Privacy Policy for Apnea Diver
Last updated: October 8, 2026
1. Introduction
Apnea Diver ("the App") is provided by Vranjes Technologies, operated by Milovan Vranjes, who is the controller responsible for your personal data. This Privacy Policy explains what data the App handles, where it is stored, and your rights.
You can use Apnea Diver without an account. In that case your training data and settings stay on your device and are not sent to us. If you choose to create an account, the data described below is stored on our servers so that it can be synced between your devices.
2. Data We Handle
Without an Account (Stored Only on Your Device)
- Training sessions you record: type (CO2 table, O2 table, Pranayama, or stopwatch), start time, duration, rounds or cycles, and longest hold
- Training and app settings, including your daily reminder time
We have no access to this data. It is removed when you uninstall the App or clear its data.
Account Information
When you create an account, we store:
- First name and last name
- Email address
- Your password, in hashed form only (we cannot read it)
- A username, generated from your name, which you can change
Optional Profile Information
You may choose to add any of the following to your profile:
- Profile photo
- Country and year of birth
- A short bio
- Freediving experience level, certifying agency, and highest certification
- Self-reported personal bests (static breath-hold time, dynamic distance, depth)
All of these fields are optional and can be changed or removed in the App at any time.
Training Sessions (When Signed In)
While you are signed in, the training sessions recorded on your device are uploaded to our servers and linked to your account, so they are available on your other devices. Sessions you recorded before signing in are added to your account when you sign in.
Technical Data
- Sign-in sessions: we store a hashed token for each device you sign in on, so you stay signed in and can be signed out
- Server logs: the time, address, and result of requests to our servers are logged for security and troubleshooting and kept for up to 31 days
- Your IP address is processed when you connect, and is used to limit repeated sign-in and password-reset attempts
What We Do Not Collect
Apnea Diver does not:
- use analytics or tracking tools
- use advertising networks
- collect payment or financial information
- track your location
- read data from heart-rate monitors or other sensors
- share or sell your data to third parties
3. Device Permissions
- Notifications: used only for the optional daily training reminder. Reminders are scheduled on your device; we do not send push notifications from our servers.
- Camera and photos: used only when you choose to take or pick a profile photo. Only the photo you select is uploaded.
You can withdraw these permissions at any time in your device settings.
4. How We Use Your Data
We use your data solely to:
- create and secure your account
- store your profile and sync your training sessions
- send emails you request, such as a password-reset code
- protect the service against abuse
- respond to support requests
We do not use your data for marketing or profiling.
Where the EU General Data Protection Regulation (GDPR) applies, we process account, profile, and training data to perform our agreement with you (Art. 6(1)(b) GDPR), and technical data on the basis of our legitimate interest in operating a secure service (Art. 6(1)(f) GDPR).
5. Data Storage and Security
Data is transferred between the App and our servers over an encrypted connection (HTTPS). Passwords and sign-in tokens are stored only in hashed form. On your device, sign-in tokens are kept in the operating system's secure storage.
Profile photos are stored at a web address that is not listed anywhere but can be opened by anyone who has the address.
6. Service Providers
Apnea Diver contains no third-party analytics, advertising, or tracking SDKs. We use the following providers solely to operate the service, and they process data only on our behalf:
- a hosting provider for our application server and database
- Amazon Web Services (Simple Email Service, Frankfurt region) to deliver emails such as password-reset codes
- Microsoft Azure Blob Storage to store profile photos
7. Your Rights
You have the right to:
- access the personal data we hold about you
- correct inaccurate data (you can edit your profile in the App)
- delete your account and all associated data
- receive a copy of your data in a portable format
- object to or restrict processing of your data
- lodge a complaint with a data protection supervisory authority
Account Deletion
You can delete your account in the App under Account > Security > Delete account. Your account is then scheduled for deletion and you are signed out on all devices. After 7 days, your account, profile, profile photo, and synced training sessions are permanently deleted from our servers. Signing in again during those 7 days cancels the deletion.
If you cannot access the App, you can use our account deletion page or contact us at milovan@vranjes.me. We process such requests within 30 days.
Training data stored only on your device is not affected by account deletion. Uninstall the App or clear its data to remove it.
8. Children's Privacy
Apnea Diver is not directed at children under the age of 16, and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we will delete it.
9. Contact Information
For any questions, data requests, or account deletion, please contact:
Vranjes Technologies
Milovan Vranjes
Emilie-Mauerer-Str. 7
81248 Munich, Germany
Email: milovan@vranjes.me
Phone: +49 151 18054557
Imprint: vranjes.me/legal-notice
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in the App or applicable law. The latest version will always be available at this URL, with the date of the last update shown at the top.