Privacy Policy

Who we are

DiveOS is a dive-center operations platform built by Tafuros. It is used by dive centers and their staff to run registrations, bookings, schedules, boat lists, equipment and finances. This policy covers the DiveOS web application, the DiveOS iOS application, and this website (diveos.tafuros.com).

What data DiveOS handles

Staff accounts. Name, email address and role, used to sign in and to attribute actions inside the platform (who approved a registration, who checked gear out).

Customer records entered by dive-center staff or by customers during registration. Contact details, booking and course information, signed liability and medical declarations, certification details, and photos uploaded as proof of certification. This data belongs to the dive center that operates the account; DiveOS processes it on the dive center's behalf so the center can run its operation and meet training-agency requirements.

Device push tokens. If a staff member enables notifications, a device token is stored so DiveOS can deliver operational alerts (for example, a new registration awaiting approval). Disabling notifications in system settings stops delivery; tokens for unreachable devices are removed.

What DiveOS does not do

• No advertising, and no advertising identifiers.
• No tracking of users across other companies' apps or websites.
• No sale of personal data - to anyone, ever.

Camera and photos (iOS app)

The iOS app asks for camera or photo-library access only when a user chooses to capture or upload a document, such as a certification card or a signed form. Images are uploaded to the dive center's account and are not used for anything else.

Where data lives

Data is stored on DiveOS servers and processed only to provide the service. Transactional email (booking confirmations) is delivered through our email provider; payment card processing is handled by the payment provider (PayPal) - DiveOS never sees or stores card numbers.

Retention and deletion

Operational records are retained for as long as the dive center's account is active, and as required for financial and training-agency record-keeping. A dive center can request correction or deletion of records, and individuals can direct requests about their personal data to the dive center they registered with or to us directly.

Contact

Questions about this policy or your data: use the contact form on diveos.tafuros.com.