Reefie — Privacy Policy

Reefie is a focus timer with a diving theme. You pick a depth, focus for that many minutes, and catch collectible sea species. This policy explains exactly what data Reefie handles, where it lives, and how you can remove it. We have tried to keep it short and honest.

The short version: Reefie asks for an email address, a password and a diver name, so your reef belongs to you rather than to one phone. Your email is only ever used to confirm the address and to help you get back in — never for marketing. Reefie never asks for a photo and has no access to your camera or photo library. You can delete everything from inside the app at any time. We do not sell your data and there are no ads or third-party trackers.

Who we are

Reefie ("we", "us") is an independent app. If you have any question about this policy or your data, contact us at support@reefie.io.

Your account

Reefie uses accounts. To create one you give us an email address, a password, and a diver name. The account is what your collection belongs to, which is why it survives changing or reinstalling on a new phone — something the previous device-only identity could not do.

We do not collect your phone number, real name, date of birth, contacts, or location.

Your password is never stored. What we store is a salted scrypt hash of it, which cannot be reversed back into the password. Nobody at Reefie can read it, and we will never ask you for it.

Your email address is used for exactly two things: sending you a link to confirm the address is yours, and identifying your account when you sign in. We do not send marketing, newsletters, or promotions, and we do not share or sell it. Confirming your address is optional — Reefie works fully without it — but it is what lets you prove the account is yours if you lose access.

Staying signed in. When you sign in, your phone receives a random session token, which it keeps in the iOS Keychain. We store only a hash of that token. Signing out, or deleting your account, destroys it.

Sign in with Apple. If you use it, Apple gives us a unique identifier for your Apple ID and, if you allow it, an email address — which may be one of Apple's private relay addresses. That is all we receive; we never see your Apple ID password.

Your device also generates a random identifier (a UUID) sent as the x-device-id header. It grants no access to anything and is used only to rate-limit abuse per install rather than per network address.

What we store on our server, and why

To make the social features work — friends, group dive rooms, trading, and the leaderboard — a small amount of data is stored on our server. Here is the complete list:

What	Why we store it
Your email address	To identify your account when you sign in, and to send the one link that confirms the address is yours. Never used for marketing.
A hash of your password	To check your password at sign-in without ever storing the password itself. Not applicable if you sign in with Apple.
An Apple account identifier	Only if you use Sign in with Apple. It identifies your account to us and nothing else.
Session tokens (hashed)	So you stay signed in between launches, and so signing out can revoke access on that device.
Diver name and its first initial	So other divers can find you, add you as a friend, trade with you, and see you on the leaderboard.
An avatar background colour	A colour picked automatically when your account is created, used behind the initial of your diver name. Reefie has no profile photos, so this and your initial are the whole of your diver picture.
Dive activity	The depth, length in minutes, and timestamps of dives you complete, plus totals (total minutes, number of dives). This powers your stats, the leaderboard, and shared room progress.
Species you have caught	Your collection, so it is saved and so trades can be verified as fair.
Friend links	Who you have added, so your friends list works.
Room and expedition membership and dives	Which group dives you are in and your contributions to their shared progress.
Trades	Offers you send or receive, and their outcome.
Reports you file	If you report another diver, we store who reported whom and an optional short reason, so a human can review it for moderation.
Divers you have blocked	So the block keeps working. Blocking is symmetric and applies everywhere — neither of you appears to the other in the diver list, the leaderboard, trades or rooms. You can undo it in Settings.
What you have purchased	Whether Reefie Pro is active and when it runs out, whether you bought the one-time Lifetime unlock, and a record of each pearl purchase. We store this so that what you paid for follows your account to a new phone, and so that each purchase is credited exactly once. We never see or store your card details — only Apple does.
Last-seen time	Updated when your device talks to the server, so friends can see who is active.

Our server runs on Render and the database is hosted on Neon (PostgreSQL). See "Where your data lives" below.

What stays only on your phone

Some things never leave your device. They are stored locally on your phone (in the app's storage) and are not uploaded to us:

Your pearls, XP, and streaks
Your app settings and preferences

If you delete and reinstall the app, on-device data may be lost because it was only ever stored locally.

Your diver name is public

Your diver name is visible to other Reefie users. Other divers can see it when they add you as a friend, when you appear on the leaderboard, when you are in a shared room or expedition, and when you trade. Please do not put anything private in your diver name. Names are also checked automatically to block offensive content.

How we use the data

We use the data above only to operate the app's features: saving your progress, running friends, rooms, trading, the leaderboard, moderation, and keeping the service reliable and abuse-free (for example, basic rate limiting). We do not use your data for advertising, profiling, or cross-app tracking.

No tracking, no ads, no analytics

As of the effective date, Reefie contains no third-party analytics, no advertising, and no tracking SDKs. We do not track you across other companies' apps or websites, and we do not sell or rent your data to anyone.

Reefie does report crashes, which is a different thing and is described below. A crash report tells us that something broke and where in our code it broke. It is not used to build a profile of you, and it is not shared with anyone for their own purposes.

Crash reports

When the app hits an unexpected error, it sends a report to Sentry, our crash-reporting provider. That report contains the error, the stack trace around it, a short trail of the in-app actions that led up to it, and basic device information such as the model and iOS version.

It does not contain your name, your email address, your account identifier or your IP address. We configure Sentry with personal information switched off, which is what keeps a crash report unattributable to you rather than merely unlabelled.

Where your data lives (service providers)

We do not share your data with third parties for their own use. We do rely on infrastructure providers to run the service on our behalf:

Render — hosts our application server.
Neon — hosts our PostgreSQL database.
Resend — delivers the email that confirms your address. It receives your email address and the contents of that message, and nothing else.
Sentry — receives the crash reports described above. Our Sentry project is hosted in the European Union.
RevenueCat — checks with Apple that a purchase is genuine, and tells our server what you are entitled to. It receives your Reefie account identifier and the purchase details, so that a subscription you paid for follows your account to a new phone. It never receives your payment details, which only Apple sees.

These providers process data only to run the service for us. Payment itself is handled by Apple through the App Store — we never see or store your card details. See the Terms of Service and Apple's own privacy policy.

Retention

We keep your server-side data for as long as your diver exists — that is, until you delete it. When you delete your diver (see below), the associated data is removed from our database. Reports you filed about other divers may be retained as needed for moderation, and are removed if the accounts they relate to are deleted.

Deleting your data

You are in control. You can remove everything we hold about your device in two ways:

In the app: go to Settings and tap "Delete my diver & data." This calls our server and permanently removes your diver and everything attached to it — your stats, species, friend links, room memberships and dives, and trades — in one step.
By email: if you cannot use the in-app button, write to us at support@reefie.io from the address on your account and we will delete your data. Deleting your account also signs you out everywhere and destroys every session token attached to it.

Deletion is permanent and cannot be undone. On-device data (pearls, XP, settings) is removed by deleting the app from your phone.

Children

Reefie is a general-audience productivity app. It is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided data to us, contact us and we will remove it.

Security

Data sent between the app and our server travels over an encrypted (HTTPS) connection, and our hosting and database providers protect data in transit and at rest. Passwords are stored only as salted scrypt hashes and session tokens only as hashes, so a copy of our database would not hand anyone your password or a working session. Your session token is kept in the iOS Keychain rather than ordinary app storage. No system is perfectly secure, but Reefie still collects very little: no phone number, no real name, no contacts, no location.

Changes to this policy

We may update this policy as the app evolves — for example, when in-app purchases or new features go live. When we make a material change, we will update the effective date at the top and, where appropriate, note it in the app. Continued use of Reefie after an update means you accept the revised policy.

Contact

Questions, requests, or concerns about privacy? Email support@reefie.io.