Plain language, no dark patterns. This describes what the product actually does — it matches the code.
Every per-user record (dive log, saved spots, passport, alert rules, quiz results) is isolated at the database level by row-level security — keyed to your account. No other user, and no anonymous visitor, can read your rows. This is enforced by Postgres, not just app code.
Public (only if you opt in): rank, badges, Species Wall, Passport summary, conservation stats. Private by default: your logbook, exact locations, saved spots, alert rules, email, and imported travel. Explore everything as a guest — an account only saves & syncs your story.
You can download everything we hold about you, and you can permanently erase your account and personal data — public contributions are anonymized, not held hostage. These are real, working endpoints, not a promise.
Locations of sensitive species (sharks, rays, turtles, seahorses, nesting sites) are coarsened before storage — never an exact pin — so a sighting can't help anyone find and harm an animal.
No selling, no ad-tech profiles. Alerts are opt-in only and never cold-prompt you on load. Where a number's confidence is partial, we say so — blank beats a guess.