Privacy Policy

Introduction

Welcome to SwimPractices. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you use our mobile application and web platform (collectively, "Services").

By using SwimPractices, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Services.

Information We Collect

1. Apple Sign-In Data (iOS App)

When you sign in using Apple Sign-In on our iOS app, we collect:

• Email Address: Your email address or Apple's private relay email if you choose to hide your email
• Full Name: Your first and last name as provided by your Apple ID
• Apple User ID: A unique identifier provided by Apple to identify your account

We use this information solely for account creation, authentication, and to provide you with a personalized experience.

2. Account Registration Data (Web App)

When you create an account on our web platform, we collect:

• Email Address: Used for account identification and password recovery
• Username: Your display name within the app
• User ID: A unique identifier assigned to your account

3. HealthKit Data (iOS App)

With your explicit permission, our iOS app accesses HealthKit to retrieve swimming workout data, including:

• Swimming Workouts: Distance, duration, and stroke type
• Workout Metrics: Swimming performance data and fitness information
• Activity Data: General workout and activity information related to swimming

Important: HealthKit data is only accessed when you grant permission through iOS system prompts. This data is used exclusively to enhance your training experience and is never shared with third parties. You can revoke HealthKit permissions at any time through your device's Settings app.

4. Swimming Practice & Preference Data

To provide personalized swim practice recommendations, we collect and store:

• Swimming Intervals: Your pace preferences for different strokes (freestyle, backstroke, butterfly, breaststroke, individual medley)
• Pool Preferences: Your preferred pool length (25 yards, 25 meters, 50 meters)
• Practice History: Swim practices you've created, completed, or saved
• Skill Level: Experience level to tailor workout difficulty
• Season Tracker Data: Optional training goals and progress metrics
• Pinned Practices: Practices you've bookmarked for quick access

5. Usage Data & Analytics

We automatically collect certain information when you use our Services:

• Device Information: Browser type, operating system, device model
• Usage Information: Pages viewed, features used, time spent in the app
• Performance Data: App crashes, errors, and performance metrics
• Location Data: Approximate geographic location based on IP address (web app only)

This data is collected through Google Analytics (Firebase) and is used to improve app performance and user experience.

How We Use Your Information

We use the collected information for the following purposes:

• Account Management: Create and manage your user account, authenticate your identity
• Personalized Experience: Generate customized swim practices based on your preferences, skill level, and goals
• AI Practice Generation: Use your historical data and preferences to create intelligent, progressive workout plans
• Progress Tracking: Track your training progress, total distance, and season goals
• Leaderboard Features: Display your total swimming distance on community leaderboards (updated every 24 hours)
• Service Improvement: Analyze usage patterns to enhance features and user experience
• Communication: Send you important updates about your account or our Services
• Technical Support: Respond to your requests and provide customer support

Data Storage & Third-Party Services

Firebase / Google Cloud Platform

We use Firebase (a Google service) to store and manage your data. Your information is stored in Firebase's Cloud Firestore database, which is subject to Google's security standards and privacy practices.

• What we store: User profiles, practice data, preferences, authentication tokens, and analytics
• Location: Data is stored on Google Cloud servers, which may be located in various geographic regions
• Privacy Policy: https://firebase.google.com/support/privacy

Netlify Identity

Our web application uses Netlify Identity for user authentication and account management.

• What they receive: Email address, username, authentication metadata
• Privacy Policy: https://www.netlify.com/privacy/

AI Practice Generation Service

To generate intelligent swim practices, we use an AI-powered service that receives:

• Your swimming preferences and interval settings
• Historical practice data and patterns
• Season progression information
• Distance and stroke preferences

This data is used solely to generate personalized workout plans and is not used for any other purpose.

Google Analytics

We use Google Analytics to understand how users interact with our Services. Google Analytics collects standard web analytics data including page views, session duration, device information, and approximate geographic location.

• Privacy Policy: https://policies.google.com/privacy
• Opt-out: You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on

Local Storage (Web App)

Our web application stores certain data in your browser's local storage to improve performance and reduce server requests:

• Cached practice data (refreshed every 50 minutes)
• Last fetch timestamps

This data remains on your device and can be cleared by clearing your browser's cache.

Data Sharing & Disclosure

We do not sell, trade, or rent your personal information to third parties. We only share your data in the following limited circumstances:

• Service Providers: With trusted third-party services (Firebase, Netlify, Google Analytics) necessary to operate our Services
• Public Information: Your username and total swimming distance may be displayed on public leaderboards
• Legal Requirements: When required by law, court order, or governmental regulation
• Safety & Protection: To protect the rights, property, or safety of SwimPractices, our users, or others

Data Security

We implement industry-standard security measures to protect your personal information:

• Encryption: Data transmission is encrypted using HTTPS/TLS protocols
• Authentication: Secure authentication tokens with automatic expiration (1-hour lifetime)
• Access Controls: Cloud Functions validate user permissions to ensure you can only access your own data
• Data Separation: Public and private user data are stored in separate database collections
• Token Management: Authentication tokens are not stored in browser storage for enhanced security

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

Your Privacy Rights

You have the following rights regarding your personal data:

• Access: Request a copy of the personal information we hold about you
• Correction: Update or correct your account information at any time
• Deletion: Request deletion of your account and associated data
• Portability: Request a copy of your data in a machine-readable format
• HealthKit Control: Revoke HealthKit permissions through iOS Settings at any time
• Opt-out: Opt out of analytics tracking through browser settings or Google Analytics opt-out

To exercise any of these rights, please contact us using the information provided below.

Data Retention

We retain your personal information for the following periods:

• Account Data: Retained for the lifetime of your account unless you request deletion
• Practice History: Retained indefinitely to maintain your training records
• Daily Generated Practices: Cleared and regenerated every 24 hours
• Cached Browser Data: Automatically cleared after 50 minutes
• Analytics Data: Retained according to Google Analytics retention policies (14-50 months)

Upon account deletion, we will remove your personal information from our active databases within 30 days, though some data may remain in backups for a limited time.

Children's Privacy

SwimPractices is designed for swimmers of all ages, including minors. We comply with the Children's Online Privacy Protection Act (COPPA) and do not knowingly collect personal information from children under 13 without parental consent.

If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us immediately, and we will delete such information from our systems.

International Data Transfers

Your information may be transferred to, and maintained on, servers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ.

By using SwimPractices, you consent to the transfer of your information to the United States and other countries where our service providers operate.

California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information held by businesses
• Right to opt-out of sale of personal information (Note: We do not sell personal information)
• Right to non-discrimination for exercising CCPA rights

To exercise these rights, please contact us using the information below.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. When we make changes, we will update the "Last Updated" date at the top of this policy.

We encourage you to review this Privacy Policy periodically. Continued use of our Services after changes are posted constitutes your acceptance of the updated policy.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: