SCUBAzen privacy policy
Summary
The SCUBAzen privacy policy, updated October 11, 2026, covers the SCUBAzen mobile app for iOS and Android and the website scubazenapp.com. SCUBAzen, LLC dba FireBrands collects what a diver enters in the app (email address, logbook, trips, certifications, insurance, gear, and AI travel planner conversations) in order to store and sync it. SCUBAzen does not sell personal information, never asks to track users across other companies' apps, and does not give the phone's advertising identifier to advertisers. The AI travel planner sends questions and a logbook summary to Google Gemini; names, email addresses, photos, and insurance are never sent. Accounts can be deleted inside the app, and a short list of records is kept after deletion.
Information SCUBAzen collects
SCUBAzen collects the email address used to sign in; Divers do not use a password and sign in with a one-time code or link sent by email. A diver can optionally add a name, a home location as free text, and a profile photo. The app stores each dive's date, site and location names, depth, time, conditions, gas, weights, dive shop or boat, gear used, dive types, rating, notes, photos, and the dive site's coordinates when the diver picks a suggested place, taps the map, types coordinates, or taps the GPS button. It also stores trips, certification and insurance details including card and policy numbers, issue and expiry dates, instructors, dive shops, insurer phone numbers, and card photos, the gear list with serial numbers, service records, and service paperwork photos, settings, and the body weight, height, sex, age, and body fat the Zenfinder weight and wetsuit estimator uses when entered.
As the app is used, SCUBAzen collects usage events (counts and categories, not entered content), crash and error reports, performance data (screen and action timings and taps, without text) sent to Sentry, device and app details, purchase records with the store transaction ID, and short-lived sign-in records that are deleted automatically, usually within about three days of the last sign-in attempt.
Phone permissions
The SCUBAzen app requests location only when the diver taps the GPS button while logging a dive, and reads the location once at that moment; it does not track location in the background. The camera and photo library are used for certification cards, insurance cards, gear and service photos, dive photos, the profile photo, and screenshots attached to problem reports. The calendar is used to add a gear service reminder through the phone's own calendar screen; on iOS 16 and earlier, iOS first asks to allow calendar access. Every permission is optional and can be changed in the phone's settings.
Service providers
SCUBAzen uses these service providers. Google Firebase and Google Cloud provide sign-in, the database, file storage, server functions, App Check, Firebase Analytics, Firebase Performance Monitoring, and Crashlytics. Google Gemini answers AI travel planner questions. Google Maps Platform suggests places as the diver types (biased to the phone's location once the GPS button has been used) and names points tapped on the map or typed as coordinates. Google Fonts may serve a font to the photo picker. OpenStreetMap serves map tiles. NOAA provides typical or current water temperatures for a trip area, without receiving the diver's location. PostHog provides usage analytics, masked session recordings, and error tracking. Sentry provides error reports and performance data. RevenueCat confirms App Store and Google Play purchases. Resend sends sign-in emails and delivers feedback reports. Meta provides advertising measurement. Vercel and Cloudflare host the website, and Mintlify hosts the help documentation at scubazenapp.com/docs, whose pages send page views to Google Analytics and PostHog; PostHog records a sample of documentation visits.
Analytics, crash reports, and session recordings
SCUBAzen usage events and crash reports are tied to a random account ID, never to a name or email address, and contain no dive notes, site names, conversation text, or photos. PostHog shortens IP addresses to the area level before storage and keeps only country, region, and city. The app never sends Sentry email or IP addresses, though Sentry receives the network address a report arrives from; an error report may include a masked screenshot of the app screen, and the text of an in-app problem report is sent to Sentry with its error. PostHog session recordings cover a sample of sessions and mask all text and images, so logbook entries, certification cards, and conversations cannot be read. Analytics and crash data are kept after account deletion, tied to an ID that no longer points to anyone.
Advertising measurement with Meta
The SCUBAzen app includes Meta's software to measure which Facebook and Instagram ads lead to installs. It sends Meta the app install and app opens, account creation with the sign-in method, the start of the AI travel planner's free day, and a 30-day purchase with its price and currency, together with an anonymous installation ID stored on the phone and device and network information such as the IP address. SCUBAzen does not give Meta the IDFA or the Android advertising ID, does not ask to track users across other apps, and never sends Meta a name, email address, account ID, or app content. On phones whose app store account or region is in the European Economic Area, the United Kingdom, or Switzerland, or whose store country can't be read, Meta's software never starts: nothing is sent to Meta and no Meta installation ID is created. Users elsewhere can object by emailing info@scubazenapp.com.
The AI travel planner and Google Gemini
The SCUBAzen AI travel planner, called the travel agent in the app, is answered by Google Gemini through Google's paid Gemini API. Nothing is sent until the diver sends a question. SCUBAzen's server then sends Gemini the question, the recent part of that conversation, a summary of the logbook and certifications, and, when looked up, individual dives including their notes. Names, email addresses, account IDs, photos, insurance, the gear list, body details, and GPS coordinates are never sent. Under Google's paid API terms, Google does not train on these prompts and keeps them up to 55 days only to detect misuse. The complete list is at https://scubazenapp.com/docs/travel-agent/privacy.
Purchases, feedback, and email
Apple or Google takes payment for SCUBAzen purchases, and RevenueCat confirms them to SCUBAzen; SCUBAzen never receives card details. SCUBAzen keeps each purchase's store transaction ID, product, date, and price in US dollars, and a hash of the email address, keyed with a secret only the server holds, with the account's random ID so each person gets one free day. Feedback sent in the app is stored with the account ID, email address, app details, any error message shown, and an optional screenshot, emailed to the support inbox with the sender's email address, account ID, and screenshot, and, for problem reports, sent to Sentry. SCUBAzen sends sign-in emails without open or click tracking, and may send occasional product announcements, each with an unsubscribe link.
Google Analytics on the website
Google Analytics runs on scubazenapp.com; inside the app, Google Analytics for Firebase receives the usage events described above. It records pages visited, approximate location derived from the IP address, and general device and browser information, used only to understand site traffic in aggregate and never combined with SCUBAzen accounts. Visitors can opt out with Google's browser opt-out add-on. The website's hosts keep standard access logs, including IP addresses and requested page addresses.
Selling and sharing
SCUBAzen does not sell personal information. Some U.S. state privacy laws, including California's, may treat the app events sent to Meta for advertising measurement as sharing for cross-context behavioral advertising; users can opt out by emailing info@scubazenapp.com. SCUBAzen may disclose personal information when required by law, to protect the rights, property, or safety of SCUBAzen, its users, or the public, or as part of a merger or sale of assets.
Exporting data and deleting an account
SCUBAzen exports the logbook as CSV files from settings, under backup and restore, and summarizes certifications, insurance, kit, and sizes in the paperwork PDF; photos, trips, the gear list and service records, settings, and conversations have no export. Deleting the account in settings permanently removes the profile, logbook, trips, certifications, insurance, gear, conversations, settings, unused paid time, and uploaded files. Without the app, deletion can be requested through the deletion request form or by emailing info@scubazenapp.com from the sign-in address.
Four kinds of record are kept after deletion: feedback reports with the account ID, email address, and screenshot removed (copies already emailed or sent to Sentry are not recalled); purchase records (transaction ID, product, date, and price) unlinked from the account; the keyed hash of the email address, marking its free day as used, with the account ID replaced by a deleted-account marker; and analytics, crash data, and server logs tied to an ID that no longer points to anyone.
Privacy rights, storage, and children
Depending on location, SCUBAzen users may have rights to access, correct, delete, or receive a copy of their personal information, to object to or restrict its use, and to opt out of sharing for advertising; requests go to info@scubazenapp.com. SCUBAzen account data is stored by Google Cloud in the United States, and transfers from the European Economic Area, the United Kingdom, or Switzerland rely on standard contractual clauses or equivalent safeguards. SCUBAzen is not directed to children under 13 and does not knowingly collect their information.
Frequently asked questions
Does SCUBAzen sell my data?
No. SCUBAzen does not sell personal information. App events sent to Meta for advertising measurement may count as sharing under some U.S. state laws, and users can opt out by email.
Does SCUBAzen track my location?
No. SCUBAzen reads the location once, only when the diver taps the GPS button while logging a dive, and never in the background.
What does the AI travel planner send to Google Gemini?
The question, the recent conversation, a logbook and certification summary, and individual dives with their notes when looked up. Never names, email addresses, photos, insurance, or GPS coordinates. Google does not train on this data under its paid API terms.
How do I delete my SCUBAzen account?
In the app, open settings and tap delete account. Without the app, use the deletion request form or email info@scubazenapp.com from the address used to sign in.
What does SCUBAzen keep after I delete my account?
Feedback reports without identity, unlinked purchase records, a keyed hash of the email address that marks its free day as used (no longer naming the account), and analytics and crash data tied to an ID that no longer points to anyone.