Privacy Policy

My Dive Locker ("My Dive Locker," "we," "us," or "our") is operated by Threshold Operations. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use mydivelocker.com and our related mobile and web applications (collectively, the "Service").

By using the Service, you agree to the collection and use of information as described in this policy.

1. Information We Collect

Account information. Name, email address, and password (or OAuth credentials via Google Sign-In or Apple Sign In) when you register.

Diver profile information. Certification records (agency, level, certification number, issue date), dive logs (location, depth, duration, gas mix, buddy/diveguide names, notes, ratings), equipment records, and photos or videos you upload.

Medical and insurance information. If you use our medical waiver or dive insurance verification features, we collect medical questionnaire responses, insurance policy details (e.g., DAN membership), and related documents you choose to upload. This is sensitive information, and we limit its use to the specific purposes described in Section 3.

Location information. Dive site coordinates and location data you enter or that our system geocodes based on dive site names you provide.

Payment information. Subscription and billing information is processed by Stripe. We do not store your full payment card number on our servers.

Wallet pass information. If you add a My Dive Locker pass to Apple Wallet or Google Wallet, we generate a pass containing your name, certification tier, and a scannable code linking to your public verification profile.

Usage and device information. IP address, browser type, device identifiers, and general usage analytics collected automatically when you use the Service.

Communications. If you contact us for support, we retain the content of that communication.

2. How We Use Information

We use the information we collect to:

• Provide, maintain, and improve the Service, including dive logging, certification tracking, and compliance verification features
• Generate and deliver Apple Wallet and Google Wallet passes
• Process payments and manage subscriptions
• Send transactional emails, including dive reminders, manifest notifications, and account-related communications
• Power the AI Concierge feature, which uses OpenAI's API to answer diving-related questions. Messages you send to the AI Concierge may be processed by OpenAI in accordance with their data handling practices
• Provide geocoding for dive site locations via Mapbox
• Verify and display compliance status (certifications, medical waivers, insurance) to authorized dive operators when you use our Send-to-Shop / manifest features
• Detect, investigate, and prevent fraudulent or unauthorized activity
• Comply with legal obligations

3. Sensitive Information — Medical and Health Data

We understand that medical questionnaire responses and health-related information are sensitive. We use this information solely to:

• Determine and display your compliance status to you
• Share it with a specific dive operator you have explicitly authorized through our Send-to-Shop / manifest sharing feature

We do not sell medical or health information. We do not use it for advertising or profiling. Access is limited to systems and personnel necessary to operate the compliance-verification feature.

4. How We Share Information

We do not sell your personal information. We share information only in the following circumstances:

Service providers. We use third-party vendors to operate the Service, including:

• Supabase (database hosting and backend infrastructure)
• Stripe (payment processing)
• Resend (transactional email delivery)
• OpenAI (AI Concierge feature)
• Mapbox (dive site geocoding)
• Google and Apple (Wallet pass issuance, OAuth sign-in)

Each of these providers processes data only as necessary to perform their function for us and is bound by their own privacy and security obligations.

Dive operators, at your direction. When you use the Send-to-Shop or manifest sharing feature, you are directing us to share specified compliance information (masked or full certification level, medical waiver status, insurance status) with the operator you select.

Buddies and instructors, at your direction. If you use the dive verification feature, the buddy or instructor you designate will receive a request to confirm a manually logged dive.

Legal requirements. We may disclose information if required to do so by law, or in good faith belief that such action is necessary to comply with legal process, protect our rights, or protect the safety of any person.

Business transfers. If My Dive Locker is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal information within a reasonable period, except where retention is required for legal, tax, or dispute-resolution purposes.

6. Your Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion of your information
• Export your data in a portable format
• Object to or restrict certain processing

To exercise these rights, contact us at the email listed in Section 11. We will respond within a reasonable timeframe and in accordance with applicable law.

7. Security

We use reasonable administrative, technical, and physical safeguards to protect your information, including encrypted storage, access controls, and CORS-restricted API access. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.

9. International Users

If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. By using the Service, you consent to this transfer.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a revised effective date. Material changes will be communicated via email or in-app notice where required by law.

11. Contact Us

If you have questions about this Privacy Policy, contact us at:

Email: hq@mydivelocker.com
Mail: 919 Tinytown Rd. Ste B, Clarksville, TN 37042