Privacy Policy

When you create an account, we collect:

• Your name and email address.
• If you sign in with Google, your Google profile name, email address, and profile picture URL. We do not request access to your Gmail, Drive, Calendar, or any other Google data.
• A password (hashed; we never see or store the plaintext).

When you use the product, we store:

• The workouts, sets, and program content you create, and any feedback or notes you add.
• Team information (team name, roster of coaches, training groups).
• Usage data (when you signed in, which workouts you opened, basic diagnostic logs).

• To provide and operate MySwimSet.
• To authenticate you and keep your account secure.
• To send you account-related email (sign-in confirmations, billing receipts, security notices).
• To respond when you contact us.
• To improve the product based on aggregate usage patterns.

We do not sell your personal information. We do not show third-party advertising. We do not use your workout content to train AI models.

To run MySwimSet we rely on the following service providers:

• Supabase— database hosting and authentication backend. Your account and workout data are stored on Supabase infrastructure in the United States.
• Vercel— web hosting and content delivery.
• Google— if you sign in with Google, Google handles the authentication flow; we receive your email, name, and profile picture from Google.
• Google Workspace— we use Google Workspace for our own email (kevin@myswimset.com).

Each of these providers has its own privacy practices. We choose providers we trust, but we do not control how they handle data once it reaches them.

We keep your account and workout data for as long as your account is active. If you delete your account, we delete your personal information and workouts from our active systems within 30 days. Backups containing your data are retained for up to 90 days, after which they are overwritten.

You can, at any time:

• Access and export the data you have entered into MySwimSet.
• Correct or update your account information from the settings page.
• Delete your account. Email kevin@myswimset.com with the subject “Delete my account” and we will process the request within 7 days.

If you are in California, the EU, or the UK, you have additional rights (right to know, right to deletion, right to portability, right to object). Email us to exercise any of these rights.

We use industry-standard protections: encrypted connections (HTTPS), hashed passwords, server-side authorization on every database write, and row-level security in our database. No system is 100% secure, but we treat your data with the same care we'd want for our own.

MySwimSet is built for adult coaches. We do not knowingly collect personal information from anyone under 13. If you believe a child has created an account, please email us and we will delete it.

We use cookies that are strictly necessary to keep you signed in (session cookies from Supabase). We do not use third-party advertising cookies or cross-site tracking pixels.

MySwimSet is hosted in the United States. If you access the service from outside the US, your information will be transferred to and processed in the US.

If we make material changes to this policy, we will update the “Last updated” date and, for significant changes, email registered users at least 7 days before the change takes effect.

Privacy questions, requests, or concerns: email kevin@myswimset.com.