Privacy Policy

When you create an account, we collect:

• Your name and email address.
• If you sign in with Google, your Google profile name, email address, and profile picture URL. We do not request access to your Gmail, Drive, Calendar, or any other Google data.
• A password (hashed; we never see or store the plaintext).

When you use the product, we store:

• The workouts, sets, and program content you create, and any feedback or notes you add.
• Team information (team name, roster of coaches, training groups).
• Usage data (when you signed in, which workouts you opened, basic diagnostic logs).

Swimmer profiles.Coaches may build a roster of the swimmers they coach. Each swimmer's record is a profile created and controlled by the coach; swimmers do not have accounts or logins. A profile can include:

• Name and training group, plus optional sex and date of birth (used to match times against age-group standards and to route report links to the right recipient).
• An optional parent or guardian email and, for swimmers whose birth date shows they are adults, an optional swimmer email. These are used only to email season reports: to a parent or guardian for minors, or to the swimmer themselves for adults. We do not store email addresses for minor swimmers.
• Training data the coach records: attendance, logged results and test times, goal times, and optional wellness check-ins (1-to-5 scale answers about sleep, fatigue, soreness, and stress, plus an effort rating). Adult swimmers can also submit their own check-in through a private link that accepts only scale answers, never free text; that link exists only for swimmers whose birth date shows they are adults, so minors never submit anything to MySwimSet themselves.

Coaches are responsible for having the authority, from their club, school, or program and from families as required, to enter this information.

• To provide and operate MySwimSet.
• To authenticate you and keep your account secure.
• To send you account-related email (sign-in confirmations, billing receipts, security notices).
• To respond when you contact us.
• To improve the product based on aggregate usage patterns.

We do not sell your personal information. We do not show third-party advertising. We do not use your workout content to train AI models.

To run MySwimSet we rely on the following service providers:

• Supabase— database hosting and authentication backend. Your account and workout data are stored on Supabase infrastructure in the United States.
• Vercel— web hosting and content delivery.
• Google— if you sign in with Google, Google handles the authentication flow; we receive your email, name, and profile picture from Google.
• Google Workspace— we use Google Workspace for our own email (kevin@myswimset.com).
• Google Analytics— aggregate site-usage measurement, including counting signups that come from our own ads. Swimmer report and wellness check-in pages never load it, and swimmer names are stripped from the page addresses it receives.
• Microsoft Clarity— session replays and heatmaps that show us how the product is used so we can improve it. Every surface that displays a swimmer's name is masked in code before recording, and Clarity never runs on swimmer report or wellness check-in pages.
• Vercel Analytics— aggregate page-view measurement, with the same address stripping.
• Resend— delivers our transactional email, such as report emails a coach sends and our feedback notifications.
• Telegram— delivers instant notifications of in-app feedback to the founder.

Each of these providers has its own privacy practices. We choose providers we trust, but we do not control how they handle data once it reaches them.

We keep your account and workout data for as long as your account is active. If you delete your account, we delete your personal information and workouts from our active systems within 30 days. Backups containing your data are retained for up to 90 days, after which they are overwritten.

You can, at any time:

• Access and export the data you have entered into MySwimSet.
• Correct or update your account information from the settings page.
• Delete your account. Email kevin@myswimset.com with the subject “Delete my account” and we will process the request within 7 days.

If you are in California, the EU, or the UK, you have additional rights (right to know, right to deletion, right to portability, right to object). Email us to exercise any of these rights.

We use industry-standard protections: encrypted connections (HTTPS), hashed passwords, server-side authorization on every database write, and row-level security in our database. No system is 100% secure, but we treat your data with the same care we'd want for our own.

MySwimSet accounts are for adult coaches. We do not knowingly allow anyone under 13 to create an account; if you believe a child has created one, please email us and we will delete it.

Coaches do enter information about the swimmers they coach, including minors (see “Swimmer profiles” above). That information is provided by the coach, and we use it only to run the coach's season: reports, attendance, time-standard checks, and training analytics. We never sell it, never use it for advertising, and never use it to build profiles for any purpose outside the team. A minor's report link is emailed to a parent or guardian, never to the minor; we do not store email addresses for minor swimmers; and wellness self check-in links exist only for adult swimmers, so no minor ever submits information to MySwimSet directly.

Parents and guardians: to review, correct, or delete information about your swimmer, you can go through your coach, who controls the roster, or email us directly and we will work with the team to honor the request within 7 days.

We use cookies that are strictly necessary to keep you signed in (session cookies from Supabase). We also use a small set of first-party analytics cookies: Google Analytics, to measure site usage and how our own ads perform, and Microsoft Clarity, to power the session replays described above. These measure our site only. We do not use third-party advertising cookies that follow you across other sites, and we do not sell data to advertisers. Swimmer report and wellness check-in pages load no analytics at all.

MySwimSet is hosted in the United States. If you access the service from outside the US, your information will be transferred to and processed in the US.

If we make material changes to this policy, we will update the “Last updated” date and, for significant changes, email registered users at least 7 days before the change takes effect.

Privacy questions, requests, or concerns: email kevin@myswimset.com.