.
6. Your choices and rights
You can edit or delete any dive, photo or trip, and you can delete your account at any time in Profile, Settings, Privacy and safety. To ask for a copy of your data, or to ask us to correct or delete something you cannot change yourself, email support@loggerheadid.app and we will answer within 30 days. Depending on where you live, you may have further rights under laws such as the GDPR or the CCPA; write to us and we will honor them.
7. Children
Loggerhead is for people aged 18 and over. We do not knowingly collect data from anyone younger, and we delete an account if we learn it belongs to a child.
8. Security
Data travels encrypted between the app and our servers. Access to your logbook is enforced by the database itself, not only by the app, and our own access is limited to running and fixing the service.
9. Changes and contact
If this policy changes in a way that affects you, we will tell you in the app or by email before the change takes effect. Questions go to support@loggerheadid.app.