AspettoAspetto privacy policy
Live at app.getaspetto.com/privacy. Last updated: 19 October 2026.
Aspetto is an Apple Watch and iPhone app for freedivers and spearfishers, with a web app at app.getaspetto.com. It is made by Stuart Hosie in Cornwall, UK, who is the data controller. Contact: hello@getaspetto.com.
The short version
- Your spots, dives and catches are yours. We never sell them, never show them to other users, and never use them for advertising.
- You can use the app without an account. Then everything stays on your phone and watch, except the safety and sewage features described below.
- If you sign in, your data is stored in the cloud so it appears on your other devices and the web app.
- We use your dive data, without your name or email, to improve the app (for example, better visibility estimates). You can switch this off.
- You can delete your account and your cloud data at any time.
What we collect and why
| Data | When | Why | Kept |
|---|---|---|---|
| Email address | If you sign in | To sign you in with a one-time code | Until you delete your account |
| Spots (names, positions, notes, targets) | If you sign in | To sync between your devices | Until you delete them or your account |
| Dive sessions and dives (time, place, depth, duration, water temperature, visibility) | If you sign in | To sync and show your log | Until you delete them or your account |
| Catches (species, size, place, photos) | If you sign in | To sync your catch log | Until you delete them or your account |
| Your name and emergency contacts (names, phone numbers, emails) | If you set up the safety alert | So the safety alert can tell them if you don't surface | In your account until you remove them; see below for the server copy |
| Safety session (your position, start time, contacts) | While a safety session is running | To alert your contacts if your watch goes quiet or you send an SOS | 7 days, then deleted |
| Device ID, push token and your spot positions | If you turn on sewage alerts | To warn you of sewage releases near your spots | While you use sewage alerts; email us to have it removed |
| Email, your devices, what you dive, rough area, where you heard of us; a scrambled (salted hash) form of your IP address | If you sign up for the beta on getaspetto.com | To send TestFlight invites and beta and launch news (you confirm by email first). The scrambled IP only limits repeat sign-ups | Until you unsubscribe (link in every email), or 6 months after the App Store launch |
Health data. The watch reads depth, water temperature and heart rate during a session and can save each session as a workout in Apple Health. Health data stays in Apple Health. Heart rate is not sent to our servers.
Location. The app uses your location to show you on the map, save spots, and record where a dive started and ended. During a safety session the watch sends your position to our server so it can be passed to your contacts in an emergency.
Improving the app
If you sign in, we analyse dive data across all users, without names or emails, to improve features such as visibility estimates and conditions. This uses exact positions and dates, which could in principle identify a regular diver at a quiet spot, so you can switch it off: on the web app, You → Help improve Aspetto with my dive data. It is on by default.
Who else handles your data
We use a small number of services to run Aspetto. They process data only on our instructions.
- Supabase (database, sign-in and server functions), hosted in London (AWS eu-west-2).
- Resend sends sign-in codes and safety alert emails.
- Twilio sends safety alert texts (when switched on).
- Apple delivers push notifications and hosts Apple Health and Apple Maps.
- Cloudflare hosts the seabed charts and the website.
- OpenFreeMap (the web app's base map) and Google Fonts (its typefaces) receive your IP address when you open the web app, as any website you load does.
- Photon (photon.komoot.io), the web app's place search, receives what you type in the search box and your IP address.
Some features ask public services for information about a position: Open-Meteo (weather and rain), Copernicus Marine (sea conditions for visibility estimates), the Environment Agency and water companies (sewage and bathing water), and UK Hydrographic Office, EMODnet and BGS data (seabed). Some of these go through our own server first. These requests contain a position, not who you are.
We don't use advertising or analytics SDKs, and we don't track you across other apps or websites.
Cookies and storage. The web app keeps your sign-in and cached forecasts and seabed tiles in your browser's storage so it works quickly and offline. It sets no tracking or advertising cookies.
Your rights
Under UK GDPR you can ask to see, correct, export or delete your data, or object to how we use it. In the web app you can export a backup and delete your account (You → Delete account), which removes your spots, dives, catches, contacts and photos. For anything else, email hello@getaspetto.com. You can also complain to the Information Commissioner's Office (ico.org.uk).
Children
Aspetto is not meant for anyone under 16.
Safety
Aspetto is not a dive computer, and its safety alert is not a substitute for a dive buddy. Never dive alone. See the app's safety notes.
Changes
If we change this policy we will update the date above, and tell you in the app if the change matters.