Privacy Policy

AquaPlane App · Operated by BLUEECHO MARINE – FZCO
Effective Date: 13 May 2026

1. Introduction

This Privacy Policy explains how BLUEECHO MARINE – FZCO (“we”, “us”, “our”), the operator of the AquaPlane mobile application (“the App”), collects, uses, stores, and protects your personal information. This Policy applies to users of the App on iOS and Android platforms.

By downloading, installing, or using the App, you agree to the collection and use of your information as described in this Policy. If you do not agree, please do not use the App.

2. Data Controller

The data controller responsible for your personal data is BLUEECHO MARINE – FZCO, a Free Zone Company registered in Dubai, United Arab Emirates.

Company: BLUEECHO MARINE – FZCO
Address: IFZA Business Park, DDP, Dubai Silicon Oasis, PO Box 342001, Dubai, United Arab Emirates
General Enquiries: info@aquaplane-global.com
Legal / Privacy: danish@iaquagroup.com
Phone: +971 52 117 0329

3. Information We Collect

3.1 Account Information

When you create an account, we collect:

Full name
Email address
Phone number (optional)
Postal address (optional, used for warranty and support purposes)
Password (stored in encrypted form; we never store plaintext passwords)

Sign-in with Google. You may create an account or sign in using your Google account. If you do, Google provides us with your name, email address and profile picture. We do not receive your Google password. Your use of Google sign-in is also governed by Google’s own privacy policy.

3.2 Device and Product Data

When you pair your AquaPlane device (Mantis, Barracuda, or other supported products) with the App, we collect:

Device identifier and model
Firmware version and update history
Session data including speed, depth, dive duration, and battery status
Device pairing and connection logs

3.3 Location Data

With your explicit permission, the App collects GPS location data when a device is actively paired and in use. Location data is used to:

Display your position on the in-app map during a session
Log dive session routes and track history
Enable safety features including last known position

Location data is only collected while the App is in active use with a paired device. We do not collect background location data. You may revoke location permission at any time through your device settings, though this will limit certain App features.

3.4 Camera Access and Media

With your explicit permission, the App accesses your device camera and photo library to allow you to:

Capture photos and videos directly through the App during or after a dive session
Select and upload photos and videos from your device camera roll
Attach media to session logs and dive records within the App

Camera and photo library access is only used when you actively initiate a media action within the App. We do not access your camera or photo library in the background or without your knowledge.

Photos and videos you capture or upload may be stored on our servers to enable in-app session records and sharing features. You may delete your media at any time through your account settings.

You may revoke camera and photo library permissions at any time through your device settings (iOS: Settings > AquaPlane; Android: Settings > Apps > AquaPlane > Permissions). Revoking these permissions will disable media-related features within the App.

3.5 Sharing Within the App

The App allows you to share access to your devices and your individual dive sessions with other people. All sharing is initiated by you.

Device sharing. You may invite another person to one of your AquaPlane devices by entering their email address and selecting an access level:

View only — the recipient can see the device and its session history
Ride and settings — the recipient can additionally operate the device and change its settings
Device manager — the recipient can additionally manage sharing for that device

Session sharing. You may share an individual dive session with another person by email. The recipient can view that session’s route, charts, summary data and any photos or videos you attached to it. They do not gain access to the device or to your other sessions.

What this means for your data. When you share, the recipient can see the personal data contained in what you shared, including your location route, session data and any media attached. Media shared this way remains stored on our servers and is displayed to the recipient.

Pending invitations. If you invite someone who does not yet have an AquaPlane account, we store their email address until they register or until you cancel the invitation.

Revoking access. You may change or revoke any share at any time from the App. Once revoked, the recipient immediately loses access to the shared device or session.

We do not operate a public feed or community platform. Nothing you upload is visible to other users unless you have explicitly shared it with them.

3.6 Usage and Analytics Data

App version, operating system, and device model
Feature usage patterns and error/crash reports
Session frequency and duration

Analytics data is collected in aggregated, anonymised form where possible.

3.7 Communications

Support requests, feedback, and messages you send us

3.8 Future: Subscription and Payment Data

If and when subscription features are introduced, payment data will be processed by Apple In-App Purchase, Google Play Billing, or an authorised payment processor. We will not store full card or payment credentials. This Policy will be updated prior to any payment features going live.

4. How We Use Your Information

To create and manage your account
To enable pairing and control of your AquaPlane device
To display real-time session data and dive history
To store and display photos and videos attached to your session records
To enable you to share devices and dive sessions with people you invite
To deliver invitations to recipients you nominate by email
To deliver firmware updates and product notifications
To provide customer support and respond to enquiries
To improve the App and develop new features
To send service-related notifications
To comply with legal obligations under UAE law and applicable international regulations
To detect and prevent fraud, misuse, or security incidents

5. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA) and United Kingdom, we process your personal data under the following legal bases:

Contract performance: to provide App functionality you have requested
Legitimate interests: app improvement, security, fraud prevention, and service communications
Consent: for location data, camera access, photo library access, and non-essential analytics
Legal obligation: to comply with applicable law

Where processing is based on consent, you have the right to withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing

We do not sell your personal data. We may share data with:

Other users you invite. When you share a device or a dive session, the recipient receives access to the data contained in that share. You control who receives access and may revoke it at any time.
Cloud hosting and infrastructure providers (data processors acting under our instructions)
Analytics providers for anonymised crash reporting and usage data
Apple and Google for app distribution, update delivery, and (when applicable) in-app purchase processing
Legal or regulatory authorities where required by applicable law

Any third-party processors are bound by data processing agreements and may not use your data for their own purposes. Other users you share with are not processors; they receive access at your direction and we do not control what they do with what they see.

7. International Data Transfers

BLUEECHO MARINE – FZCO is based in the UAE. Your data may be processed on servers located outside your country of residence. For EEA users, any transfer outside the EEA will be subject to appropriate safeguards, including Standard Contractual Clauses (SCCs) where required under GDPR.

8. Data Retention

Account data: retained while your account is active and for a reasonable period thereafter
Session, device, and media data: retained for the duration of your account and deleted from our servers when you delete your account. Sessions and media you have shared with others become inaccessible to those recipients as soon as you revoke the share or delete your account
Pending share invitations: the recipient’s email address is retained until they register or you cancel the invitation, whichever is sooner
Anonymised analytics: may be retained indefinitely in aggregated form
Legal records: retained for minimum periods required under UAE law

9. Your Rights

Depending on your jurisdiction, you may have the following rights:

Access: request a copy of the data we hold about you
Correction: request correction of inaccurate or incomplete data
Erasure: request deletion of your data, including stored media
Restriction: request that we restrict processing of your data
Portability: receive your data in a structured, machine-readable format (EEA/UK users)
Objection: object to processing based on legitimate interests
Withdraw consent: for location data, camera, and photo library access at any time via device settings

Deleting your account

You can delete your account at any time from Account Settings in the App. Deletion is permanent and cannot be undone. Your profile, dive sessions, attached photos and videos, and device links are removed from our servers, and any access you had shared with others is revoked.

A limited amount of data may be retained where we are required to do so by law, or to prevent fraud and abuse. Anonymised analytics that cannot be linked back to you may be retained in aggregate form.

To exercise any other right, or to request deletion without using the App, contact us at danish@iaquagroup.com or visit https://aquaplane-global.com/delete-account. We will respond within 30 days. EEA/UK users also have the right to lodge a complaint with their national data protection authority.

10. Children’s Privacy

The App is not directed at children under the age of 13 (or 16 in certain EEA jurisdictions). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data or media, please contact us and we will delete it promptly.

The App is rated for users aged 13 and above on both the Apple App Store and Google Play Store.

11. Security

We implement industry-standard technical and organisational security measures including encrypted data transmission (TLS), encrypted password storage, access controls, and secure media storage. No system is completely secure; if you believe your account has been compromised, contact us immediately at danish@iaquagroup.com.

12. Third-Party Links and Services

The App may integrate with third-party services, such as mapping providers used to display your dive routes. This Policy does not cover those providers’ data practices, and we encourage you to review their privacy policies.

13. Push Notifications

With your permission, we may send push notifications for firmware updates, session summaries, and service announcements. You may opt out at any time through your device notification settings.

14. Changes to This Policy

We may update this Policy at any time. For material changes — including any new data types we collect — we will notify you via the App or by email before changes take effect. Continued use of the App after the effective date constitutes acceptance.