Privacy Policy

Last updated: July 2026

Dipped (“we”, “us”) is a directory and logbook for outdoor swimming spots in the UK and Channel Islands. This policy explains what personal data we collect, why, and what your rights are. It applies to dipped.app and the Dipped app.

Who is responsible for your data

Dipped is the data controller for the personal data described here. Contact us at hello@dipped.app.

What we collect

Account data. When you sign up we collect your email address and password (handled securely by our authentication provider — we never see your password), your display name, and a record of when you accepted our Terms of Use.

Location. When you check in at a pool, your device's location is used only at that moment to confirm you're near the pool. We store the pool you checked in at and the time of your visit — not your GPS coordinates. Location access is controlled by your device settings and only used when you check in.

Content you create. Your dips (check-ins), survey answers (water temperature, busyness, star rating), reviews, reactions, and any photos you upload. Reviews and photos are visible to other users alongside your display name.

Technical data. Like most websites, our hosting provider processes IP addresses and basic request logs to deliver the site and keep it secure.

What we use it for, and our legal bases

  • Running Dipped — your account, check-ins, challenges, and content: necessary to perform our contract with you (the Terms of Use).
  • Verifying check-ins — location at the moment of check-in: necessary to perform our contract with you.
  • Keeping the service secure and preventing abuse: our legitimate interests.
  • Legal compliance — records like your terms acceptance: legal obligation and legitimate interests.

We do not sell your personal data, and we do not use it for advertising.

Who we share it with

We use a small number of service providers to run Dipped: Supabase (authentication and database) and Vercel (hosting). They process data on our behalf under their own security and data-processing commitments. We don't share your personal data with anyone else unless required by law.

Where your data lives

Our providers may store or process data outside the UK. Where that happens, transfers are protected by recognised safeguards such as the UK's data bridge or standard contractual clauses.

How long we keep it

Your data is kept while your account is active. If you delete your account, your personal data is deleted. Anonymous, aggregated information (for example, overall check-in counts for a pool) may be retained as it no longer identifies you.

Your rights

Under UK GDPR you have the right to access your data, correct it, delete it, restrict or object to processing, and receive a copy in a portable format. You can delete your account — and your data with it — directly from your account settings at any time, or email us at hello@dipped.app.

If you're unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office (ico.org.uk).

Cookies

Dipped uses only essential cookies — the ones that keep you signed in and the site secure. We don't use advertising or third-party tracking cookies.

Children

Dipped is not for children under 16, and we don't knowingly collect their data. If you believe a child under 16 has an account, contact us and we'll delete it.

Changes to this policy

We may update this policy from time to time — the date at the top will always tell you when. Significant changes will be flagged in the app.

Contact

hello@dipped.app

© 2026 Dipped · Privacy · Terms · Contact

Swim at your own risk — conditions can change quickly, so check local advice before you dip.