Effective date: August 14, 2026
Last updated: September 20, 2026
Phone Dipping (the “App” or “Service”) is operated by Phone Dipping in British Columbia, Canada (“we,” “us,” or “our”). This policy explains what information the App handles, why it is handled, where it goes, how long it is retained, and the choices available to you.
Contact: no1pine@hotmail.com
Privacy page: https://sites.google.com/view/phonedipping/privacy
Phone Dipping is a community map for user-submitted underwater photos. It does not sell personal information, show behavioural advertising, use advertising trackers, access contacts, collect health data, or collect payment card numbers.
The Service does collect information needed to operate a shared community: a privacy-protected surface location, a selected photo, post details, an account identifier, votes, safety reports and blocks. RevenueCat processes App Store subscription status. Supabase hosts accounts, database rows and private photo storage.
Anonymous account identifier. On first online use, Supabase creates a random user UUID so posts, votes, reports and blocks can belong to an account without requiring a name or email.
Sign in with Apple information. If you choose to secure the account with Apple, we receive an Apple identity token and, only when Apple supplies it, your name. We do not request your Apple email address in version 1. Apple controls the sign-in process under its own privacy terms.
Profile information. The Service stores a display name, unique handle, badge and EULA acceptance time. A default handle may be generated from part of the random account UUID.
We use this information to authenticate you, attribute posts and votes, prevent abuse, support account recovery through Apple, and enforce community rules.
The App does not request iOS location permission and never reads your device's location. When you create a Dip Spot, you choose the place yourself: search for it by name and pick a suggestion, or pan the map and tap Use this spot. Before upload, you choose one of three publication levels:
Regional (default): the coordinate is snapped to an area roughly five kilometres wide.
Approximate: the coordinate receives a deterministic offset of roughly 500 metres.
Exact: the captured surface coordinate is published unchanged.
For Regional and Approximate publication, the precise captured coordinate stays only in the App’s local device cache and is not sent to Supabase. Supabase receives only published_lat, published_lng and the selected precision label. If you deliberately select Exact, the published coordinate is the captured coordinate and therefore the exact coordinate is uploaded.
Location is used only to create and display Dip Spots, make regional map queries, and explain the publication area. It is not used for advertising, tracking, movement history, navigation or safety decisions. The App does not collect location in the background.
Because the App never reads your device location, there is no location access to grant or revoke. Existing published content remains until you delete the account or ask us to remove the content.
When you deliberately choose a photo with Apple’s Photos picker, the App processes only that selected item. We do not request access to scan your entire photo library.
The uploaded record may include:
the underwater photo;
title and notes;
equipment description;
selected Spot and published surface area;
capture/post time, contest month and vote count; and
account display name and handle.
Public Dip content is visible to other authenticated App users, subject to blocks and moderation. Equipment descriptions, place descriptions and safety notes are user-reported and may be inaccurate.
We store which account voted for which Dip in each contest month to enforce one vote per account per Dip per month. We store report reason, optional report details, reported Dip, reporter identifier, status and time. We store blocker/blocked account identifiers. We store the time an account accepted the community EULA.
Reports are visible to the reporting user and authorized moderators, not the public. Block relationships are used to remove the blocked author’s Spots and Dips from the blocker’s experience.
Apple processes payment. We do not receive or store your card number, bank details or full Apple payment credentials.
RevenueCat receives and processes App Store purchase history, product identifier, transaction/renewal status, storefront information and a RevenueCat-generated anonymous App User ID so it can validate purchases, prevent fraud, operate entitlements, support Restore Purchases and provide aggregate subscription reporting. In version 1, we do not deliberately connect the RevenueCat anonymous App User ID to the Supabase account UUID, name or Apple identity.
Subscriptions do not add votes, improve contest ranking or change moderation treatment.
Our processors may temporarily process ordinary network and service logs such as IP address, request time, response status, app/OS version and error context to deliver requests, detect abuse, protect accounts and diagnose failures. The App does not include a third-party advertising SDK or a general-purpose behavioural analytics/crash-reporting SDK in version 1.
Locally, the App stores cached Spots and Dips, selected/resized JPEG files, publication coordinates, vote state, blocked accounts, hidden reported Dips, EULA acceptance and onboarding status. iOS controls access to the App sandbox.
We use the information described above to:
provide the map, feed, Spot details, uploads and monthly standings;
authenticate accounts and preserve user-created content;
generate privacy-protected published coordinates;
store and serve private-bucket photos through short-lived signed URLs;
count one free vote per account, Dip and month;
operate the monthly recognition contest and archive winners;
process and restore Pro subscriptions;
respond to reports, block abusive users, moderate prohibited content and protect safety;
provide support, enforce the Terms and prevent fraud or misuse;
secure, maintain, troubleshoot and improve the Service; and
comply with legal obligations and valid legal process.
We do not use App information for cross-app tracking or targeted advertising. We do not share it with data brokers.
We collect user-submitted content, including the place you choose for a Spot, with your knowledge and affirmative action. The App does not request iOS location permission. You accept the community EULA before using the community. Where consent is the applicable legal basis, you may withdraw it for future processing by stopping uploads, deleting your account, or contacting us. Withdrawal does not make earlier lawful processing unlawful and may prevent posting features from working.
We also process limited information as reasonably necessary to provide the requested Service, perform the Terms, secure the Service, prevent abuse, comply with law and establish or defend legal claims.
Published Spots and visible Dips are community content. Other authenticated users can see the published location area, photo, post fields, profile display name/handle, vote total and contest placement. They do not receive the device-only captured coordinate for Regional or Approximate Spots.
Supabase provides authentication, PostgreSQL database APIs and private object storage. Supabase processes account identifiers, profiles, published coordinates, content, photos, votes, reports, blocks and service logs as our processor.
RevenueCat validates App Store purchases and operates the Pro entitlement. It processes purchase/transaction status, product/storefront data and its anonymous App User ID.
Apple provides iOS permissions and Photos picker, Sign in with Apple, App Store distribution, StoreKit payments and subscription management. Apple handles information under Apple’s own terms and privacy policy.
Hosting/email provider processes requests to the public legal/support pages and messages sent to no1pine@hotmail.com.
We require processors to protect personal information consistently with this policy and applicable requirements. Their infrastructure may process information outside British Columbia or Canada, including in the United States or the region selected for the Supabase project. Information in another jurisdiction may be accessible to courts, law enforcement or regulators under that jurisdiction’s laws.
We may disclose limited information when reasonably necessary to comply with law or valid legal process; protect a person from serious harm; investigate fraud, security incidents or Terms violations; enforce rights; or complete a merger, financing, reorganization or sale. A successor must honour this policy for information received in the transaction and users will be notified of a material change where required.
Active account and content: retained while the account is active and as needed to provide the Service.
Deleted account: the in-app deletion flow promptly deletes the authentication user, profile, owned Dips and photo objects, votes, reports and blocks from the active production systems. A user-owned Spot is deleted if no other user has contributed there; otherwise it is retained without that user as owner so other users’ Dips are not destroyed.
Backups: deleted information may remain in encrypted, access-restricted disaster-recovery backups until those backups cycle out, targeted at no more than 30 days. Backups are not used to restore an individual deleted account.
Moderation/security records: a minimal record may be retained longer when reasonably necessary to document enforcement, prevent repeat serious abuse, resolve disputes, meet legal obligations or protect users. We will minimize and restrict that record.
Purchase records: Apple and RevenueCat retain transaction records under their policies and financial/legal obligations. Deleting a Phone Dipping account does not cancel an App Store subscription or erase records Apple must retain.
Support email: normally retained until the request is resolved plus up to 24 months for continuity, disputes and abuse prevention, unless a longer period is legally required.
Device cache: remains until removed in the App, the account is deleted, or the App is uninstalled. iOS backups may retain App data according to the user’s Apple backup settings.
You can:
choose Regional, Approximate or Exact location publication for each Spot;
set a Spot's place manually, since the App never reads your device location;
choose whether to link the anonymous account with Apple;
report a Dip and hide it locally immediately;
block an author;
restore or manage an App Store subscription through Apple;
delete the Phone Dipping account and content in Me → Delete my account and content; and
request access, correction or information about our handling of personal information by emailing no1pine@hotmail.com.
We may need to verify a request before disclosing or changing account information. We aim to respond within 30 days or the period required by applicable law. If we cannot provide access, correction or deletion, we will explain why where legally permitted. You may challenge our response with the Office of the Information and Privacy Commissioner for British Columbia or the Office of the Privacy Commissioner of Canada, as applicable.
Deleting the account is permanent. It does not automatically cancel an Apple subscription; manage that separately in iOS Settings → Apple Account → Subscriptions.
We use measures appropriate to the nature of the Service, including Supabase row-level security, authenticated database access, a private photo bucket, signed photo URLs, per-user storage folders, least-privilege client keys, HTTPS in transit, account-scoped votes/reports/blocks, and separation of captured versus published coordinates. Secret/service-role keys are not shipped in the App.
No service can guarantee absolute security. If you believe an account or submission is at risk, email no1pine@hotmail.com. Do not send passwords, Apple tokens or payment numbers.
Phone Dipping is not directed to children under 13 and is not offered in Apple’s Kids Category. Users must be at least 13 and, if under the age of legal majority where they live, use the Service only with permission and supervision of a parent or guardian. Waterside activity requires responsible adult judgment.
We do not knowingly collect personal information from a child under 13. If a parent or guardian believes a child submitted information, contact no1pine@hotmail.com; we will investigate and delete it where appropriate.
Do not upload a photo, name, vessel registration, precise private location or other information that exposes another person without permission. Public content can be copied or shared by other users despite blocks or later deletion. We cannot control copies already made outside the Service, but we will act on valid privacy or rights reports within our control.
We may update this policy to reflect changes in the App, processors or law. The updated page will show a new “Last updated” date. If a change materially expands collection or use, we will provide notice in the App and request renewed consent where required.
Privacy questions, access/correction requests, deletion help, or complaints:
Phone Dipping
Email: no1pine@hotmail.com
Web: https://sites.google.com/view/phonedipping/support
Jurisdiction: British Columbia, Canada
For an active emergency or immediate threat at the water, contact local emergency services. Phone Dipping support is not monitored as an emergency channel.