Privacy Notice

• Account data (name, email address, password credentials held in hashed form by our authentication provider) — to create and secure your account and sign you in. Legal basis: performance of our contract with you.
• Lesson content (the descriptions, framework, stage, equipment and other details you enter, and the plans generated for you) — to generate, save and display your lesson plans. Legal basis: performance of our contract. Please do not enter swimmers' names, health details or other personal data about third parties.
• Usage and subscription records (generation counts, plan tier, subscription status) — to apply plan limits and provide the service you have paid for. Legal basis: performance of our contract.
• Feedback and support messages (ratings, comments, framework requests, emails to us) — to answer you and improve the product. Legal basis: legitimate interests in supporting and improving our service.
• Technical data (IP address, device and browser information, error logs, basic usage telemetry) — for security, fraud prevention, diagnosing faults and improving reliability. Legal basis: legitimate interests.
• Marketing emails, where you have opted in — legal basis: consent, which you can withdraw at any time.

• Service providers / subprocessors — cloud hosting and database, authentication, AI model providers used to generate lesson plans, error monitoring and email delivery. They act on our instructions under contract.
• Paddle.com, our Merchant of Record, for the sale of subscriptions, subscription management, payments, tax compliance and invoicing. Paddle handles payment data under its own privacy policy.
• Professional advisers such as accountants and lawyers, where necessary.
• Authorities, where we are required to disclose by law.

We do not sell your personal data.

Some of our providers process data outside the UK and EEA. Where that happens we rely on UK/EU adequacy decisions or on standard contractual clauses together with appropriate additional safeguards.

We keep account and lesson data for as long as your account is active. If you close your account we delete or anonymise your personal data within 90 days, except where we must keep records longer for legal, tax or accounting purposes (typically six years for transaction records). Technical logs are kept for a short rolling period.

We apply appropriate technical and organisational measures, including encryption in transit, access controls, and database row-level security so that each account can only reach its own data. No system can be guaranteed completely secure, so please use a strong, unique password.

Under UK and EU data protection law you have the right to access your data, have it corrected or erased, restrict or object to processing, receive it in a portable format, and withdraw consent where we rely on it. You can also complain to your supervisory authority — in the UK, the Information Commissioner's Office (ico.org.uk). To exercise your rights email support@swimwise.dev; we respond within one month.

We use essential cookies and local storage to keep you signed in and to keep the service secure — these are required for the site to work. We do not use advertising cookies. Any analytics we use is limited to aggregate product usage. You can clear or block cookies in your browser settings, though signing in will not work without essential cookies.

Pedro Neves, trading as SwimWise AI — support@swimwise.dev