This Privacy Notice is to inform EU and U.K. citizens who use Subsurface how their personal information is used.
Personal information is limited to your email address, online and system identifies, enabling a registered user account to be created and maintained. The information is processed to provide the Subsurface application to registered users, the lawful purpose: contract obligation.
Personal information is held whilst a user is registered. User accounts can be deleted on request. See contact information below.
Subsurface is run on mirrored servers, one in the US the other in the EU (Germany). Personal information is protected by design and the application of security measures. Personal information is not shared with any other entity.
To contact Subsurface please reach out to the Data Protection Lead: Email:   dirk @ subsurface-divelog . org
Post mail: Subsurface Data Protection Lead, c/o DH Consulting, 12725 SW Millikan Way, #300 Beaverton, OR 97005 USA.
The EU regulatory authority Subsurface comes under is: https://datenschutz.hessen.de/
With the GDPR compliance out of the way, here is the summary that applies to everyone (since we don't actually track where you are from):
It’s simple. We do not use your data. We do not care who your friends are. We do not intend to market to you or to do anything else that’s annoying. There is no monetization and no other use or processing of your data - we only store it with the purpose of making it available to you again on your devices.
If you feel the inexplicable urge to support Subsurface via a donation (which would help offset the cost of providing this free service), you can do so at the GitHub Sponsor Page.