Privacy policy

Last updated: [add date when published]

This policy describes what information Swimalysis collects, how it's used, and who it's shared with. It's written to plainly describe our actual data practices; it is not a substitute for legal advice, and should be reviewed by a lawyer before you rely on it as a binding legal document.

Information we collect

• Account information: email address, display name, and password (handled via Supabase Auth), or your Google account info if you sign in with Google.
• Profile information: USMS number, birth year, and avatar image, if you choose to provide them.
• Performance data: race times, splits, events, and personal bests you log.
• Training data: workouts you build or receive from a coach, logged workout sessions, completion notes, and (if applicable) dryland exercise data including logged weights or reps.
• Coach/athlete relationship data: if you connect with a coach or athlete, we store that connection and the access level (read or write) associated with it.
• Payment information (once subscriptions launch): we do not collect or store card numbers or other payment credentials ourselves. Payment is handled by Stripe, and we retain only a subscription status and Stripe's own customer/subscription identifiers.

How we use this information

We use your information to operate the app: to authenticate you, to display your training and race history back to you, to enable coach/athlete features you opt into, to send account-related email (password resets, confirmations), and, once subscriptions launch, to manage billing status. We do not sell your information, and we do not use it for advertising.

Who we share it with

We rely on the following service providers (subprocessors) to operate Swimalysis:

• Supabase — database, authentication, and file storage.
• Vercel — application hosting.
• Resend — sending account-related email (password resets, confirmations).
• Cloudflare — domain and DNS management.
• Stripe (once subscriptions launch) — payment processing.

We don't share your data with anyone else, and none of these providers are permitted to use your data for their own purposes.

Data retention & deletion

We retain your data for as long as your account is active. You can request deletion of your account and associated data at any time by contacting us at the email below.

Children's privacy

Swimalysis is not directed at children under 13, and we do not knowingly collect information from them.

Changes to this policy

If this policy changes materially, we'll update the date at the top of this page and, where appropriate, notify active users by email.

Contact

Questions about this policy or your data can be sent to [add contact email].