DRAFT, NOT YET IN EFFECT. These pages are drafts and do not apply to anyone yet.

Swim Beast Privacy Policy

DRAFT, NOT YET IN EFFECT. This policy does not apply to anyone yet. Not legal advice.

Effective date: [OWNER: the date this version is published]
Last updated: [OWNER: same date]

Swim Beast ("Swim Beast", "we", "us") is a swim-training app. This policy explains, in plain language, what information the app collects, why, who else handles it, how long we keep it, and how you can see, download or delete it. Its address is https://legal.swimbeast.app/privacy.

It covers the Swim Beast app only. The swimbeast.app website (its free calculators, its optional analytics and its launch waitlist) has its own short privacy notice at https://swimbeast.app/privacy. If you joined the website's waitlist, that email address is held separately by the website's email provider for launch news; it is not part of your app account, and deleting your app account does not remove it (use the unsubscribe link in those emails, or email us, section 12).

Swim Beast is currently offered in the United States only.

Swim Beast is operated by [OWNER: legal name of the business or person that operates Swim Beast, its form (for example an LLC or a sole proprietor), and its postal address]. That is who is responsible for your information.

Some features described here are still being tested and are not yet available to everyone: technique video review, peer reviews, coach verification and the monthly Meet. This policy describes how they work, so it is already correct when they open.

1. The short version

• We collect what you give the app: your email address (and a password, or your Apple or Google sign-in), your date of birth, your onboarding answers and settings, a display name, your country, the swims and water you log, the workouts you schedule or build, and the version of the Terms you agreed to. If you allow it, the app also reads your swims and calories from Apple Health, and the Swim Beast app on Apple Watch saves the swims you record with it to Apple Health (section 2.4). You can also import swims from a Garmin FIT file (section 2.10).
• For open-water swims, we keep the route your Apple Watch recorded and, only while you share a live link, your phone's position (sections 2.6 and 3a). We keep the safety contacts you add and your check-ins after a swim.
• If you use video review, the app uses your camera, microphone or video library to record or pick a technique video, which is stored privately and shown only to the reviewers who review it (section 2.7). Reviews, reputation and review credits are stored too.
• If you enter the monthly Meet, we keep your entries, times and splits, and show your display name and time in the rankings (section 2.8). A swimmer aged 13 to 17 needs a parent's permission, which we ask for by email (section 7).
• If you turn on AI coaching, a training summary and your chat messages go to Anthropic (section 2.5).
• We use it only to run the app for you. We do not sell your data, there are no ads in the app, and we do not share your data with advertisers or data brokers.
• The app does not use any analytics, advertising or crash-reporting tools, and it does not track you across other apps or websites.
• Some of what you log may count as "consumer health data" under some US state laws. Our separate Consumer Health Data Privacy Policy is at https://legal.swimbeast.app/health-data (section 9.5).
• You can download your data (a JSON file plus a CSV of your workouts) and permanently delete your account at any time, directly in the app: Profile → Settings → Privacy & data.
• Swim Beast is for people aged 13 and over. We do not knowingly collect information from anyone under 13.

2. What we collect

2.1 Information you give us

2.2 Information created when you use the app

• Account records: an internal account ID, the sign-in method (email and password, Sign in with Apple, or Google), when the account was created, when you last signed in, and when you finished onboarding.
• Reviewer profile: every account has one. It holds your review credits, the number of reviews you completed, a reputation score from how helpful others rated your reviews, a performance tier worked out from your pace, whether you are a verified coach or a verified elite swimmer, and whether your reviewing is restricted. Only our server sets these.
• Review credits (section 2.7): a record of every change to your credit balance (a welcome or monthly credit, credits earned by reviewing, spent on a request, or refunded). Credits are not money and cannot be bought or cashed out. Each week we check that the records add up, and a mismatch is flagged for us to look at; nothing is changed automatically.
• Live link records: when each live link started, ended or was stopped, and when it expires. We never keep the link itself, only a scrambled fingerprint of it (section 3a).
• AI coaching records (only if you use AI coaching): how many coach messages you sent each day and in which time zone (for the daily limit), the time of each message (for about a day, section 6), your weekly plan requests, and for each AI request the feature, the AI model, its cost, the time, and whether it was a safety reply.
• Moderation records about you, if something you posted is reported or acted on: section 3b.
• Your plan level (free, Plus or Pro). Nothing can be bought in the app today: the Plus and Pro levels are given only to test accounts, by us.
• Technical connection data: like any online service, the servers that run Swim Beast receive your device's IP address and basic request information when the app connects. Our provider Supabase keeps server and sign-in logs that include IP addresses for a short period set by its plan ([OWNER: number of days, from the Supabase dashboard]). We use them only to keep the service running and secure.

2.3 What we do NOT collect

• No data from Apple Health unless you allow it (section 2.4). The iPhone app writes nothing to Apple Health; the Swim Beast app on Apple Watch saves the swims you record with it.
• No location data outside an open-water swim (section 2.6).
• No payment information. Nothing can be bought in the app today. Payments are planned; this policy will be updated before they start.
• No access to your phone's Contacts. Safety contacts are only the ones you type in yourself.
• No camera, microphone or photo-library access except for video review (section 2.7), and only when you choose to record or pick a video.
• No analytics, advertising identifiers or crash-reporting tools in the app. (If you test the app through Apple's TestFlight, Apple may collect crash reports and feedback you choose to send; see section 4.)

2.4 Apple Health (only if you allow it)

If you choose "Import from Apple Watch" (or Apple Health), iOS asks whether Swim Beast may read these types; you can allow or refuse each, and change your mind later in the iPhone's Settings → Health → Data Access & Devices → Swim Beast:

• Workouts and swimming distance: each swim's start time, duration, distance, pool length, number of lengths, stroke and where it was swum (pool or open water). Each pool or open-water swim you import becomes a swim in your account, stored with the others and marked as coming from your device. A route recorded by another app is not imported.
• Active energy burned: the calories burned during each swim, shown next to the calories you ate that day.
• Dietary energy (calories eaten): today's total, if a nutrition app writes it to Apple Health, shown on Home.

The calories (burned and eaten) are read on your phone to show you today's numbers and are never sent to our server. The Swim Beast app on Apple Watch saves the swims you record with it to Apple Health (the workout, distance, laps, strokes, calories, heart rate and, for open water, the route). The Watch app also sends each swim to the Swim Beast app on your iPhone, which saves it to your account on our server: the swim's details and, for open water, its route and the water temperature. The average heart rate and the calories the Watch measured reach your iPhone but are not stored or sent to our server. Apple Health data is never used for advertising or marketing, and never sold (Apple's rules and ours). We share it with no one except our service providers (section 4), and only to run the app for you. If you turn on AI coaching (section 2.5), the swims in your log can be part of the training summary sent to Anthropic, including swims imported from Apple Health and swims recorded with the Swim Beast Watch app: only each swim's date, distance, time, stroke and whether it was in open water. Heart rate, calories, your route and water temperature are never sent. A swim from Apple Health or the Watch that you have not corrected counts as a "watch-verified" time if you enter it in the Meet (section 2.8). Apps cannot see whether you refused access; if you did, the app simply finds no swims.

2.5 AI coaching (only if you turn it on)

If you are 18 or over, have the Pro plan level (section 2.2), and turn on AI coaching, Swim Beast uses Anthropic, the company that makes the Claude AI, to write your weekly plan and to answer you in the coach chat. You can say no and still get a weekly plan from Swim Beast's built-in rules, and you can turn AI coaching off at any time in Profile → Settings → Privacy & data → AI coaching; when it is off, nothing of yours is sent.

• For the plan, Swim Beast sends Anthropic a summary of your last four weeks of training: each swim's date, distance, time, stroke and whether it was in open water (including swims imported from Apple Health and swims recorded with the Swim Beast Watch app); for each check-in, its date, how the swim felt, and whether you reported pain and where; and your goal, experience level, training track and language. Built but switched off: the short labels of the technique faults reviewers found in your videos (labels only: no video, no reviewer, no comments) could be added to this summary; this is off, and we will update this policy before it is switched on.
• For the chat, it sends the messages you type, the coach's earlier replies in the conversation (for context), and the name of today's planned workout; your language and training track shape its instructions. Your latest message is also checked by Anthropic's AI for signs that you may need urgent help, so the app can show you the right support. The conversation itself is kept only on your phone (section 5).
• Never sent: your name, email address, date of birth, country, location, route, water temperature, notes, heart rate, calories, account ID and safety contacts (unless you type them into the chat yourself). The summary of your check-ins shown in the app is made on your phone.
• Built but switched off: a summary of the reviews of a video. When a video has several reviews, Swim Beast could send Anthropic each review's fault labels, comment and timestamp notes, labelled only "Reviewer 1", "Reviewer 2" and so on (no video, no names), to write one combined summary for the person who asked. This is off; we will update this policy before it is switched on.
• Anthropic's terms do not let it train its AI on this data. The data may be processed in the United States or other countries.

How long Anthropic keeps it: Anthropic deletes these inputs and outputs within 30 days of receiving them or writing the reply. If its automated safety systems flag a request as breaking its Usage Policy, Anthropic can keep that request and the reply for up to 2 years, and the safety classification scores it gave them for up to 7 years. It can also keep data longer where the law requires it. (Source: Anthropic's privacy centre, "How long do you store my organization's data?", read 2026-10-09.)

2.6 Location (open water only)

Swim Beast uses location only during an open-water swim, and never for advertising.

• Apple Watch: if you record an open-water swim with the Swim Beast Watch app, the Watch records your route and saves it to Apple Health; the iPhone app then saves the route with the swim in your account (section 2.4). It is shown to you on a satellite map and is in your data export.
• iPhone: while an open-water swim is running, the iPhone app uses your location to show your distance and position; this keeps working with the screen locked during the swim. These positions stay on your phone, except while you share a live link (section 3a). The iPhone's positions are never saved as the swim's route.
• The satellite map: to show it, your phone asks Apple Maps for map images of the area of your route (Apple's privacy policy applies).

2.7 Technique videos, peer reviews and coach verification (only if you use them)

Camera, microphone and photo library. iOS asks your permission before the app may use each one:

• Camera: to record a technique video of your swimming for review (the back camera; a recording stops at 10 minutes).
• Microphone: to record the sound with that video.
• Video library: to pick a video you already have. You choose the video in Apple's own picker, and the app receives only that video.
• Saving to your photo library: only when you choose Save Video for a highlight reel you made. The reel is made on your phone and is not uploaded.

What is uploaded and stored. If a video file is larger than 250 MB, the app first makes a smaller copy on your phone (at most 1080p); a smaller file is uploaded as it is. Then it uploads the video to a private storage area that only your account can write to (at most 10 minutes and 1 GB). The app does not blur faces or trim the video, so everything in the frame, including other people at the pool, is in the upload. Please film only yourself, or people who agreed. [OWNER: confirm on a device, before launch, whether the location and other details inside the video file are removed before upload.] When you ask for a review, we record your agreement to the video terms and which version you agreed to.

Who sees a video. You. The reviewers who take your request (a request can have more than one), and you, see it through a link that works for 15 minutes. Our moderators can open the video of any request. A video you give as evidence for a Meet time can be seen by the people who verify Meet times (section 2.8). A video is never public.

How long a video is kept. 30 days after you add it, unless you choose Keep; if you later un-keep it, it is deleted 30 days after that. A video you give for a Meet verification is kept at least 90 days, unless you choose Keep and later un-keep it (then, as above, 30 days from that moment). You can delete a video at any time. A moderator deletes a video that breaks the Community Guidelines. When a video is deleted, its file is deleted from storage too.

Peer reviews. A review holds the reviewer's score (1 to 10), the technique faults they tag, a comment (up to 2,000 characters), notes pinned to moments of the video (up to 500 characters each), and how helpful you rated it. The person who asked sees the reviewer's display name, performance tier, reputation, number of rated reviews and verified badges. In-app notifications and the reviewers you follow are stored too. Review credits: section 2.2.

Coach verification and elite claims. To be shown as a verified coach, you upload one document (a photo or a one-page PDF, at most 10 MB) to a private storage area, with the body that certified you and the certificate's expiry. To claim an elite result, you give a meet name, date, event and time (no document). Only our moderators see these; they open a document through a link that works for 15 minutes. A rejected claim and its document are deleted 30 days after the decision; an approved one is kept while your account exists.

Automatic checks (Sightengine; planned, not yet connected). The app is built to send every review comment and pin note, and each video when you ask for a review of it (through a link that works for 2 hours, so Sightengine fetches the file itself), to Sightengine, a content-moderation service, to catch abusive or unsafe content before others see it. It is not connected yet: until it is, a video waits for a human moderator, and a review with written comments cannot be posted. [OWNER: confirm before launch whether Sightengine is used, and its retention and data location.]

2.8 The monthly Meet (only if you enter it)

• What we keep for each entry: the event, month and course; your country at the time of entry; your division (female or male by sex at birth, with your statement that it is correct, or open); whether it is a practice entry; your time and splits; which swim it came from; how the time was verified (from Apple Health or the Watch, uncorrected, or entered by hand); your statements about your swimwear and the pool; when you swam it and when you entered.
• Who can enter: short-course-yards events are for accounts in the United States; short-course-metres events are for people 18 or over. A swimmer aged 13 to 17 needs a parent's permission (section 7).
• Checking times: some times are flagged automatically for a closer look (for example a time far from your history, or the leader of a group); only our moderators see the reason, and you see "submitted". A time can be checked against a video (section 2.7): a video of a swimmer aged 13 to 17 is seen only by verified coaches; an adult's also by experienced reviewers.
• What others see: the rankings show each ranked swimmer's display name and time to signed-in users. An entry that is being checked is shown like any other; practice entries, entries held back after a check, and entries of suspended or deleted accounts are left out.
• Challenges: you can challenge someone with an 8-character code. Only the two of you can see the challenge; each side sees the other's display name.
• Rule enforcement: if an entry is disqualified or a swimmer is suspended from the Meet, we keep that decision and its reason (section 6).
• Meet entries are kept while your account exists.

2.9 Sign in with Apple and Google

• If you sign in with Apple or Google, that company confirms who you are and our sign-in provider (Supabase) stores the sign-in link and the email address it gives us. With Apple we ask for your email address only, never your name.
• Hide My Email: if you choose it, we receive an Apple relay address; the app notices this on your phone and tells you before your profile is created, so you can use an existing account instead.
• Apple's sign-in token: so that we can disconnect Swim Beast from your Apple ID when you delete your account (as Apple requires), we keep Apple's sign-in token for your account, encrypted. About once a day we check with Apple that it is still valid. When you delete your account, we ask Apple to revoke it (section 9.2). If you stop using Sign in with Apple in your Apple ID settings, Apple tells us and we act on it.
• In Settings → Linked sign-in methods you can add Apple or Google to an existing account.

2.10 Garmin FIT files (only if you import one)

You can import a swim from a FIT file (the file a Garmin watch saves). The file is read on your phone; only the swim's details become a swim in your account (times, distances, pool length, strokes and stroke type), marked as coming from a Garmin device, with an identifier made from the device's maker and serial number and the swim's start time, so the same swim is not imported twice. GPS and heart rate in the file are skipped. The file itself is not uploaded.

3. What other people can see

Your display name is your public name. The app tells you this when you choose it.

• Community Leaderboard: each month's distance challenge ranks swimmers by the distance they logged. If "Show me on leaderboards" is on, other signed-in users see your display name, your rank and your distance there. It is on by default if you are 18 or over, and off by default if you are 13 to 17; anyone can change it at any time in Profile → Settings → Privacy & data. You always see your own standing. If you delete your account, your standings are deleted, finished months included.
• Meet rankings and challenges: section 2.8.
• Reviews: the person whose video you review sees your display name, performance tier, reputation and badges with your review (section 2.7).
• Report and block: anyone can report a display name, a video, a review or a comment (section 3b), and can block a person; the blocked person is not told. You can see and undo your blocks in Privacy & data → Blocked Users.
• Names: names that could be mistaken for Swim Beast staff (for example "admin", "support", "moderator") and names containing slurs or abuse are not allowed.

When someone picks a display name, the app tells them whether that name is already taken. It never shows them who has it.

Choose a name you are happy for others to see, and don't use your real name if you'd rather stay anonymous.

3a. The live link (only if you turn it on)

• When you start an open-water swim, you can turn on a live link. The app makes a link for that swim and opens your phone's share sheet: you choose who gets it and how. Swim Beast never sends it.
• While the link is on, your phone sends its position (latitude, longitude, accuracy and time) to our server, about every 15 seconds.
• Anyone who has the link can open a web page, without an account, that shows whether the swim is live, when the position was last updated, your latest position and a drawing of your recent path. After you end the swim, it shows only that the swim ended and when. The page never shows your name, display name or email address.
• The link stops showing your position the moment you end the swim, or after 6 hours at the latest. If you turn sharing off before the swim starts, the link stops at once. If the app closes during a swim, the link is stopped the next time you open the app.
• We keep only a scrambled fingerprint of the link, never the link itself.
• If the person who has the link taps the button to open your last position in Maps, their browser opens Apple Maps at that position.
• How long the positions are kept: section 6.

3b. Reports, moderation and appeals

• Reports: a report records what was reported, the reason picked (for a video, review or comment: sexual content, harassment, comments about someone's body, contact outside the app, spam, off-topic or other; for a display name: offensive, impersonation, spam or other), and who reported it. The reported person never sees who reported them. We act on every report within 24 hours of receiving it.
• What moderators keep: their notes, each action they take (for example removing a review, a warning, or a suspension), its reason, and a copy of any text they removed. These are seen only by our moderators. We also look for patterns between accounts that may be trading favourable reviews; a possible pattern is flagged for a person to check.
• Warnings and suspensions: you are told in the app. A final suspension shows you its reason category (for example harassment), not the moderator's notes.
• Appeals: you can appeal a final suspension, a warning or the removal of your review once, in the app, within 14 days. A Meet disqualification or Meet suspension cannot be appealed in the app yet; email us (section 12). A moderator who was not part of the decision reviews it; while we have only one moderator, the same moderator reviews it again after at least 48 hours. We keep the appeal and its outcome.
• How long these are kept, and what happens to them when an account is deleted: section 6.

4. Who else handles your data

We use a small number of service providers to run the app. They process data only on our behalf, only for the purposes below, and under written agreements with us.

Before any new provider receives your data, we will add it to this list.

We do not sell your personal information, and we do not "share" it for cross-context behavioural advertising. We disclose information only when the law requires it (for example a valid court order), and we will tell you about such a request unless the law forbids it. If Swim Beast is ever sold or merged with another business, your information would move to the new owner under this policy, and we would tell you in the app before that happens.

5. What is stored on your phone

• Your swims and a copy of your profile are kept in the app's own database on your phone, so the app works at the pool without a connection. Swims you log offline wait in a queue and are sent once you are back online. This database is excluded from iCloud and computer backups.
• Your sign-in session is kept in the iPhone Keychain, set to this device only.
• Reminders: if you turn them on, the weekly reminder and the "it's been a few days" nudge are scheduled by the phone itself (no server sends them); they are cancelled when you sign out or delete your account.
• Water you log and the workouts you schedule are kept in the same on-phone database as your swims.
• Coach chat: the conversation is kept only on your phone; our server does not store it (each message passes through our server to Anthropic, section 2.5).
• Also on your phone: a copy of your safety contacts and check-ins, your AI weekly plans, a record of the swims synced from your Watch, and the Watch's motion recordings (used for stroke detection), which stay on the phone. During a live link the phone keeps only the link's internal number and end time, never the link itself. While a video uploads, the app keeps a temporary copy; a highlight reel's working files are deleted once it is made.
• All of these are in your data export (section 9.1) and are erased from the phone when you delete your account.
• During sign-up: if you are 13 or over, your date of birth and your agreement to the Terms (its version and time) are kept on the phone only until your profile is created, then deleted from the phone (they remain on your profile on the server). If the date you enter is under 13, no date is stored: the phone keeps only a "not eligible" flag, so the age screen cannot simply be retried with a different date. That flag stays until the app is deleted from the phone or its data is cleared.

6. How long we keep your data

• While your account exists, we keep your profile, swims, Meet entries, built workouts, reviews and approved verifications, so your history stays meaningful.
• Swims you delete: when you delete a single swim, it disappears from the app at once. On our server it is marked as deleted and kept (it is still part of your account, and it is included in your data export, labelled as deleted) until you delete your account. If you want a deleted swim erased from our server sooner, email us (section 12) and we will erase it.
• Videos: 30 days unless you keep them; at least 90 days if given for a Meet verification (section 2.7).
• Rejected coach or elite claims: deleted 30 days after the decision, with the document.
• A parent's email address (section 7): erased after that month's Meet is over and its review and dispute period has passed (17 days after the Meet weekend), and not while a check of that swimmer's result is still open. We keep a record that permission was asked and whether it was given, without the address.
• Challenge code tries are recorded to stop guessing; tries older than an hour are deleted the next time you try a code.
• Accounts that never finish sign-up: a sign-in that never created a profile is deleted automatically after 24 hours.
• Live link positions are deleted at our daily clean-up after the link ends or expires (so within about a day of that). The record that a link existed (its start, end and expiry times, no positions) is deleted 30 days after the link ends or expires.
• Routes stay with their swim. A swim you delete keeps its route on our server until you delete your account, as in the bullet above.
• Safety contacts are deleted from our server as soon as you remove them.
• Check-ins are kept while your account exists. You cannot delete a single check-in in the app yet; email us (section 12) and we will erase it.
• AI coaching records: the time of each coach message is deleted once it is more than about a day old, the next time you use the chat; the daily message counts and plan requests are kept while your account exists; the cost records of AI requests are kept for our spending limits.
• Moderation records, review credits and appeals are kept while your account exists.
• Anthropic keeps what it receives as section 2.5 says.
• When you delete your account, it is erased from our database immediately, with the exceptions listed in section 9.2 ("What we keep after deletion"). Backups: also section 9.2.

7. Age requirements and teenagers

• You must be 13 or older to use Swim Beast. If you sign up with email, the app asks for your date of birth before anything else. If you sign in with Apple or Google, that sign-in comes first and gives us your email address; the app then asks for your date of birth before it creates your profile. If you are under 13, no profile is created, that sign-in is deleted at once, no date is stored, and the age screen is blocked on that device. Our server also refuses any profile whose date of birth is under 13, and deletes any sign-in that has no profile after 24 hours.
• Swim Beast is not directed to children under 13. We comply with the US Children's Online Privacy Protection Act (COPPA): we do not knowingly collect personal information from children under 13, and if we learn that we have, we delete it.
• If you believe a child under 13 has given us information, contact us (section 12) and we will delete it.
• If you are 13 to 17: you can log and review your own swims, water and workouts, and use open water, safety contacts and the live link, without a parent's involvement. AI coaching and the after-swim check-in are only for people 18 or over. You are not shown on the Community Leaderboard unless you turn "Show me on leaderboards" on (section 3). Uploading videos is not open to you yet, except a video for a Meet verification once that is switched on; such a video is seen only by verified coaches.
• The Meet, for 13 to 17: to enter a ranked Meet event, you give a parent's or guardian's email address (it must be different from yours). We email that parent a link to a confirmation page, at https://legal.swimbeast.app/consent; opening the link does nothing: only pressing Confirm on that page gives permission, for every event you enter that month. The email names you by your display name and the month. You can resend it at most once every 15 minutes and 3 times a day, and the parent must confirm before the cutoff, 48 hours before the Meet weekend; otherwise the entry lapses. We keep the parent's address only as long as section 6 says. The link itself is held only until the email is sent (or sent again after a failure); after that we keep only a scrambled fingerprint of it. Planned: before a 13- to 17-year-old can join a coached team or have hydration or pain check-in patterns shared with a coach, we will also require a parent's consent. Those features are not built yet, and this policy will be updated before they launch.

8. Why we use your data

We use your data to provide the app you asked for: to create and secure your account, store and show your swims, set up your starter week, and send the emails needed to sign in; and, when you choose them, to share your live position with the people you send a link to, to run video review and the Meet (including checking times and enforcing their rules), to ask a parent's permission, and to write your AI weekly plan and coach replies. We use your date of birth for the age rules, and your country for Meet eligibility. We review reports and keep moderation records to keep people safe and the Meet fair. We do not use your data for advertising or profiling. Some Meet times are flagged automatically for a person to check, and a performance tier is worked out automatically from your pace; no automated decision alone disqualifies or suspends you: a person decides, and section 3b says which decisions you can appeal in the app.

9. Your choices and rights

9.1 See and download your data (export)

In the app: Profile → Settings → Privacy & data → Export my data. The app builds two files on your phone right away:

• a JSON file with your account details (email, sign-in method, account creation and last sign-in time), your full profile, your reviewer profile, all your swims, including ones you deleted (labelled as deleted), your water entries, scheduled workouts, dryland sessions and built workouts, your monthly challenge standings, the people you block and the reports you made, your safety contacts, your live link records and any positions we still hold, your check-ins, your weekly plans and plan requests, your AI coaching choice, your plan level, your coach message counts and times, the cost records of your AI requests, your Meet entries, your side of your Meet challenges, the parent permissions asked for you (without the link), and your video review data (your videos, requests, the reviews you received and gave, your verification claims and your notifications); plus what is only on your phone: your coach chat, your AI weekly plans, a record of the swims synced from your Watch, and a list of the Watch's motion recordings on the phone; and anything on your phone not yet sent to our server. Open-water swims include their route and water temperature; and
• a CSV file of your workouts, which you can open in a spreadsheet.

Not in the export today: your review-credit history, appeals, and moderation records about you. Email us (section 12) and we will send them.

The files are handed to your phone's share sheet, so you choose where they go (Files, AirDrop, email to yourself, and so on). Nothing is emailed by us, and there is no waiting period. You need an internet connection for the export. If an export fails, the app tells you on the screen at once so you can try again.

9.2 Delete your account, and backups

In the app: Profile → Settings → Privacy & data → Delete account, then Delete my account. The same screen also opens from the Delete account row in Settings → Account, and from the account-deletion question in Profile → Help & support. This is permanent.

1. The app shows what will be deleted and offers to export your data first.
2. You confirm it is you: deletion needs a sign-in from the last 10 minutes, by any of the app's sign-in methods (your password, Sign in with Apple, Google, or a one-time code sent to your email).
3. You type DELETE to confirm.
4. Your account is then deleted immediately and permanently from our server: your sign-in account, your profile, your reviewer profile and review credits, all your swims, including ones you had deleted, with their routes; your Community Leaderboard standings, your safety contacts, live link records and positions, check-ins, weekly plans, AI coaching records, built workouts, Meet entries and challenges, parent permissions, videos (their files are deleted from storage), review requests, the reviews you wrote, your verification claims and documents, your appeals and your country-change record. Any live link still open stops working at once. If you used Sign in with Apple, we ask Apple to revoke Swim Beast's access. Your other devices can no longer sign in or send swims; a device already signed in keeps its current sign-in token only until it expires, and anything it tries to send is refused.
5. The app signs you out and erases this account's data from your phone (its swims, queued changes, saved profile, safety contacts, check-ins, coach chat, weekly plans, Watch sync record and the Watch's motion recordings).

What we keep after deletion, and why. These records stay, but nothing in them links them to you or your account any more:

• the cost records of your AI requests, for our spending limits (cost, model, time; no content);
• an open safety report about something you posted or reported: the report and a copy of the reported text are kept until a moderator closes the case, then erased, so that deleting an account cannot erase evidence of harassment or cheating (never your video);
• Meet enforcement decisions (for example a disqualification) and their reasons, so the Meet's results stay fair;
• Apple's sign-in token, encrypted, only until Apple confirms it is revoked; and, if Apple refuses, a record of the failure (Apple's error and the date, no token);
• a moderator's notes or a copy of reported text may still contain a name if someone wrote one in it.

You need an internet connection to delete your account. There is no grace period and we cannot restore a deleted account. If the app is closed in the middle, it finishes the deletion the next time it opens. Deleting the app from your phone does not delete your account.

Backups. Our database provider (Supabase) keeps backups of the database for up to [OWNER: number of days, from the Supabase plan; or replace this paragraph with "We keep no database backups"]. Data from a deleted account stays in those backups until they expire on the provider's schedule, and then it is gone. We never restore it into the app, and we do not use it for anything.

Not covered by account deletion: the website's waitlist email, if you joined it (see the start of this policy); files you exported yourself; anything Apple holds about you as a TestFlight tester (section 4); what Anthropic already received (it deletes it on its own schedule, section 2.5); and a live link you sent someone (the message stays with them, but the link shows nothing after your account is deleted).

9.3 Change or correct your data

You can change your display name, units, pool length and gender identity in Settings (your country is set when you join and then locked; email us, section 12, to change it), and edit or delete any swim, video or built workout. You can add, change or remove your safety contacts in Profile → Settings → Safety contacts, and turn AI coaching on or off in Profile → Settings → Privacy & data → AI coaching. You cannot change your date of birth in the app; email us (section 12) if it is wrong and we will correct it.

9.4 Your privacy rights

Whatever US state you live in, you can ask to see, correct, delete or receive a copy of your data. Most of this you can do yourself in the app (sections 9.1 to 9.3). For anything else, email us (section 12); we will answer within 45 days. We will not treat you differently for using any of these rights. We do not sell or share personal information, so there is nothing to opt out of.

9.5 Consumer health data (Washington, Nevada and similar laws)

Some state laws treat information about your body or fitness as "consumer health data". In Swim Beast that may include your logged, imported and Watch-recorded swims (distances, times, splits and notes), your after-swim check-ins (how a swim felt, and any pain and where), the water you log, your swimming goal (for example "Lose weight"), your Meet times, and technique videos and their reviews; the calories read from Apple Health stay on your phone (section 2.4). Our separate Consumer Health Data Privacy Policy, at https://legal.swimbeast.app/health-data, describes this in full. In short:

• What and where from: what you give the app (section 2.1), and, only if you allow it, swims read from Apple Health (section 2.4), swims recorded with the Swim Beast Watch app, and swims you import from a FIT file (section 2.10).
• Why: only to provide the app you asked for: storing and showing your swims, shaping your starter week, running video review and the Meet when you use them, and, only if you turn on AI coaching, writing your weekly plan and answering you in the coach chat.
• Who receives it: our service provider Supabase, which stores it for us and may use it only on our instructions; the reviewers you send a video to; and, only if you turn on AI coaching, Anthropic, which receives what section 2.5 lists. When you export your data, the files go only where you send them. We do not sell it, and we do not share it with anyone else.
• Your rights: you can see it, export it, delete it (sections 9.1 and 9.2), and ask us which providers received it.
• Contact: section 12.

10. Where your data is stored

Our service providers store and process data in [OWNER: the Supabase region], in the United States (email sending), and, only if you turn on AI coaching, in the United States or other countries (Anthropic).

11. Security

Data travels between the app and our servers over encrypted connections (HTTPS). Our database lets each person read and change only their own records, except what this policy says others can see (sections 2.7, 2.8, 3 and 3a). Videos and verification documents are in private storage and are opened only through short-lived links. Apple's sign-in token is stored encrypted. Deleting an account requires a recent sign-in. On your phone, your sign-in session is kept in the Keychain. No system is perfectly secure. If a breach affects your data, we will tell you, and any authority, as the law requires, including what was and was not affected.

12. Contact us

• In the app: Profile → Help & support.
• On the web: https://legal.swimbeast.app/support.
• Email: support@swimbeast.app [OWNER: confirm the support address].
• Post: [OWNER: postal address].

Related pages: Terms of Use, https://legal.swimbeast.app/terms; Consumer Health Data Privacy Policy, https://legal.swimbeast.app/health-data.

13. Emails from us

We send only the emails needed to run your account: email confirmation and password-reset codes, and, for a Meet entry from a swimmer aged 13 to 17, the permission email to the parent's address the swimmer gave (section 7). We send no marketing emails from the app. We never email, text or message your safety contacts. If we ever send news about features, you will be able to opt out of those at any time without affecting account emails.

14. Changes to this policy

If we make a material change to what we collect or how we use it, we will tell you in the app before the change takes effect, not just update this page. The "Last updated" date at the top always shows the current version. In particular, this policy will be updated before payments start, before a switched-off feature described here is switched on in a way this policy does not describe, before a new provider receives data, and before Swim Beast is offered outside the United States.