Privacy Policy
Effective date: June 20, 2026 · Last updated: June 20, 2026
This Privacy Policy describes how Divehouse ("we", "us", "our") collects, uses, and shares information when you use the Divehouse mobile app and this website (together, the "Service"). Divehouse is operated by divehouse, LLC, with offices at 6901 S. Custer Rd, McKinney, TX 75070, USA. Questions? Contact hello@divehouse.app.
The Service is intended for users in the United States. We do not actively market or offer the Service to users outside the United States, and we do not currently configure the Service for compliance with non-US data protection regimes such as the EU/UK GDPR.
information we collect
account information
When you create an account, we collect your email address. Sign-in is passwordless: our identity provider, WorkOS, emails you a one-time code to verify it's you, and issues you a session when you sign in. After signing in, you provide profile details (first and last name, a unique username, and optionally a short bio and profile photo). Profile photos you add are stored with our file-storage provider, Cloudflare R2, and served from a URL on our infrastructure.
date of birth & age
During sign-up we ask for your date of birth to confirm you meet our minimum age requirement (16+). We retain your date of birth and a record of whether the age check was satisfied. Your birthday is not shown publicly.
activity & engagement data
As you use the Service, we collect information about your interactions:
- Artists you follow
- Tracks you like or save from the feed
- Genre preferences you set, or that we infer from your activity
- Search queries within the Service
- Information about your device and app (such as device type, operating system version, and IP address) for security, troubleshooting, and fraud prevention
location
Divehouse uses your location to set your home city and surface shows near you. You can set your city manually, or tap "Use current location," which asks your device for permission to share your location. If you allow it, the app resolves your coordinates to a city name using Apple's on-device location services and stores that city on your profile. We store your home city; we do not continuously track your precise location in the background.
You can change or clear your city at any time in the app, and you may revoke location permission at any time through your device's settings.
music service connections
You may connect a third-party music service so the app can play full tracks. With Apple Music (via Apple's MusicKit), we request your permission to play catalog content and to read whether you have an active subscription, so the app can enable full-track playback and related features. Spotify support is coming soon and will let the app play tracks through the Spotify app on your device (a Spotify Premium account is required). You can disconnect a music service at any time through your device settings, which removes the app's ongoing access.
camera & photo library
If you choose to add a profile photo, the app accesses your camera (to take a photo) or your photo library (to pick one), only when you initiate it. The image you select is uploaded as your profile photo; we don't access your camera or library otherwise.
notifications
If you opt in to push notifications, we send alerts about tours, shows near you, and updates from artists you follow. We store a push token so we can deliver these. You can turn notifications off at any time in your device settings or in the app.
analytics
We collect aggregate, de-identified usage information (such as which features are used and how often) to understand how the Service is used and to improve it. This data is used in aggregate and is not used to identify you individually.
how we use information
We use the information we collect to:
- Provide, maintain, and improve the Service
- Personalize music and event discovery and recommendations
- Enable full-track playback through your connected music service
- Send transactional messages (sign-in codes) and, if you opt in, push notifications about shows and artists you follow
- Detect, prevent, and address technical issues, fraud, or abuse
- Comply with legal obligations
how we share information
service providers (subprocessors)
We share information with vendors who help us operate the Service. These providers process information on our behalf under contractual data protection terms:
- WorkOS— identity & passwordless authentication
- Convex— application database & backend
- Cloudflare R2 — file storage (your profile photo)
- Apple Music / MusicKit — music playback and subscription status (when you connect Apple Music)
- Spotify — music playback (when you connect Spotify; coming soon)
- Vercel — hosting for this website
- Resend — email delivery (sign-in codes and support replies)
with other users
Some of your profile is visible to others by design: your display name, username, and profile photo represent you in the app. You can edit these at any time.
legal & safety
We may disclose information if required by law, subpoena, or to protect the rights and safety of users or the Service.
we do not sell your information
We do not sell personal information to third parties for advertising or marketing purposes.
on-device storage & cookies
The app stores some preferences (such as your chosen music service and notification settings) on your device. This website uses a session cookie set by our identity provider to keep you signed in, and minimal storage for basic functionality. You can clear app data through your device settings and control cookies through your browser settings.
your rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate information
- Delete your account and associated data
- Export your data in a portable format
- Withdraw consent for optional processing (e.g., music service connections, location, or notifications)
To exercise these rights, or to request deletion of your account, email hello@divehouse.app.
If you are a California resident, you have rights under the CCPA/CPRA, including the right to know what personal information we hold, request deletion or correction, and opt out of any "sale" or "sharing" (we do neither). You may exercise these rights via the contact above.
data retention
We retain your account information while your account is active. When you delete your account, we delete or anonymize your personal information within 30 days, except where we have a legal obligation to retain it.
minors
The Service is intended for users 16 years of age or older. We do not knowingly collect information from anyone under 16. If you believe a minor under 16 has provided us information, please contact us at hello@divehouse.app so we can remove it.
security
We use reasonable technical and organizational measures to protect your information, including encryption in transit and at rest, access controls, and regular security reviews. No system is perfectly secure, and we cannot guarantee absolute security.
changes to this policy
We will update this policy when our practices change. For material changes, we'll notify you by email and/or an in-app notice before the changes take effect. The effective date at the top reflects the current version.
contact
Email: hello@divehouse.app
Mailing address: divehouse, LLC, 6901 S. Custer Rd, McKinney, TX 75070, USA