Back

Privacy

Last updated June 2026 · DSGVO/GDPR aligned

What we collect

Names, emails, phone numbers, emergency contacts, medical declarations, training history, certificate records, and incident logs — provided by school owners and their students for the purpose of running freediving training safely.

Why we hold it

To deliver the booking, scheduling, safety and certification features of Aqua Flow. Medical and emergency data is held only as long as the student is active at the school, plus the retention period required by the certifying agency.

Who can see it

Only the staff of the school the student is enrolled at, plus the student themselves. Aqua Flow staff access data only on explicit support request or for security incident investigation.

Your rights

You can request a copy, correction or deletion of your personal data at any time by writing to privacy@aquaflow.app. Schools acting as data controller can export or delete student records from their workspace settings.

Where it lives

Encrypted at rest in EU-based managed Postgres, with strict row-level security so one school can never see another's data.