1. Who We Are
Nemo Diving Center operates the Dive Club Companion mobile application, which lets dive club members manage their membership, track dive check-ins, monitor personal gear, participate in club polls, earn and redeem reward points, and stay informed about upcoming trips and events.
Questions about this policy can be directed to hussam@nemodivingcenter.com.
2. Information We Collect
We collect only the information necessary to operate the club membership system and deliver the features described below.
2.1 Account & Membership Information
When you register or are enrolled by club staff, we collect:
- Full name and member number
- Email address and phone number
- Postal or mailing address
- Dive certification level
- Membership tier, status, start date, and expiry date
- A hashed (bcrypt) password — the plaintext password is never stored
2.2 Dive Activity & Check-In Records
Each time you check in at the dive club, we record:
- Your member ID, name, and membership tier at the time of check-in
- Date and time of the check-in
- Number of tanks used
- Any staff note attached to the check-in
- Your cumulative dive count
Check-ins are initiated either by scanning the club's QR code with your device camera, entering a personal PIN, or by a staff member on your behalf. Pending check-in requests include their approval or rejection status and timestamp.
2.3 Personal Dive Gear
If you use the gear-tracking feature, we store information you enter about each piece of equipment: item name, brand (optional), last-serviced date, service interval in months, and any notes you add. This data is linked to your member account and is never shared with third parties.
2.4 Points & Rewards
We maintain a points ledger for each member that records:
- Points balance
- Each point-earning transaction: service type, invoice amount, points awarded, and date
- Each reward redemption: reward name, points cost, redemption date, and fulfilment status
2.5 Push Notification Tokens
If you grant notification permission, your device's Expo push token is stored on our server along with the registration timestamp. This token is used solely to deliver club announcements and alerts to your device. Each token is associated with your member account and is removed if you revoke notification permission or delete your account.
2.6 Votes on Club Polls
When you respond to a club poll, your vote (member ID and selected option) is recorded. Poll responses are visible to club staff in aggregate.
2.7 Password Reset
If you request a password reset, a time-limited single-use token is generated and sent to your registered email address. The token is deleted upon use or expiry.
3. Device Permissions
| Permission | Used For | Required? |
|---|---|---|
| Camera | Scanning the club QR code to initiate a dive check-in. No images or video are captured, recorded, or transmitted. | Optional — you can check in with a PIN instead |
| Push Notifications | Receiving club announcements, trip updates, and alerts from Nemo Diving Center staff. | Optional — the App works without it |
| Location | Not requested or used. The App does not access your device's GPS or location services. | Not used |
4. How We Use Your Information
- Membership management — verifying your identity, tracking membership validity and tier, and allowing staff to manage accounts.
- Dive check-in — recording attendance, managing tank inventory, and maintaining your dive history.
- Gear service reminders — alerting you when equipment you have logged is due for servicing.
- Points & rewards — calculating your balance, processing redemptions, and maintaining an audit trail.
- Club communications — sending push notifications about announcements, trips, and events you have signed up to receive.
- Account security — authenticating logins via JSON Web Tokens (JWTs) with a 90-day expiry, and processing password resets.
- App improvement — we do not use your data for advertising or sell it to any third party.
5. Information We Do Not Collect
- Device location or GPS coordinates
- Photos or video footage from your camera
- Payment card numbers or full payment details (purchases made through the external Nemo shop at nemodivingshop.com are handled entirely by Shopify — see Section 7)
- Browsing history or behaviour across other apps or websites
- Crash or analytics data (no third-party analytics SDK is integrated)
6. Data Retention
Your account and activity data is retained for as long as your membership is active or until you delete your account. Password reset tokens are single-use and automatically deleted on expiry. Push notification tokens are removed when you unregister notifications or when a delivery attempt confirms the token is no longer valid.
You can permanently delete your account from the App: open the Account tab, select Delete account, and confirm with your current password. This deletes your profile, membership records, dive check-ins, personal gear, points and rewards activity, poll votes, password-reset tokens, and associated push-notification tokens from our active systems. You can also contact us at hussam@nemodivingcenter.com with questions about your data.
7. Third-Party Services
| Service | Purpose | Data Shared |
|---|---|---|
| Expo Push Notification Service (Expo, Inc.) |
Delivering push notifications to member devices | Device push token and notification payload. Governed by Expo's Privacy Policy. |
| Email provider (SMTP) | Sending password-reset emails | Your email address and the reset link. Used only when you initiate a password reset. |
| Google Cloud Storage (object storage) |
Hosting trip and event photos uploaded by club staff | Photo files uploaded by staff only — no member personal data is stored in object storage. |
| Shopify (nemodivingshop.com) | External dive gear store linked from the Shop tab | The App opens the store in an in-app browser. All checkout data is handled by Shopify's platform. Shopify's own Privacy Policy applies. |
We do not share your personal information with advertisers, data brokers, or any other third parties not listed above.
8. Data Security
Passwords are stored as bcrypt hashes and are never recoverable in plaintext. All communication between the App and our servers is encrypted in transit using HTTPS/TLS. Member sessions use signed JWTs; no unencrypted session identifiers are persisted on our servers.
While we take reasonable technical measures to protect your information, no system is completely secure. Please use a strong, unique password and keep your login credentials confidential.
9. Children's Privacy
The App is intended for dive club members aged 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a minor's data has been submitted, please contact us and we will delete it promptly.
10. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete information
- Delete your account and associated data from the Account tab in the App
- Withdraw consent for push notifications at any time through your device's notification settings
- Withdraw camera permission at any time through your device's app settings
For rights other than account deletion, contact us at hussam@nemodivingcenter.com. We will respond within a reasonable time frame.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the Effective Date at the top of this page. We encourage you to review this policy periodically. Continued use of the App after changes are posted constitutes your acceptance of the updated policy.
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out:
Nemo Diving Center
hussam@nemodivingcenter.com