Privacy Policy

Effective date: June 20, 2026 · Last updated: July 4, 2026

This Privacy Policy describes how Divehouse ("we", "us", "our") collects, uses, and shares information when you use the Divehouse mobile app and this website (together, the "Service"). Divehouse is operated by divehouse, LLC, with offices at 6901 S. Custer Rd, McKinney, TX 75070, USA. Questions? Contact hello@divehouse.app.

The Service is intended for users in the United States. We do not actively market or offer the Service to users outside the United States, and we do not currently configure the Service for compliance with non-US data protection regimes such as the EU/UK GDPR.

information we collect

account information

When you create an account, we collect your email address. Sign-in is passwordless: our identity provider, WorkOS, emails you a one-time code to verify it's you, and issues you a session when you sign in. After signing in, you provide profile details (first and last name, a unique username, and optionally a short bio and profile photo). Profile photos you add are stored with our file-storage provider, Cloudflare R2, and served from a URL on our infrastructure.

date of birth & age

During sign-up we ask for your date of birth to confirm you meet our minimum age requirement (16+). We retain your date of birth and a record of whether the age check was satisfied. Your birthday is not shown publicly.

activity & engagement data

As you use the Service, we collect information about your interactions:

• Artists you follow
• Tracks you like or save from the feed
• Playback activity: which tracks you play, how long you listen, and whether you skip or finish a track (used to improve recommendations)
• Genre preferences you set, or that we infer from your activity
• Search queries within the Service
• Reports you submit about content, and users you choose to block (used to operate our moderation and safety tools)
• Information about your device and app (such as device type, operating system version, and IP address) for security, troubleshooting, and fraud prevention

location

Divehouse uses your location to set your home city and surface shows near you. You can set your city manually, or tap "Use current location," which asks your device for permission to share your location. If you allow it, the app reads your coordinates, resolves them to a city name using Apple's on-device location services, and stores both the city and the coordinates on your profile so we can surface shows near you. Location is captured only when you set or update your home location; we do not track your location in the background.

You can change or clear your city at any time in the app, and you may revoke location permission at any time through your device's settings.

music service connections

You may connect a third-party music service. With Apple Music (via Apple's MusicKit), we request your permission to play catalog content and to read whether you have an active subscription, so the app can enable full-track playback and related features. If you connect Spotify, we access your Spotify library and playlists (via the Spotify Web API) to keep playlists you create or save in Divehouse in sync with your Spotify account; the app does not currently play audio through Spotify. You can disconnect a music service at any time (Spotify from within the app, Apple Music through your device settings), which removes the app's ongoing access.

camera & photo library

If you choose to add a profile photo, the app accesses your camera (to take a photo) or your photo library (to pick one), only when you initiate it. The image you select is uploaded as your profile photo; we don't access your camera or library otherwise.

notifications

The app delivers notices — such as tour announcements and updates from artists you follow — to an inbox inside the app. We do not currently send push notifications to your device. If we introduce push notifications, they will be opt-in, we will store a push token to deliver them, and you will be able to turn them off at any time in your device settings.

analytics & diagnostics

We use PostHog, an analytics provider, to understand how the Service is used and to diagnose problems. This includes usage events (such as screens viewed, features used, and playback activity), device information, and crash reports. This data is associated with your account (your user ID and email address) so we can troubleshoot issues affecting your account and improve the Service. It is not used to track you across other companies' apps or websites, and it is not shared or sold for advertising.

how we use information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Personalize music and event discovery and recommendations
• Enable full-track playback through your connected music service
• Send transactional messages (sign-in codes) and, if you opt in, push notifications about shows and artists you follow
• Detect, prevent, and address technical issues, fraud, or abuse
• Comply with legal obligations

how we share information

service providers (subprocessors)

We share information with vendors who help us operate the Service. These providers process information on our behalf under contractual data protection terms:

• WorkOS— identity & passwordless authentication
• Convex— application database & backend
• Cloudflare R2 — file storage (your profile photo)
• PostHog — product analytics, diagnostics, and crash reporting
• Apple Music / MusicKit — music playback and subscription status (when you connect Apple Music)
• Spotify — library and playlist sync (when you connect Spotify)
• Google Places — venue and city lookups when you search for a location (your search text is sent to Google through our servers)
• Vercel — hosting for this website
• Resend — email delivery (sign-in codes and support replies)

with other users

Some of your profile is visible to others by design: your display name, username, and profile photo represent you in the app, and comments you post are visible to other users alongside your username. You can edit your profile at any time; to remove a comment you posted, contact us at hello@divehouse.app.

legal & safety

We may disclose information if required by law, subpoena, or to protect the rights and safety of users or the Service.

we do not sell your information

We do not sell personal information to third parties for advertising or marketing purposes.

on-device storage & cookies

The app stores some preferences (such as your chosen music service and notification settings) on your device. This website uses a session cookie set by our identity provider to keep you signed in, and minimal storage for basic functionality. You can clear app data through your device settings and control cookies through your browser settings.

your rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate information
• Delete your account and associated data
• Export your data in a portable format
• Withdraw consent for optional processing (e.g., music service connections, location, or notifications)

To exercise these rights, or to request deletion of your account, email hello@divehouse.app.

If you are a California resident, you have rights under the CCPA/CPRA, including the right to know what personal information we hold, request deletion or correction, and opt out of any "sale" or "sharing" (we do neither). You may exercise these rights via the contact above.

data retention

We retain your account information while your account is active. When you delete your account, we delete or anonymize your personal information within 30 days, except where we have a legal obligation to retain it. Comments you posted remain visible for conversation continuity but are anonymized (shown as "[deleted]") and are no longer linked to you.

minors

The Service is intended for users 16 years of age or older. We do not knowingly collect information from anyone under 16. If you believe a minor under 16 has provided us information, please contact us at hello@divehouse.app so we can remove it.

security

We use reasonable technical and organizational measures to protect your information, including encryption in transit and at rest, access controls, and regular security reviews. No system is perfectly secure, and we cannot guarantee absolute security.

changes to this policy

We will update this policy when our practices change. For material changes, we'll notify you by email and/or an in-app notice before the changes take effect. The effective date at the top reflects the current version.

contact

Email: hello@divehouse.app
Mailing address: divehouse, LLC, 6901 S. Custer Rd, McKinney, TX 75070, USA