Privacy Policy

Last updated: September 2026

ManaMar is an underwater mapping app for divers, snorkellers and anyone who explores the sea. This policy explains what data we collect, why, and what control you have over it.

1. Who is responsible for your data

The data controller is Pablo Gallego Cascón (ManaMar), NIF 47943421J, Barcelona, Spain.

Contact for privacy matters: info@mana-mar.com or our contact form.

2. Data we collect

• Account data: your username, email address and profile photo (if you add one) when you register.
• Location: your device's location is used only to show your position on the map. It is processed on your device and is never sent to or stored on our servers. When you save a point, the coordinates you choose to save are stored in your account.
• Content you create: points, notes, tags, lists and photos you add to the map. Photos may contain metadata such as the date and location where they were taken.
• Usage and diagnostic data: technical data about errors and app performance, collected through Firebase Crashlytics and Performance Monitoring. This data is linked to a device or app identifier, not to your name. We do not use it to track you across other companies' apps or websites.

We do not collect payment information. ManaMar is completely free.

3. Why we use it (legal basis)

• To provide the service: create and manage your account, sync your points across devices, and let you share points via a code. Legal basis: performance of our contract with you (the Terms of Use).
• To show your position on the map. Legal basis: your consent, given through your device's location permission. You can withdraw it at any time in your device settings.
• To improve the app and fix errors: crash and performance data. Legal basis: our legitimate interest in keeping the app working and improving it.
• To send you service messages, such as important changes to these policies. Legal basis: legitimate interest and legal obligation. We do not send marketing without your consent.

4. Who can see your data

Points you create are private by default. They are only visible to people you choose to share them with, using a share code. We plan to add an optional public collaborative map in 2027; this policy will be updated before that feature launches.

We use the following service providers (processors) to run the service:

• Google Firebase — Authentication, Cloud Firestore (database), Storage (photos), Crashlytics and Performance Monitoring (error and performance data).
• Google Sign-In — optional login method.
• Vercel — website hosting.

These providers process data only on our behalf, under agreements that require GDPR-level protection.

International transfers: Google (Firebase, Sign-In) may process data outside the European Economic Area, including in the United States. These transfers are covered by the EU–US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses.

We may also disclose data to authorities when required by law. We never sell your personal data.

5. How long we keep it

We keep your data while your account is active. If you delete your account, your personal data and content — including backups — are fully erased within 30 days, except where we must keep something to comply with a legal obligation.

6. Deleting your account

You can delete your account and all your data at any time directly in the app: Profile → Account Settings → Delete account. This permanently deletes your account, your saved points, lists and photos.

You can also ask us to delete it by contacting info@mana-mar.com or our contact form.

7. Your rights

Under the GDPR, you can:

• access your data and get a copy of it (data portability),
• correct inaccurate data,
• delete your data,
• restrict or object to certain processing,
• withdraw consent at any time, with no effect on processing carried out before the withdrawal.

To exercise these rights, contact us at info@mana-mar.com or our contact form. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD, aepd.es).

8. Children

ManaMar is not directed at children under 14, and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will delete it.

9. Security

We use reasonable technical and organisational measures to protect your data, including encrypted connections (HTTPS) and access controls.

10. Changes to this policy

We may update this policy. If the changes are significant, we will notify you in the app or by email.