DRAFT, NOT YET IN EFFECT. These pages are drafts and do not apply to anyone yet.
Swim Beast Consumer Health Data Privacy Policy
DRAFT, NOT YET IN EFFECT. This notice does not apply to anyone yet. Not legal advice.
Effective date: [OWNER: the date this version is published]
Last updated: [OWNER: same date]
This page is Swim Beast's Consumer Health Data Privacy Policy. It explains what information in the Swim Beast app may count as "consumer health data" under laws such as Washington's My Health My Data Act and Nevada's consumer health data law, and what you can do about it. It adds to our main Privacy Policy at https://legal.swimbeast.app/privacy, which covers everything else.
Swim Beast is operated by [OWNER: legal name of the business or person that operates Swim Beast, its form, and its postal address, including the state]. Swim Beast is currently offered in the United States only, to people aged 13 and over.
1. What we collect that may be consumer health data
We collect what you type into the app, swims recorded with the Swim Beast Watch app and, only if you allow it, swims read from Apple Health. Today that may include:
- Your logged swims: date, distance, time, stroke, pool length, number of lengths, splits, and whether a swim was a time trial; swims imported from Apple Health (with your permission) also carry their start time and are marked as coming from your device. Swims recorded with the Swim Beast Watch app, and for open water the water temperature.
- Your check-ins after a swim (only if you are 18 or over and have the Pro plan level; you can skip them): how the swim felt, whether you felt pain, and where (shoulder, knee, back, hip, ankle, other).
- Water you log: the amount and the day.
- Notes you write on a swim: anything you choose to write, which might include how you felt or an injury.
- Your swimming goal, in particular "Lose weight".
- Your experience level (beginner, intermediate, advanced).
- Technique videos and their reviews (only if you use video review): a video shows your body and how you swim, and reviewers comment on your technique.
- Your Meet entries (only if you enter the Meet): your times and splits, and your division (female or male by sex at birth, or open).
We do not collect, today: heart rate or other body measurements; body weight; photos (other than a coach's certificate, if one is uploaded for verification). Videos only as described above. Open-water routes and live-link positions are location data, described in our Privacy Policy (sections 2.6 and 3a); we do not use them to infer anything about your health. The heart rate and calories measured by the Swim Beast Watch app, and the calories from Apple Health (eaten, and burned while swimming), stay on your devices and are never sent to us. If we add anything else, we will update this page and ask for your permission first, where the law requires it.
2. Why we collect it
Only to provide the app you asked for:
- to store your swims and show them back to you, with your totals and paces;
- to choose your starter week from your goal and experience level;
- to shape your weekly plan from your swims and check-ins;
- if you use them, to run video review (showing your video to the reviewers who review it) and the Meet (ranking your times and checking them);
- only if you turn on AI coaching, to write your weekly plan and answer you in the coach chat (through Anthropic).
We do not use it for advertising, we do not sell it, and we do not use it to make decisions about you outside the app.
3. Where it comes from
From you, when you type it into the app or record a swim with the Swim Beast Watch app, and, only if you allow it, from Apple Health on your phone. We do not buy it, and we do not get it from other companies.
4. Who receives it
We do not sell your consumer health data and we do not share it with other companies for their own use.
These service providers process it on our behalf only, under written agreements, to run the app:
| Provider | What it does | Health data involved |
|---|---|---|
| Supabase | Stores your account, profile and swims (our database and sign-in) | Everything in section 1. Data location: [OWNER: the Supabase project's region] |
| Anthropic | Writes your AI weekly plan and coach-chat replies, only if you turn on AI coaching | The training summary: each swim's date, distance, time, stroke and whether it was in open water (including swims from Apple Health and the Swim Beast Watch app), how each check-in said the swim felt, and any pain and where; your goal, experience level, training track and language; and the chat messages you type, with the coach's earlier replies and today's planned workout. Never heart rate, calories, your route or notes. Each chat message is also checked for signs that you may need urgent help. Anthropic may process the data in the United States or other countries; it deletes it within 30 days, or keeps a flagged request and reply up to 2 years and its safety scores up to 7 years. Details: https://legal.swimbeast.app/privacy (section 2.5) |
| Resend | Sends sign-in and password-reset emails, and the permission email to a parent of a Meet swimmer aged 13 to 17 | None (email addresses; the parent's email names the swimmer by display name and the month) |
| Apple | Distributes the app; Sign in with Apple; for TestFlight testers, passes on crash reports and feedback you choose to send | Only what you choose to include in feedback |
| Sightengine (planned, not yet connected) | Would check review comments and new videos for abusive or unsafe content | Review text and a short-lived link to a video when a review of it is requested. [OWNER: confirm before launch] |
No other company receives your consumer health data today; Anthropic receives it only if you turn on AI coaching. If "Show me on leaderboards" is on, other users see your display name, your rank and the distance you logged in the monthly challenge (Privacy Policy section 3); it is on by default if you are 18 or over and off by default if you are 13 to 17, and you can turn it off at any time. If you enter the Meet, signed-in users see your display name and time in its rankings, and the people who verify Meet times may see a video you gave as evidence. If you ask for a video review, the reviewer who takes it sees your video. Nothing else you log is shown to other users. If you share a live link, the people you send it to see your position during that swim, not any health data.
5. Your rights, and how to use them
You can:
- See and get a copy of your data: in the app, Profile → Settings → Privacy & data → Export my data. You get a JSON file with your data and a CSV of your swims, at once (what the export leaves out, and how to ask for it: Privacy Policy, section 9.1).
- Delete your data: in the app, Profile → Settings → Privacy & data → Delete account, then Delete my account. Your account and all your swims are erased from our database immediately. Copies in our database provider's backups expire on its schedule, within [OWNER: number of days], and are never restored into the app. Details: https://legal.swimbeast.app/privacy#deletion. You can also edit or delete any single swim or note in the app. Data Anthropic already received is deleted on its own schedule (Privacy Policy section 2.5). You cannot delete a single check-in in the app yet; email us and we will erase it.
- Ask which providers received your data: the list is in section 4; email us for a confirmation about your own account.
- Withdraw consent: AI coaching and video review rely on your agreement: turn AI coaching off at any time in Settings, and nothing more is sent to Anthropic; delete a video at any time, and it is no longer shown to anyone. Everything else in section 1 is needed to provide the app you asked for.
- Ask for anything else (for example to erase a swim you deleted from our server sooner, or a single note): email support@swimbeast.app [OWNER: confirm the support address].
We answer requests within 45 days. We may need to confirm that the request comes from the account holder, usually by asking you to write from the account's email address. We will not treat you differently for using these rights.
If we refuse your request, you can appeal by replying to our answer with "Appeal" in the subject. We will answer the appeal in writing within 45 days. If you are not satisfied, you can contact your state's Attorney General (in Washington: https://www.atg.wa.gov).
6. Contact
- Email: support@swimbeast.app
- Support page: https://legal.swimbeast.app/support
- Post: [OWNER: postal address]
7. Changes
We will update this page, and tell you in the app, before we collect any new kind of consumer health data or use it in a new way.