HomeTrust
Trust, written down.
How DiveHive protects waivers, medical answers, payments and personal data, and exactly who can see what. In plain words, with no badges we have not earned.
Medical answers never appear in notifications or analytics either.
Sealed waivers
A signature you can check, years later.
Every waiver and medical form is signed with a drawn signature and an audit trail, rendered as a PDF and sealed with a digital signature. Any change afterwards breaks the seal, and the seal can be checked in standard PDF tools.
- Your own text. Use DiveHive's template as a start, or your lawyer's waiver. Each version is kept.
- New version, new signature. Change the waiver and divers sign the new one.
- Guardians sign for minors. From their own account or on the shop's tablet.
- Signed byMara S.
- Time14 Oct 2026 06:12
- DeviceOwn phone
- VersionWaiver v4
- Fingerprinta3f9…c21e
Seal valid. Unchanged since signing.
Medical and retention
Medical answers stay with the shop. Records leave on time.
Medical answers are per shop and fresh each time; there is no shared medical record across shops. The shop owner decides how long each kind of document is kept, and DiveHive deletes it when the time is up.
- A warning first. Records due for deletion are listed 30 days ahead.
- Incidents are held. Records linked to an incident are kept until it is closed.
- Every change logged. Retention changes and downloads go into the audit log.
- WaiversSealed PDFs7 yrs
- Medical formsAnswers and clearances2 yrs
- StatementsActivity and payment statements5 yrs
- Incident reportsAt least5 yrs
Defaults follow your country pack. Never less than a year.
Privacy
Private by default. Yours to take or delete.
Diver profiles are for buddies by default and nobody can search for you by name. Analytics are off until you say yes, in every country. Export your data any time, and delete your account with a 30-day grace period.
- Never sold. DiveHive never sells personal data.
- One baseline for everyone. GDPR-level privacy rules wherever you live.
- Hosted in Singapore. With regional data cells as more regions open.
- Profile for buddies onlyOnly buddies see your full profile
- Findable by nameOff until you turn it on
- Visible to divers on my tripsYour choice per account
- Analytics cookiesOff by default, in every country
Money
DiveHive never touches your guests' money.
Guests pay the shop's own merchant account through a payment provider the shop chooses. DiveHive takes 0% and never holds funds. Your DiveHive subscription is sold by Paddle.com, our Merchant of Record, which handles your invoice and tax.
- No card data with us. Cards go to the payment provider or Paddle, never to DiveHive.
- Honest receipts. Receipts for guests are clearly marked as not official invoices.
- Refunds between you and the guest. Through your provider, under your rules.
- Your plan is billed by Paddle, which issues the invoice and handles tax and refunds.
Who is responsible for which data.
Set out in our privacy policy and data processing agreement, part of the Terms.
The shop decides
For the data a shop collects about its guests, the shop is the controller and DiveHive processes it on the shop's behalf.
- Waivers and medical forms
- Bookings and guest details
- Notes and incident reports
DiveHive decides
For your own account, DiveHive is the controller and answers to you directly.
- Your diver profile, certifications and logbook
- Buddies and settings
- Shop owner and staff accounts, subscriptions
How the data is protected.
What is in place, without certifications we do not have.
Every connection to DiveHive uses encryption.
Owner, admin, staff and viewer see only what their role allows.
Medical answers are stored and shown separately from everything else.
Opening sensitive records is written to the shop's audit log.
Rotating backups. Deleted data leaves them when they expire.
Security and server logs are kept for up to 90 days.
Shops are told without undue delay and within 48 hours.
Hosted in Singapore, run by a company in the Philippines.
What we do not claim.
- No security certifications such as SOC 2 or ISO 27001, yet.
- Our default medical form is a standard dive medical questionnaire, not an official agency form.
- Our default waiver is a starting point. Your own lawyer's text can replace it at any time.
- Forecasts and safety tools support your team. They never decide for it.
Children and families.
Junior divers dive with a guardian's consent, and some features stay off for them.
Accounts by age
- 16 and older: an own account
- 13 to 15: an own login only if a guardian invites them
- Under 13: a junior profile managed by a guardian, no login
Always for under 18
- A guardian signs waivers and medical forms
- No social features with strangers, no personalised recommendations, no marketing
- Never on a public profile, the Board or in marketing
The documents.
Behind Aya's Swiss Bakery, Sto. Niño, Puerto Galera, Oriental Mindoro 5203, Philippines
SEC reg. no. 2026070257796-63
Privacy and data questions: support@divehive.app
Everything else: hello@divehive.app
Questions about trust.
More in the FAQ, or write to support@divehive.app.
Who owns a shop's waivers and medical forms?
The shop. DiveHive processes them on the shop's behalf under the data processing agreement, and never uses them for anything else.
Can DiveHive staff read medical answers?
Medical answers are visible to the shop's owners and admins and to the diver. DiveHive keeps them separate and logs access to sensitive records.
Where is the data stored?
In Singapore. More regions are planned as DiveHive grows, with your data kept in your region.
How do I get my data or delete my account?
Export your data from your settings at any time. Deleting your account starts a 30-day grace period, then it is gone. Records a shop holds stay with that shop for its retention period.
Does DiveHive sell or share data for advertising?
No. DiveHive never sells personal data, and analytics stay off unless you agree.
Questions we have not answered?
Write to support@divehive.app, or join the waitlist and ask us when DiveHive opens.