Understand what you share and what stays private.

1. Scope and Controller

Depth Development, LLC, a Utah limited liability company, controls the personal information described here. This Policy applies to visitors, account holders, athletes, and people who contact us. It does not govern third-party sites, embedded media, organizations, events, or applications that receive information at your direction.

2. Information You Provide

We collect account information such as name, display name, username, email address, and password hash; profile information such as biography, city or country, social links, profile and hero images, and connections, connection requests, blocks, and private team labels; certification names and evidence files or links; performance information such as dive dates, disciplines, depth, time, distance, temperature, equipment, quality, notes, derived personal bests, evidence, and media links; location information such as dive site, city, region, country, latitude, and longitude; visibility and appearance choices; and messages you submit to us.

Do not submit medical details or information about another person unless you have authority and a lawful reason to do so. Before uploading certification evidence, remove unnecessary birth dates, signatures, credential numbers, and other sensitive details. A certificate is stored for your reference; uploading it does not mean Depth has authenticated it.

3. Information Collected Automatically

The training timer runs in your browser; its timer state and table settings are not automatically submitted as completed workout or dive records. Page requests and any risk acknowledgment are processed separately. Optional voice prompts use your browser or operating system's speech service, which may use a remote provider depending on the selected voice. Generated timing and phase text is passed to that service; this feature does not record your microphone. We do not currently collect wearable sensor measurements or automatically track your device location; dive coordinates are information you enter.

We collect technical and activity information needed to operate and secure the Service, including session identifiers, timestamps, requested pages, authentication and audit events, device or browser information, and network information. Application records use one-way hashes of network and browser information for session security, notice acceptance, safety acknowledgments, rate limiting, and contact submissions. Server and hosting logs may separately process ordinary request information for security and operations.

Necessary cookies and limited browser session storage maintain sessions, security protections, notice acceptance, and preferences. See the Cookie Policy.

4. Sources

We receive information directly from you, automatically from your browser or device, from other users when they connect with or reference you. Public information and links may come from third-party media or websites you choose to associate with your profile.

5. Why We Use Information

We use personal information to create and verify accounts; authenticate users; provide profiles, dive logs, personal bests, connections, cards, visibility controls, and training tools; store and display content as you direct; send transactional and security communications; respond to support, privacy, and legal requests; prevent abuse and protect users and the Service; debug, maintain, measure, and improve features; enforce agreements; comply with law; and establish or defend legal claims.

Depending on where you live, our legal bases may include performing our contract with you, your consent, compliance with law, and legitimate interests such as securing and improving the Service. You may withdraw consent where processing relies on consent, without affecting earlier lawful processing.

6. Public and Private Information

Profiles begin with the private visibility setting. A private profile hides your bio, location, links, and performance records from other visitors. Your profile name, username, and uploaded profile and hero images remain public even with that setting. Certifications and their uploaded evidence are visible only to you through the application; authorized operators and service providers may access stored information for the purposes described in this Policy. A public profile also displays your bio, location, links, and dive entries you have marked public. Public information may be visible worldwide, returned through authorized Service interfaces, indexed by search engines, and copied by others. Depth cannot control third-party copies made while information was public. Review visibility before publishing—especially exact dive locations, routines, performance details, media, and travel details.

Your connection comparisons and team groupings are visible only to you through the application. Connection requests and relationship status may be shown to the affected participants as needed to handle the relationship. Connecting does not reveal otherwise private fields. Blocking does not hide content that anyone can view without signing in or recall existing copies. Restricted information is made available only through the Service's permission model, but no security or access control is infallible.

7. How We Disclose Information

We disclose information: to the public or connected users according to your choices; to vendors that provide hosting, storage, email delivery, security, maintenance, and other processing under our instructions; when necessary to comply with law, lawful process, or government requests; to protect rights, safety, and the integrity of the Service; in a financing, merger, acquisition, reorganization, bankruptcy, or transfer of assets, subject to appropriate safeguards; and with your direction or consent.

We may disclose information reasonably needed to investigate or resolve a content, rights, or impersonation complaint, including to the affected user or rights holder. Links and media URLs may cause your browser to communicate with the third-party destination when you open them. We do not currently sell personal information for money or use it for cross-context behavioral or targeted advertising. If that changes, we will update this Policy and provide legally required choices before the new practice begins.

8. Sensitive Information

Dive coordinates and precise locations may reveal sensitive routines. Performance information and free-text notes may suggest physical characteristics or health-related facts, although Depth is not a healthcare provider and the Service is not a medical record system. We use these fields to provide athlete-requested features and visibility controls, and we do not use them to determine medical fitness. Enter and publish them only if you are comfortable doing so.

9. Retention

We retain account and content information while your account is active and as reasonably needed to provide the Service. We retain security, consent, safety acknowledgment, audit, transaction, and legal records as needed for fraud prevention, dispute resolution, enforcement, and legal compliance. Contact messages are retained as needed to respond and maintain business records. Verification codes and sessions expire under operational limits. Cookie-notice and training-risk receipts are valid for up to one year from acceptance, or until their applicable notice version changes. Scheduled cleanup removes acceptance records older than one year that are not linked to an account. Account-linked acceptance and safety records may be retained longer for the purposes above.

When a profile or hero image is replaced, or account deletion is completed, Depth stops serving the old image through its application URL. Removing URL access is separate from removing the stored file: unreferenced uploads may remain temporarily until scheduled cleanup. New image responses instruct browsers not to store copies, but previously cached, downloaded, or independently copied images may persist.

After deletion, information may remain temporarily in backups or be retained where required for security, legal obligations, legal claims, or documentation of consent. Public information copied by others is outside our control. We may retain aggregated or deidentified information that cannot reasonably identify you. We delete or deidentify information when it is no longer reasonably necessary for these purposes.

10. Security

We use administrative, technical, and organizational safeguards designed for the nature of the information, including password protection, email verification, access restrictions, safeguards against automated abuse, and checks on uploaded files. No system is completely secure, and we cannot guarantee that loss, misuse, or unauthorized access will never occur. Use a unique password and promptly report suspected compromise.

11. Your Choices and Rights

You can edit supported profile and log fields and change available visibility settings in the Service. You may request access to, correction of, deletion of, or a portable copy of personal information, and may object to or restrict certain processing where applicable. You may also opt out of any future sale, targeted advertising, or qualifying profiling if applicable. We currently do not engage in those activities.

Submit a request through the contact page or support@depth.blue, including if you cannot access your account. To request review of a denied request, reply to our response or email that address with the request reference. Where applicable, you may also complain to your privacy regulator. We may verify that you are the account holder or are authorized to act on their behalf, limit or deny a request where law permits, and explain an appeal process where required. Authorized agents may submit requests where applicable, subject to verification. We will not unlawfully discriminate or retaliate because you exercise a privacy right. Privacy rights cannot be waived where applicable law makes them nonwaivable.

12. U.S. State Privacy Notices

Depending on your residence and whether a law applies to Depth, you may have rights to confirm processing; access, correct, delete, or obtain a copy of information; and opt out of sale, targeted advertising, or certain profiling. The categories collected, purposes, sources, and recipient categories are described in Sections 2–8. We do not offer financial incentives for personal information. California residents may also request the categories of information collected, disclosed, sold, or shared and the recipient categories, subject to applicable thresholds and exceptions.

13. Children

The Service is not directed to children under 13, and account registration is limited to adults age 18 or older. We do not knowingly collect personal information online from children under 13. If you believe a child provided information, contact us so we can investigate and delete it as appropriate. Parents and guardians should not submit a child's information or create an account for a child.

14. International Use

Depth is operated from the United States. If you use the Service elsewhere, information may be transferred to, stored in, and processed in the United States and other locations where service providers operate. Local law may provide additional rights or require transfer safeguards. Contact us if you wish to exercise applicable rights.

15. Changes to This Policy

We may update this Policy as the Service, vendors, or law changes. The effective date and version above identify the current text. We may provide additional notice through the Service or email and request a new acknowledgment when a change is material. The version in effect when you register is recorded with your acceptance.

16. Contact

Depth Development, LLC is responsible for this Policy. Submit privacy questions, rights requests, appeals, or data-protection concerns through the contact page or support@depth.blue. Do not include passwords, unnecessary medical information, or emergency requests.