Privacy Policy
Last Updated: October 19, 2026
Our Privacy-First Commitment
At Tools for Divers, LLC, we believe your dive data is personal and should stay that way. Every app we build follows the same privacy-first philosophy that respects the diving community’s values of safety, professionalism, and personal data sovereignty.
Our Core Promise: Your dive data stays under your control. Your logbook is stored on your device, with optional iCloud sync on iOS and the limited sharing described below. When you choose to share your email with us — by subscribing to our newsletter — we store it on our own infrastructure, never sell or rent it, and never use it to profile or track you.
Scope. This Privacy Policy describes how Tools for Divers, LLC handles personal information in connection with our applications and products — Dalton, Slate, and our other dive software — and our opt-in email newsletter. Our marketing website (toolsfordivers.com) uses standard web analytics and advertising-measurement tools, including the Meta Pixel, to understand how visitors find us; that instrumentation is described under “Marketing Website” below and is separate from how our apps and products handle your data.
Dalton — Technical Diving Gas Calculator
Dalton is available on iOS and Android. It performs all gas calculations entirely on your device. Your gas mixes, dive plans, and calculation results are never transmitted anywhere.
- Crash reporting only. Dalton sends anonymous crash reports via Sentry to help us fix bugs and improve stability. No dive data, gas mixes, or calculation results are ever included.
- Purchase management. Dalton uses RevenueCat to manage the optional Pro in-app purchase. RevenueCat processes transaction data through the App Store (iOS) or Google Play (Android). We do not receive or store your payment details.
- No behavioral tracking. No analytics, no telemetry, no advertising identifiers.
- No personal data collection. We do not collect your name, email, location, or any personally identifiable information.
- No accounts. No sign-in, no registration, no user profiles.
- Local storage only. Dalton stores your preferences in a local database on your device (SwiftData on iOS, Room on Android). On iOS, a subset of preferences is mirrored to shared storage for the widget extension. These preferences never leave your device.
Android-Specific Details (Dalton)
- Google Play In-App Review. Android Dalton uses Google’s In-App Review API to prompt users for ratings. This communicates with Google Play services. No dive data or personal information is shared.
- QR Code Scanning. Android Dalton uses Google ML Kit for on-device barcode scanning (to share calculations between devices via QR code). ML Kit may download a model on first use. No dive data, images, or scan results are transmitted to Google or Tools for Divers.
- Android Auto Backup. Android Dalton participates in Android’s system-level Auto Backup, which may back up the local database and preferences to your Google account. This is managed by Android at the OS level and is controlled by your device settings. Tools for Divers does not access this backup data.
Slate — Professional Dive Logbook
Slate is available on iOS and Android. It stores your dive logbook on your device. No account is required to use the app.
- iCloud sync (iOS only, optional). If enabled, Slate uses iCloud and CloudKit to sync your dive data across your Apple devices. This data is stored in your personal iCloud account, managed by Apple, and is not accessible to Tools for Divers. You can disable sync at any time in Settings.
- Local-only logbook (Android). Slate for Android 1.1 stores your logbook in a local database on your device. It has no account, cloud sync, or automatic cloud upload of your logbook. Recovery copies also stay on the device. You can deliberately export or share files using Android’s file picker or share sheet; the destination you choose controls those copies.
- Bluetooth dive computer import. Slate uses Bluetooth Low Energy (BLE) to communicate with dive computers for wireless dive data import. BLE communication occurs directly between your device and your dive computer. No dive computer data, device identifiers, or download content is transmitted to Tools for Divers or any third party during import.
- Sentry crash reporting. Slate uses Sentry to help us fix crashes. On Android, reporting is enabled in release builds configured for Sentry and sends only unhandled fatal crashes. Reports contain technical stack traces, crash time and report identifiers, app and SDK versions, device model and architecture, OS version, and technical thread and native-symbol information. They exclude dive data, logbook entries, user-entered text, user or installation identifiers, exception messages, breadcrumbs, screenshots, session recordings, and usage or performance tracking. iOS also sends anonymous crash reports via Sentry without dive data, logbook entries, or personal information.
- Premium purchase management. Slate uses RevenueCat to manage the optional Premium purchase through the App Store on iOS or Google Play on Android. On Android, RevenueCat starts when the app launches with its purchase configuration, including for users who have not purchased Premium, and checks purchase entitlement. It processes an anonymous app user identifier, purchase and entitlement information, and technical app, device, store, and language information. We do not receive or store your payment details.
- On-device analysis. Slate’s iOS insights feature uses Apple’s Foundation Models framework. All analysis runs entirely on your device. No dive data is sent to any server for processing. Android does not use AI or download AI models; its Insights summaries and charts are calculated locally from your recorded dives.
- No behavioral tracking by Slate. Slate on iOS uses no behavioral analytics, advertising, or advertising identifiers. Slate’s own Android code does not track behavior, display advertising, or use advertising identifiers; Google’s Maps SDK collects usage and technical data for dive-site previews as described below. Crash reporting and purchase management are limited to the purposes described here.
- No accounts. No sign-in or registration. Your logbook belongs to you.
Android-Specific Details (Slate)
- Google Play In-App Review. Slate uses Google’s In-App Review API to request a rating prompt after eligible completed actions. The counters and dates used to decide when to request a prompt stay on your device. The request communicates with Google Play; it does not send your dive data or those counters. Any rating or review you choose to submit is handled by Google Play.
- Google Maps dive-site previews. Slate includes Google’s Maps SDK to display a map centered on a saved dive site’s coordinates. The preview is shown only when the app has a configured Maps key and the site has valid coordinates. Google supplies the map; the coordinates determine the map area requested, and the site name is passed to the SDK as the marker title. The map does not use your device’s current location. When previews are used, Google’s SDK collects request metadata (device, OS and SDK details, result counts, and a library-usage attribution identifier), IP addresses, a pseudonymous SDK identifier, and SDK crash traces and metrics. Depending on configuration and API use, it also collects map interactions such as pans and zooms. Google uses these to maintain and improve its services, measure daily SDK use, understand library use, and improve stability. This data goes to Google; its Maps SDK disclosure does not specify onward sharing. Without a configured key, Slate shows a map-unavailable placeholder. If you tap “Open Maps,” Slate passes the site’s coordinates and name to your chosen map app, whose privacy practices apply.
- No Android backup. Slate disables Android Auto Backup and excludes its app data from Android cloud backup and device-to-device transfer. To keep a copy outside the app or move your logbook to another device, export a Slate Archive yourself. Files you export are controlled by the destination you select.
- Bundled fonts. Slate’s fonts ship with the app; they are not downloaded from a font service.
- External links. Privacy, terms, and license links open in your browser, and the companion-app link opens Google Play or its website. Feedback opens your email app with our support address and a subject; you choose whether and what to send. Sharing or exporting opens the app or file destination you select. These are deliberate handoffs, not background logbook sync. Visiting toolsfordivers.com is subject to the Marketing Website section below.
Slate Link — macOS Dive Computer Companion
Slate Link is a macOS companion app for Slate that downloads dive data from dive computers.
- Bluetooth dive computer communication. Slate Link uses Bluetooth Low Energy (BLE) to communicate with dive computers. All communication occurs directly between your Mac and your dive computer. No device identifiers, dive data, or download content is transmitted to Tools for Divers or any third party.
- iCloud sync. Slate Link uses iCloud and CloudKit to sync downloaded dive data to your Slate logbook on iPhone. This data is stored in your personal iCloud account and is not accessible to Tools for Divers.
- Crash reporting only. Slate Link sends anonymous crash reports via Sentry. No dive data or personal information is included.
- No accounts. No sign-in, no registration. Slate Link works entirely through your local device and your iCloud account.
Newsletter (Opt-In)
We publish an email newsletter with updates and dispatches from Tools for Divers — new features, dive tools, and what’s new across our apps. Subscribing is entirely optional, and we keep it simple and respectful.
- Double opt-in. When you sign up, we email you a confirmation link. You are not added to the list until you click it. If you never confirm, your address is never used.
- Stored on our own infrastructure. Your email address (and your name, if you choose to provide one) is stored on servers we operate. We do not hand your list to a third-party marketing platform.
- Resend delivers the mail. We use Resend solely as the delivery sub-processor that transmits the emails to your inbox. Resend processes the recipient address to deliver the message; it does not receive your data for its own marketing.
- One-click unsubscribe. Every email includes a one-click unsubscribe link, and every subscriber can adjust their email preferences or unsubscribe at any time from the links in any message.
- Never sold, rented, or shared. We never sell, rent, or share your email address with advertisers, data brokers, or any third party.
- Never used to profile or track you. We do not build advertising profiles, behavioral segments, or cross-site tracking from your subscription.
- The apps stay account-free. The in-app “Subscribe” link simply opens the newsletter signup on our website. The apps never see, collect, or transmit your email address — signing up is a separate, deliberate choice you make on the web.
Marketing Website
Our marketing website (toolsfordivers.com) uses:
- First-party page analytics — aggregate, cookieless visit counts we record ourselves; no cross-site tracking.
- The Meta Pixel (Meta Platforms, Inc.) — to measure advertising performance and understand how people discover Tools for Divers. The pixel may set cookies and share limited browsing events with Meta for ad measurement. You can limit this through your browser settings and your Meta ad preferences at https://www.facebook.com/adpreferences.
- A functional session cookie — to protect the newsletter subscribe forms against cross-site request forgery, the website sets one first-party cookie (named
site) holding a random security token. It is not an identifier, contains no personal data, and is never used for analytics, advertising, or cross-site tracking. It is marked HttpOnly, Secure, and SameSite=Lax — strictly necessary for the subscribe forms to work securely.
This marketing instrumentation applies only to the website. Our apps and products do not embed advertising pixels.
Our first-party page analytics work without identifying you: to count unique visits we derive a one-way hash from your IP address and browser user-agent combined with a secret salt that rotates automatically every day and is never written to disk. The original IP address and user-agent are discarded immediately and never logged or stored.
What We Never Do
No AI Training or Data Mining
- Your dive data is NEVER used to train artificial intelligence models
- We do not analyze your data for any commercial purpose
- No machine learning algorithms access your information for training or commercial analysis; Slate on iOS uses on-device models for your insights as described above, and Slate on Android uses no AI
- Your data stays yours — period
No Data Selling or Monetization
- We never sell, rent, or monetize your personal data, including your email address
- Your information is not shared with advertising networks or data brokers
- Our business model is transparent: paid apps, not data harvesting
- Professional divers can trust that sensitive dive information remains confidential
Behavioral Analytics and Tracking in Our Apps
- We do not collect your app usage patterns for behavioral analytics through our own app code; Slate on Android keeps local counters only to decide when to request a Google Play rating prompt. Google’s Maps SDK in Slate Android collects usage and map interaction data as described above
- No behavioral analysis or pattern recognition except for the Google Maps SDK usage and interaction collection described for Slate Android
- No advertising identifiers or behavioral profiles inside our apps
- No advertising pixels are embedded in our apps or products (the Meta Pixel runs on the marketing website only — see “Marketing Website” above)
- Sentry crash reports contain technical crash information — never your dive data or usage patterns. Slate Android’s permitted Sentry crash fields are listed in its section above; Google Maps SDK crash collection is described separately
No Personal Profiling
- We do not create profiles of your diving preferences
- No analysis of your equipment choices or dive site preferences
- We do not profile or segment newsletter subscribers for advertising
- Your diving skill level, certification status, or experience remains private
- No sharing with dive industry partners or certification agencies
Your Rights and Control
Complete Data Ownership
- You own 100% of your data
- Delete any or all data without restriction
- No vendor lock-in
Data Deletion
- Deleting Dalton removes all locally stored data
- Deleting Slate removes all locally stored dive data. On iOS, if iCloud sync was enabled, your data remains in your iCloud account until you delete it from iCloud settings. Slate on Android has no cloud sync or automatic backup. Copies you deliberately exported or shared remain wherever you saved or sent them
- Unsubscribing from the newsletter stops all newsletter email; you can also email us to have your subscriber record deleted entirely
- Crash reports already sent to Sentry are automatically deleted after 90 days
Third-Party Services
Sentry (Crash Reporting — All Apps)
- Purpose: Crash reporting to improve app stability
- Data Shared: Crash stack traces, device model, OS version; Slate Android also includes crash time and report identifiers, app and SDK versions, device architecture, and technical thread and native-symbol information
- Managed By: Sentry, on behalf of Tools for Divers
- Not Shared: Gas mixes, calculation results, dive logs, dive plans, or any user-entered data
- Privacy Policy: Sentry Privacy Policy
- Data Location: United States
- Retention: 90 days
Resend (Newsletter Email Delivery — Website Only)
- Purpose: Delivering the Tools for Divers newsletter and subscription-confirmation emails to subscribers
- Data Shared: The recipient email address (and name, if provided), so the message can be delivered
- Not Shared: Any dive data, gas mixes, calculation results, or app usage information — and the apps never transmit your email at all
- Privacy Policy: Resend Privacy Policy
- Note: Resend acts only as our delivery sub-processor; it does not use your address for its own marketing
Meta Pixel (Advertising Measurement — Marketing Website Only)
- Purpose: Measuring advertising performance and understanding how visitors discover Tools for Divers on our marketing website (toolsfordivers.com)
- Data Shared: Limited browsing events (such as page visits) and, where set, cookies, shared with Meta for ad measurement
- Not Shared: Any dive data, gas mixes, calculation results, app usage, or newsletter subscriber data — and the apps and products never load the pixel at all
- Privacy Policy: Meta Privacy Policy
- Your Controls: Limit this through your browser settings and your Meta ad preferences at facebook.com/adpreferences
RevenueCat (Purchase Management — All Apps)
- Purpose: Managing in-app purchases and subscriptions
- Data Shared: App Store (iOS) or Google Play (Android) transaction identifiers. Slate Android also uses an anonymous app user identifier and shares purchase and entitlement information and technical app, device, store, and language information for purchase management
- Managed By: RevenueCat; Apple manages App Store payments and Google manages Google Play payments
- Not Shared: Dive data, gas mixes, logbook entries, calculation results, or payment card details
- Privacy Policy: RevenueCat Privacy Policy
- Note: We do not receive or store your payment information. Slate Android can contact RevenueCat for entitlement checks and offerings before you buy Premium
- Store Privacy Policies: Apple Privacy Policy, Google Privacy Policy
Google Play In-App Review (Android Dalton and Slate)
- Purpose: Prompting users to rate the app
- Data Shared: Requests to Google Play to open the review flow; any rating or review you choose to submit is handled by Google Play
- Managed By: Google
- Not Shared: Dive data, gas mixes, calculation results, logbook entries, or Slate’s local review-eligibility counters
- Privacy Policy: Google Privacy Policy
Google ML Kit (Android Dalton Only)
- Purpose: On-device QR code scanning for sharing calculations
- Data Shared: ML Kit may download a barcode scanning model on first use
- Not Shared: No images, scan results, dive data, or personal information is sent to Google or Tools for Divers
Google Maps (Dive-Site Previews — Android Slate Only)
- Purpose: Displaying a map of a saved dive site when its detail screen is opened with valid coordinates and a configured Maps key. Google also uses SDK data to maintain and improve its services, measure daily SDK use, understand library use, and improve stability
- Data Shared: Map-view requests centered on the saved site’s coordinates; Slate passes the site’s name and coordinates to the SDK for its marker and camera. The SDK also sends Google request metadata (device, OS and SDK details, result counts, and a library-usage attribution identifier), IP addresses, a pseudonymous SDK identifier, and SDK crash traces and metrics. Depending on configuration and API use, it collects map interactions such as pans and zooms
- SDK Disclosure: Google’s Maps SDK for Android data disclosure describes collection by Google; it does not specify onward sharing. The library-usage attribution identifier is not used to identify users or attribute advertising
- Managed By: Google
- Not Shared: Your full logbook, dive profiles, notes, photos, or your device’s current location by Slate’s map feature
- Your Controls: The embedded map is used on the site-detail screen. “Open Maps” separately passes the site name and coordinates to the map app you choose
- Privacy Policy: Google Privacy Policy
iCloud / CloudKit (Optional Sync — Slate on iOS and Slate Link on macOS)
- Purpose: Syncing dive logbook data across your Apple devices
- Data Shared: Your dive log data, stored in your personal iCloud account
- Managed By: Apple, under your Apple ID and Apple’s privacy policies
- Not Accessible By: Tools for Divers — we cannot read, access, or retrieve your iCloud data
- Control: You can disable iCloud sync at any time in Slate’s Settings
- Privacy Policy: Apple Privacy Policy
Our marketing website uses first-party page analytics we operate ourselves, plus the Meta Pixel for advertising measurement (see “Marketing Website” above). Our apps do not use advertising identifiers. They do not use behavioral analytics, apart from Google’s Maps SDK usage and interaction collection in Slate Android described above. Their network services are described above; Slate Android’s browser, email, map-app, and file-sharing handoffs are described separately in its section.
International Privacy Compliance
GDPR (European Union)
- Legal Basis: Legitimate interest for app functionality, crash reporting, and aggregate first-party website analytics; consent for the marketing website’s Meta Pixel advertising measurement; consent (your double-opt-in confirmation) for newsletter email
- Data Minimization: Apps transmit limited data for crash reporting, purchase management, and the Android services described above, including Google Maps SDK identifiers, usage, interactions, and diagnostics in Slate Android; our first-party website analytics store only a daily-rotating one-way hash, never your raw IP or user-agent; the marketing-website Meta Pixel is limited to advertising measurement (see “Marketing Website”); the newsletter stores only the email address (and optional name) you provide
- Right to Access: Your logbook is stored on your device, with optional iCloud sync on iOS; crash reports exclude logbook content; you may request a copy of your newsletter subscriber record
- Right to Deletion: Delete app data by removing the app; unsubscribe and/or email us to delete your subscriber record; Sentry crash reports expire after 90 days
- Right to Withdraw Consent: Unsubscribe at any time via the one-click link in any newsletter email or your preferences page
CCPA (California)
- No Sale of Personal Information: We never sell your data, including your email address
- Marketing-Website Advertising Measurement: Our apps, products, and newsletter are never used for cross-context behavioral advertising. On our marketing website only, the Meta Pixel shares limited browsing events with Meta for advertising measurement (see “Marketing Website”); you can limit this through your browser settings and your Meta ad preferences at facebook.com/adpreferences
- Right to Know: This policy details all data practices
- Right to Delete: Remove the app to delete all local data; unsubscribe and/or email us to delete your subscriber record
- Right to Opt-Out: Not applicable to data sales (we do not sell data); you can unsubscribe from the newsletter at any time
Security Measures
Device-Level Security
- Local app data is protected by iOS or Android device security
- App sandbox security prevents unauthorized access
Network Security
- Dalton’s network activity is limited to crash reports (Sentry) and purchase verification (RevenueCat via the App Store or Google Play). On Android, Google Play In-App Review and ML Kit model download are additional minimal network activity.
- Slate on iOS uses crash reporting (Sentry), Premium purchase management (RevenueCat through the App Store), and optional iCloud sync (Apple CloudKit). Slate on Android uses crash reporting (Sentry), Premium purchase management (RevenueCat through Google Play), Google Play In-App Review, and Google Maps for configured dive-site previews. User-initiated browser, email, map-app, export, and sharing handoffs are described in Slate’s section; Android has no logbook sync or automatic backup
- No user data, dive data, or personally identifiable information is transmitted to Tools for Divers servers by the apps; newsletter signup happens only on our website, by your explicit choice
Changes to Privacy Practices
Notification Process
- Material changes require app update with clear notification
- Privacy policy updates posted at least 30 days before taking effect
- Continued app use constitutes acceptance of updated policies
- No retroactive changes to data handling without explicit consent
Our Commitment
- We will never change our core privacy-first philosophy
- Local data storage principle will always remain
- Any future features will maintain these privacy standards
Contact Information
Privacy Questions
Email: contact@toolsfordivers.com Include “Privacy” in your subject line. Response Time: Best effort, typically within a few days.
Data Subject Requests
For GDPR or CCPA requests:
- Email contact@toolsfordivers.com with “Privacy Rights Request” in the subject
- For an app-related request, include the app name and whether you use iOS, Android, or macOS; for a newsletter request, include the email address you subscribed with
- Specify your request type (access, deletion, portability)
- We will respond within 30 days
General Support
Website: toolsfordivers.com
Special Considerations for Professional Divers
Liability and Confidentiality
- No dive data sharing with insurance companies or employers
- Technical diving information stays under your exclusive control
- Military and commercial divers can trust complete data sovereignty
International Travel
- All data travels with you on your device
- Offline functionality ensures gas calculations and dive logging anywhere
- No concerns about dive data crossing international borders on our systems
Summary
- Privacy First: Your logbook stays under your control, with local storage, optional iCloud sync on iOS, and the limited services and deliberate sharing described above
- Crash Reporting: Technical crash reports via Sentry — no dive data included; Google’s Maps SDK in Slate Android also collects its own crash traces and metrics
- In-App Tracking: No advertising within our apps; no behavioral analytics except for Google’s Maps SDK usage and map interaction collection in Slate Android as described above. Slate Android’s review-eligibility counters stay local
- Opt-In Newsletter: Double opt-in, stored on our own infrastructure, delivered by Resend, one-click unsubscribe — never sold, shared, or used to profile you
- Apps & Products: No advertising pixels; no behavioral tracking except for Google’s Maps SDK usage and interaction collection in Slate Android — local logbooks, optional iCloud sync on iOS, and the services described above
- Marketing Website: First-party, cookieless page analytics we run ourselves, plus the Meta Pixel for advertising measurement (marketing site only; the apps never load it)
- No Selling Your Data: No advertising networks or data brokers buy or receive your data; we never sell your information
- Your Rights: Complete ownership, deletion control, and one-click unsubscribe
- Global Compliance: GDPR, CCPA, and international privacy standards
Tools for Divers respects the diving community’s values of professionalism, safety, and personal responsibility. Your trust is earned through transparency, not legal complexity.