The legal details are in the Terms of Service and the Privacy Policy on the DivePilot website. This article sums up what they and the app mean for your dive center in practice. Encryption, passwords and sign-in security are covered in How your account is protected.
Getting your data out
- Export data on a customer's profile downloads that one customer as an Excel file, see Archive, export or anonymise a customer.
- There is no export of all customers at once, no bookings export and no full backup of the account.
- Exports only work while your trial or subscription is running.
To receive your data in a machine-readable format, write to privacy@divepilot.app. The Privacy Policy lists this as your right to data portability.
Who is responsible for what
- For your guests, students and divers, your dive center is the controller, and DivePilot processes their data on your behalf.
- For data about your dive center and your staff, DivePilot is the controller.
There is no data processing agreement to download or accept, in the app or on the website. If your business needs one, raise it with privacy@divepilot.app.
Where data is stored
DivePilot is run by AskAnything GmbH in Cham, Switzerland. The Privacy Policy says all data is stored on servers in the European Union, and names these service providers:
| Provider | Role |
|---|---|
| Stripe | Subscription payments |
| PurelyMail | Sending emails |
| A hosting provider, not named | Cloud infrastructure in the EU |
| Open-Meteo | Weather forecasts; only dive site coordinates are sent |
Card numbers never reach DivePilot. It stores only the card brand, the last four digits, the expiry date and invoice summaries.
How long data is kept
- Your records are kept while the account exists, including after a trial or subscription has ended. Notifications are the exception: each one is removed 30 days after it is read, or 90 days after it arrived, whichever comes first.
- Some records you delete in the app, such as customers, team members, boats and dive sites, are archived and can be restored. Others, such as boat trips, courses and staff duties, are erased straight away.
- The Privacy Policy says billing records are kept for 10 years under Swiss accounting law, and logs for 90 days.
- To anonymise one guest, use GDPR delete on their profile, which keeps their bookings and waiver records. To close the whole account, see Delete your dive center.
The Privacy Policy commits to irreversible deletion within 30 days of a request to privacy@divepilot.app, except where the law requires keeping the data. For erasure you can rely on, make that request.
Your guests and the terms they accept
Guests who book or register online must tick "I agree to the terms and conditions". That link opens DivePilot's own Terms of Service, not your dive center's terms or privacy notice, and no setting points it elsewhere. The app has no link to a privacy policy either. If you need guests to accept your own terms, handle that outside the booking page, for example in your waiver.
Who to write to
| Address | For |
|---|---|
| support@divepilot.app | Something not working, account problems, reactivating a deleted account |
| privacy@divepilot.app | Data requests, copies of your data, erasure, anything about personal data; answered within 30 days |
| contact@divepilot.app | Questions about DivePilot, demos and partnerships |
The contact page on the DivePilot website also offers a chat on WhatsApp. The app itself has no chat or help link.
Did this not answer your question? Contact support