Privacy
Last updated 26 October 2026
DiveLens is operated by Michael Dubinsky, an individual based in Israel (“we”). This page explains what we collect when you use the DiveLens website and app, why, who helps us process it, and the choices you have. Questions or requests: privacy@divelens.io.
What we collect and why
Your account
Your email address, and if you sign in with Google, your name and profile picture from Google. We use them to sign you in and to greet you in the app.
Your dives
The photos and videos you upload, the details you add (dive names, places, dates, notes, depth) and the identifications and corrections on your photos. We use them to enhance, organise and show your dives to you. Your originals are kept as you uploaded them, so you can always download them. The copies we make for viewing and sharing have their GPS location removed.
Marine-life suggestions
To suggest what’s in a photo, we send a reduced-size copy of the enhanced photo to OpenAI, which returns the suggestions. We don’t send your name, email or dive notes with it. The location you gave the dive (for example “Dahab”) is included, to help with regional species.
Purchases
Paddle sells credits on our behalf as the seller of record and handles your payment details; we never see your card number. We receive a record of what you bought and when, and keep a record of how your credits are used.
Analytics
We measure how DiveLens is used so we can improve it. We don’t use advertising trackers.
- On the website and app: page visits and a few interactions, such as using the before-and-after slider, counted with PostHog in the EU without cookies or local storage. Visitors are counted with an anonymous identifier that changes every day. Page addresses are recorded without search terms or link codes, and nothing is recorded on shared-album pages.
- When you’re signed in: what you do in the service, for example creating a dive, uploading, downloading, sharing or buying credits. These events are linked to your account ID, never to your name, email, photos or notes, and are stored in our database and in PostHog (EU).
- When you sign up: where you came from (campaign tags in the link you followed, or the website that referred you) and the country of your connection. We don’t store your IP address for this.
Error reporting
When something breaks, Sentry (EU) receives technical details: the error, the page, and your browser and device type. Personal details are removed before it’s sent, and photos never are.
Cookies
We only use cookies needed for the service: to keep you signed in, and to remember a few display choices. We don’t use analytics or advertising cookies. Paddle’s checkout may set its own cookies while you pay.
Sharing
Your dives are private. If you create a share link, anyone with that link can view and download the shared photos and their identifications, without an account. Shared copies don’t include GPS locations. You can stop sharing at any time.
Who processes your data
We don’t sell your data. These providers process it for us, only to run DiveLens:
| Provider | What for | Where |
|---|---|---|
| Supabase | Database and sign-in | EU (Frankfurt) |
| Cloudflare R2 | Storage for your photos and videos | EU |
| Vercel | Hosting of the website and app | EU (Frankfurt) |
| Google Cloud | Enhancing your videos | EU (Belgium) |
| OpenAI | Suggesting the marine life in your photos | United States |
| PostHog | Product analytics | EU |
| Sentry | Error reporting | EU |
| Paddle | Payments, as the seller of record | United Kingdom / United States |
| Sign-in, if you choose “Continue with Google” | Global |
Most of your data stays in the EU. OpenAI and Paddle may process it outside the EU, under their contracts with us.
How long we keep it
Your account and dives are kept until you delete them. Deleting a dive deletes its photos, videos and details. To delete your account, email us. Purchase records are kept as long as accounting rules require. Usage events are kept to understand how DiveLens is used over time, and are deleted with your account on request.
Your rights
You can ask for a copy of your data, ask us to correct or delete it, or object to how we use it. Email privacy@divelens.io and we’ll reply within 30 days. You can also complain to Israel’s Privacy Protection Authority, or, if you live in the EU or the UK, to your local data-protection authority.
DiveLens isn’t meant for children under 16.
Changes
If we change how we handle your data, we’ll update this page and the date at the top.