Privacy Policy

Effective Date: September 23, 2026
Last Updated: October 27, 2026

SwimDNA, LLC ("SwimDNA," "we," "us," or "our") respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, disclose, retain, and protect information when you use the SwimDNA mobile application, website, and related services (collectively, the "Services").

The Services are operated by:

SwimDNA, LLC
P.O. Box 3390
276 Kingsbury Grade, Suite 2000
Stateline, NV 89449-3390
United States

Email: admin@swimdna.app
Website: https://swimdna.app

By using the Services, you acknowledge the practices described in this Privacy Policy.

1. About SwimDNA

SwimDNA is a personalized swim-training application.

The Services use information about your swimming background, goals, training environment, availability, performance, equipment, preferences, other athletic activities, and relevant physical limitations to create and adapt individualized swim-training plans.

Depending on your goals and training profile, SwimDNA plans and workouts may include:

Aerobic swimming
Threshold training
Race-pace training
Speed and sprint training
Kick work
Pull work
Technique and drills
Starts
Turns
Underwaters
Breakouts
Finishes
Open-water preparation
Triathlon-specific swimming
Recovery-oriented training

SwimDNA may use automated systems and artificial intelligence to generate workouts, adjust training recommendations, evaluate workout feedback, and adapt future training based on your demonstrated performance and recovery.

SwimDNA is a fitness and athletic-training service. It is not a medical provider, and information or recommendations provided through the Services are not medical advice, diagnosis, or treatment.

2. Information We Collect

The information we collect depends on the features you use, the permissions you grant, and the information you choose to provide.

A. Account Information

You sign in to SwimDNA with one of two methods:

There is no email, password, or phone-number sign-in. Authentication is handled by Apple or Google, and SwimDNA never receives or stores a password.

When you create or maintain a SwimDNA account, we collect:

Email address (provided by Apple or Google)
Name (only when you sign in with Google; SwimDNA does not request your name from Apple)
Internal user and account identifiers
Which sign-in method or methods are attached to your account
Subscription or entitlement status, where applicable
Account preferences and settings

You may attach both sign-in methods to the same SwimDNA account. When you sign in with a second method that carries the same verified email address as your existing account, or when you choose to link a second method from within the app, that method is added to your existing account rather than creating a new one.

B. Age Information

We collect your age range only. You choose from the following bands: 13–17, 18–29, 30–39, 40–49, 50–59, 60–69, and 70+. You may also select "Prefer not to say."

We do not collect your exact age, date of birth, or birth year.

Age range may be used as one factor in personalizing:

Training load
Recovery
Progression
Workout intensity
Sprint density
Exercise selection
Workload tolerance

Age range is not used as the sole measure of your swimming ability or training capacity.

C. Swimming and Athletic Profile

We may collect information about your swimming background and experience, including:

Swimming history
Experience or ability level
Former or current competitive swimming experience
Current training frequency
Previous competitive background
Workout preferences
Training priorities
Preferred strokes
Strokes you want to train
Strokes or activities you do not want included
Workout literacy
Preferred level of workout explanation or instruction

This information helps SwimDNA tailor the structure, complexity, volume, intensity, and content of your training.

D. Training Goals and Event Information

We may collect information about your swimming and fitness goals, including:

General fitness
Endurance
Speed
Technique
Race performance
Open-water preparation
Triathlon preparation
Target races or events
Target event distances
Event dates
Training deadlines
Other goals you choose to provide

Pool events may include distances such as:

25
50
100
200
400 or 500
800 or 1000
1500 or 1650
Individual medley events

Open-water and triathlon goals may also be recorded.

You may also provide custom goals through free-text fields.

E. Training Environment

We may collect information you provide regarding where and how you train, including:

25-yard pool
25-meter pool
50-meter pool
Custom pool length
Open-water access
City, state, ZIP code, postal code, or similar general training location
Training elevation
Whether you normally train at that elevation or are temporarily visiting
Weekly training availability
Typical session duration

We may use this information to adjust:

Workout distance
Pace recommendations
Rest
Send-offs
Training volume
Recovery
Training density

SwimDNA does not request device Location Services and does not collect approximate or precise device location.

The training location you enter is a free-text field ("City/state or ZIP/postal code. Include pool elevation if you know it."). Elevation is recorded as a band you select (sea level or low, moderate, high, very high, or not sure), together with how long you have trained at that elevation.

Entering a city, ZIP code, or training location manually does not cause SwimDNA to collect your device location.

F. Swimming Equipment

We may collect information about swimming and training equipment that you have available, including:

Kickboard
Pull buoy
Fins
Paddles
Snorkel
Tempo trainer
Parachute
Drag socks
Resistance or power bags
Power tower or buckets
Swim cords
Starting blocks
Pace clock
Open-water access
Other equipment

You may also specify equipment that you do not want SwimDNA to prescribe.

We use this information to personalize workouts to the equipment available and appropriate for you.

G. Pace, Calibration, and Performance Information

We may collect swimming performance information, including:

Aerobic pace
Threshold pace
Hard-repeat or VO2 pace
Race-specific pace
Calibration results
Test-set results
Race-rehearsal results
Workout completion
Partial workout completion
Missed workouts
Workout duration
Total distance
Actual send-offs
Actual rest periods
Average repeat times
Representative repeat times
Selected splits
Whether target pace was maintained
Whether you faded during a set
Workout modifications
Technical execution feedback
Stroke count
Turn performance
Breakout performance
Underwater performance
Race-pace performance
Open-water performance

You are not necessarily required to record every individual swim split.

Initial pace values you provide may be treated as provisional. SwimDNA may update its understanding of your training paces based on observed workout performance.

SwimDNA may retain historical pace values, dates, observations, and other performance information rather than simply replacing previous values.

This allows future training to reflect how your swimming performance changes over time.

H. Post-Workout Feedback

When you log a swim or provide workout feedback, we may collect information such as:

Completion status
Perceived difficulty
Rating of perceived exertion
Whether the intervals or rest felt appropriate
Whether target pace was achieved
Whether you modified the workout
Physical wellbeing
Satisfaction with the workout
Selected key-set performance
Actual send-offs or rest
Representative splits
Technical metrics
Optional notes
Execution patterns

The amount of information collected may depend on the feedback options or features you choose to use.

We use this information to adapt future training and improve the relevance of workout recommendations.

I. Information Imported from Apple Health

If you use the optional Apple Health import, SwimDNA collects the swim workout information described in Section 5.

3. Pain, Injury, Recovery, and Other Sensitive Training Information

SwimDNA may ask you to voluntarily provide information relevant to appropriate athletic programming, including:

Pain
Soreness
Injuries
Physical limitations
Affected body area
Movements or equipment that cause discomfort
Fatigue
Recovery
Readiness
Training tolerance
Effects of other athletic activities on recovery

Body areas you can identify in the app include:

Shoulder
Elbow
Back
Hip
Knee
Sciatica
Kick limitation
Other areas you describe

You may also identify movements, activities, or equipment that create discomfort, such as:

Paddles
High-volume pulling
Sprinting
Breaststroke kick
Butterfly
Kicking with a board
Long continuous swimming
Strength training
Starts or dives
Turns or push-offs

SwimDNA also asks about pain in every daily check-in and uses your reports to derive a protective training status that limits or modifies training until the reports improve.

This information may be sensitive.

SwimDNA uses this information to personalize athletic training, adjust workload or recovery, and reduce the likelihood that the application recommends activities you have identified as inappropriate for you.

Providing this information does not create a physician-patient, therapist-patient, or other healthcare-provider relationship with SwimDNA.

If you experience an injury, significant pain, or a medical concern, you should seek advice from an appropriate healthcare professional.

4. Other Sports and Cross-Training

SwimDNA may collect information about other sports or physical activities you participate in, including:

Running
Cycling
Strength training
CrossFit
HYROX or functional fitness racing
HIIT or bootcamp training
Rowing
Hiking
Skiing or snow sports
Triathlon training
Yoga
Pilates
Mobility training
Basketball
Tennis
Pickleball
Volleyball
Soccer
Climbing
Other endurance sports
Other athletic activities

We may also collect information about:

Sessions per week
Training intensity
General fatigue
Leg soreness
Shoulder, arm, or back soreness
Effects on swim readiness
Effects on recovery
Whether another activity limits your ability to perform hard swim sessions

We use this information to better account for your overall training load and recovery.

5. Apple Health and HealthKit

SwimDNA can import swim workouts you record on an Apple Watch or another device from Apple Health into your daily check-in. The import is optional: SwimDNA works without it, with less information available for personalization. You can turn it on or off in the app: open the plan screen, tap the menu in the top-right corner, and choose Apple Health import.

What SwimDNA reads

SwimDNA asks for your permission through Apple's Health permission screen before reading any HealthKit information. You can grant, deny, or later revoke access in the Health app or in your device settings.
The connection is read-only. SwimDNA does not write any information to Apple Health.
SwimDNA reads only swimming workouts (start and end time, duration, distance, pool length, lengths, strokes, pauses, and the device or app that recorded the workout) and the heart-rate samples recorded during those workouts.
SwimDNA looks for a swim in Apple Health only when you log a session with the import turned on, and nothing from Apple Health is used for your training until you confirm which swim it was.

What becomes part of your check-in

When you confirm an imported swim, its totals become part of that day's check-in: the date and start time, distance, active time, pool length (or open water), whether it was recorded by an Apple Watch, an iPhone, or another app, a reference to the Apple Health record, and your answers to the import's questions (for example, a corrected distance, or why the distance differs from the plan). Like the rest of your check-in, this information is stored on your device and on our servers and is sent to our artificial-intelligence service provider to adapt your training (see Section 7). Heart-rate information is not part of the check-in.

Swim recording uploads

Uploads require a separate permission. Only if you allow them in the app ("Allow swim recording uploads?"), SwimDNA also uploads the full watch recording of each swim you confirm: heart-rate samples, lengths, strokes, timing and pauses, and the name and model of the device that recorded it. The recording is stored on our servers. Our server computes a heart-rate summary from it (average, range, how much of the swim the heart rate covers, and any gaps), which the app shows with that day's check-in.

Uploaded recordings and their summaries are not sent to our artificial-intelligence service provider. The permission screen explains that a short summary may be shared with OpenAI to support coaching once AI summaries become available. We will update this Privacy Policy before that sharing begins.

We keep a record of your upload choices (when you allowed or turned off uploads, and the version of the permission text you were shown) while your account exists.

You can turn uploads off at any time in Apple Health import with Turn off uploads and delete watch recordings. This deletes every uploaded recording and summary for your account, on our servers and on your device. If your device is offline, the deletion is sent the next time SwimDNA can reach our servers. Check-in answers you have already logged are kept.

Storage on your device

SwimDNA excludes its local database and any recordings waiting to be uploaded from iCloud Backup, so information read from Apple Health is not stored in iCloud. If you restore a device from a backup, your plan and check-ins are restored from our servers when you sign in.

Limits on use

SwimDNA does not sell information obtained through HealthKit, use it for advertising or marketing, use it to build advertising profiles, or disclose it to advertisers or data brokers. HealthKit information is used only for health, fitness, swimming, and athletic-training functionality, and is disclosed to service providers only where permitted by Apple and applicable law and where necessary to provide a service you requested.

6. Free-Text Information

The following SwimDNA fields accept free text:

Training location
Description of a pain or injury issue not covered by the listed body areas
Additional goals ("what else do you want to work on")
The name of a custom target event
Optional notes in the daily check-in ("Anything else for me?")
End-of-training-block reflection

Because these fields are free-form, you may voluntarily enter information that is personal or sensitive.

Free-text entries are sent as written to our artificial-intelligence service provider as part of generating or adapting your training (see Section 7).

We use the information you provide through these fields to personalize training, adapt recommendations, provide support, or perform the function for which you submitted the information.

You should avoid entering personal information that is unnecessary for your use of the Services.

7. Artificial Intelligence and Automated Processing

SwimDNA uses artificial intelligence and other automated systems to help generate and adapt personalized swim training.

These systems may:

Generate individual workouts
Generate multi-week training plans
Adjust pace targets
Adjust send-offs and rest
Modify training volume
Modify workout density
Account for performance trends
Account for pain or limitations you report
Account for fatigue and recovery
Account for age
Account for altitude
Account for cross-training
Adapt future training weeks
Update training pace estimates
Adjust training based on completed workouts

SwimDNA uses OpenAI as an artificial-intelligence service provider to assist with generating and adapting personalized swimming training. Requests are sent through the OpenAI API, hosted in the United States, from SwimDNA's servers.

Information sent to OpenAI for training generation or adaptation includes:

Your intake answers, including the free-text training location and any injury description you enter
The athlete profile derived from those answers (including your age range)
Your current training plan
Check-in feedback: pain reports, perceived exertion, times, completion, and notes, including the totals of a swim you imported from Apple Health (see Section 5)

The request to OpenAI does not include your name, email address, account identifier, device identifier, or IP address. It is sent by our server, not from your phone.

OpenAI does not use information submitted through its API to train its models.

We store requests and responses in OpenAI's developer dashboard for debugging, so OpenAI retains the training content of a request and its response for up to 30 days.

We seek to transmit only information reasonably necessary to provide the requested training functionality.

SwimDNA's automated training recommendations are intended for fitness and athletic-training purposes and are not medical diagnoses or medical advice.

8. Subscription and Payment Information

SwimDNA may offer paid subscriptions, including monthly and annual subscription options and promotional or free-trial periods.

When you purchase a subscription through Apple's App Store, Apple processes the payment transaction.

SwimDNA generally does not receive or store your full payment-card number when your purchase is processed through Apple.

We may receive information relating to your subscription, including:

Subscription status
Subscription product or type
Transaction identifier
Renewal status
Expiration status
Entitlement status
Trial status

We use this information to determine your access to paid SwimDNA functionality and manage your subscription entitlement.

Apple's processing of your payment information is governed by Apple's own terms and privacy practices.

The current version of SwimDNA does not offer in-app purchases. When subscriptions launch, purchases will be made through Apple's in-app purchase system, and we will update this Privacy Policy to name any subscription-management provider we use.

9. Technical, Analytics, and Diagnostic Information

SwimDNA may process technical information reasonably necessary to:

Operate the Services
Secure user accounts
Diagnose technical problems
Investigate crashes
Measure application reliability
Prevent abuse
Improve application functionality

The SwimDNA app includes two third-party analytics and diagnostics services, both provided by Google LLC (United States) as part of Google Firebase. No other analytics, crash-reporting, attribution, or performance-monitoring service is included in the app.

A. Firebase Analytics (Google Analytics for Firebase)

Firebase Analytics receives: an app-instance identifier generated by the SDK (not the advertising identifier), device model, operating-system version, app version, language and region, session and screen-view events, and SwimDNA's own interaction events (which screen was opened, which action was taken, and whether a plan generation succeeded or failed and how long it took). Google derives an approximate, city-level location from the IP address on its servers.

Firebase Analytics does not receive training, pain, injury, health, or free-text content. Events describe how the app is used, never what you entered.

The SDK is configured without the advertising identifier (IDFA) and with ad personalization disabled. SwimDNA does not attach your account identifier to analytics events, so this data is not linked to your SwimDNA account on our side.

Retention: Google's default for user-level analytics data (2 months); aggregated event data is retained longer.

B. Firebase Crashlytics

Firebase Crashlytics receives crash and non-fatal error reports: stack traces, the app's state at the time of the crash, device model, operating-system version, app version, a Crashlytics installation identifier, and the screens visited before the crash. No account identifier is attached.

Retention: 90 days.

C. SwimDNA Server Request Logs

Our own servers keep request logs containing: timestamp, app version, the app's installation identifier (a random identifier the app keeps in the iOS Keychain), your account identifier, a request identifier, error type, plan-generation duration, and the cost of the request. These logs are linked to your account. They are kept by our infrastructure provider (Supabase) for 7 days.

Our servers also keep daily request counters used for rate limiting, keyed by account, installation identifier, or IP address, and aggregate daily cost totals. Counters reset daily.

D. Infrastructure Logs

Supabase, our infrastructure provider, keeps infrastructure logs that include IP address and user agent for 7 days.

E. Apple

Apple collects TestFlight and App Store crash and usage data under its own terms and privacy practices.

10. Advertising and Tracking

SwimDNA's business model is based on subscriptions rather than third-party advertising.

SwimDNA does not:

Display third-party advertising;
Sell users' personal information;
Sell workout information;
Sell injury, health, or health-like training information;
Sell information obtained through HealthKit;
Share personal information for targeted or cross-context behavioral advertising;
Track users across unrelated third-party applications or websites for advertising purposes; or
Collect an advertising identifier for advertising purposes.

The Firebase Analytics SDK in the app is built without advertising-identifier support, and ad personalization is disabled in its configuration.

If SwimDNA's practices change, we will update this Privacy Policy and applicable platform privacy disclosures as required.

11. How We Use Personal Information

We may use personal information to:

Create and maintain your SwimDNA account;
Authenticate you;
Create and maintain your athlete profile;
Generate individualized swim-training plans;
Generate individual workouts;
Adapt future workouts and training blocks;
Maintain training history;
Analyze workout performance;
Calibrate swimming pace recommendations;
Adjust workout volume and intensity;
Adjust send-offs and recovery;
Account for altitude and training environment;
Account for other sports and training load;
Account for pain, injuries, physical limitations, and fatigue you report;
Personalize training to available equipment;
Process subscriptions and entitlements;
Provide customer support;
Send service-related communications;
Troubleshoot technical problems;
Secure the Services;
Prevent fraud, abuse, or misuse;
Improve application functionality;
Maintain appropriate business records;
Comply with legal obligations; and
Establish, exercise, or defend legal rights.

12. How We Disclose Personal Information

We disclose personal information to the following service providers that help us operate SwimDNA:

Supabase — cloud infrastructure, database hosting, and authentication services (project hosted in Oregon, United States)
OpenAI — artificial-intelligence processing, as described in Section 7 (United States)
Apple — Sign in with Apple, App Store and TestFlight distribution, and payment processing when subscriptions launch
Google — Sign in with Google
Google Firebase (Google LLC) — analytics and crash reporting, as described in Section 9 (United States)

We also use Slack for internal operational alerts, such as a notice that aggregate daily artificial-intelligence cost crossed a threshold or that a provider is unavailable. These alerts contain no personal information.

SwimDNA does not currently use an email-delivery, push-notification, or customer-support-tooling provider. Support is handled through the mailbox admin@swimdna.app. If we add such a provider, or a subscription-management provider when subscriptions launch, we will update this Privacy Policy.

We expect service providers processing information on our behalf to process the information for the services they provide to SwimDNA and subject to applicable contractual and legal requirements.

HealthKit-derived information is subject to the additional limitations described in the Apple Health and HealthKit section of this Privacy Policy.

We may also disclose information:

When required by applicable law, regulation, subpoena, court order, or other valid legal process;
When reasonably necessary to investigate fraud, misuse, or a security incident;
To protect the rights, safety, or property of SwimDNA, our users, or others;
To enforce our Terms of Service or other agreements; or
In connection with a merger, financing, acquisition, reorganization, bankruptcy, sale of assets, or similar corporate transaction, subject to applicable law.

13. Communications

The current version of SwimDNA does not send push notifications or marketing email. Sign-in is handled by Apple or Google, so SwimDNA does not send sign-in or magic-link emails.

We may send communications necessary to operate your account or provide the Services, including:

Customer-support responses
Account communications
Subscription notices
Security notifications
Service-related updates

If we add push notifications (for example, a notice that your plan is ready, workout reminders, or feedback reminders) or marketing communications in a future version, we will update this Privacy Policy. You will be able to control app notification permissions through your device settings, and you will be able to opt out of marketing communications using the unsubscribe method provided in the message where required by law.

Opting out of marketing communications does not prevent SwimDNA from sending necessary transactional, account, security, or service-related communications.

14. Customer Support

When you contact SwimDNA for support, feedback, or another inquiry, we may collect:

Your name
Email address
Message contents
Screenshots
Files or attachments you provide
Account information
Device or application information necessary to investigate your request

We use this information to:

Respond to you
Troubleshoot issues
Investigate technical problems
Improve the Services
Maintain appropriate customer-support and business records

Support communications may be retained for a reasonable period based on the nature of the request and applicable legal or business requirements.

15. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

These purposes may include:

Maintaining your SwimDNA account
Providing personalized training
Preserving workout and training history
Maintaining athlete performance history
Preserving pace anchors and calibration information
Maintaining user preferences
Maintaining injury or pain-related training restrictions
Processing subscriptions
Providing customer support
Protecting the security of the Services
Resolving disputes
Maintaining legally required transaction records
Meeting tax, accounting, or regulatory requirements
Enforcing agreements

Because SwimDNA is designed to adapt training over time, certain information may remain associated with your account while it remains active, including:

Athlete profile
Historical workouts
Completed training
Performance observations
Pace anchors
Previous pace-anchor values
Training preferences
Recovery and tolerance information
Plan history

Information associated with your account is retained for as long as your account exists. When you delete your account, the information described in Section 16 is deleted immediately.

Uploaded swim recordings and their summaries are kept until you turn uploads off or delete your account, whichever comes first.

Retention periods that apply regardless of account status:

Database backups: daily backups are kept for 7 days. Information deleted from your account leaves backups within 7 days.
Server request logs and infrastructure logs (Supabase): 7 days.
Requests and responses stored at OpenAI: up to 30 days. These contain training content only, with no name, email address, or account identifier.
Firebase Analytics: user-level data 2 months; Firebase Crashlytics: 90 days. This data carries no account identifier, so account deletion does not reach it; it expires on Google's schedule.
Billing event records: retained as transaction records after account deletion. They carry a pseudonymous account identifier and no name or email address.
Aggregate daily cost totals and rate-limit counters: daily windows; they contain no personal information.

16. Account Deletion

You can delete your SwimDNA account from within the app while signed in: open the plan screen, tap the menu in the top-right corner, choose Delete account, and confirm.

Deletion takes effect immediately. Our server deletes:

Your athlete record and everything attached to it: installations, intake answers, training plans, daily check-ins, adaptations, pace observations, pace-anchor proposals, account-claim records, uploaded swim recordings and their summaries, and your upload choices
Your subscription record, if any
Your sign-in account (the login itself)

The app then wipes its local database and any recordings waiting to be uploaded on your device, and replaces the app's installation identifier, so nothing on the device links to the deleted history.

The following is retained after deletion:

Billing event records, as transaction records, carrying a pseudonymous account identifier and no name or email address
Aggregate daily cost totals and rate-limit counters, which contain no personal information
Copies in database backups for up to 7 days, and server logs for up to 7 days, as described in Section 15
Records required or permitted by law, such as tax, accounting, fraud-prevention, or legal-compliance records, and information necessary to establish or defend legal rights

Deletion requires a live signed-in session. No separate identity-verification step is needed: before deleting, our server re-verifies your session with the sign-in provider.

Deleting your SwimDNA account does not cancel an active auto-renewing subscription maintained by Apple.

You should separately manage or cancel an App Store subscription through your Apple account.

You may contact us at:

admin@swimdna.app

with questions about account deletion or other privacy requests.

17. Your Privacy Rights

Depending on where you live and which laws apply to SwimDNA, you may have rights concerning your personal information.

These may include the right to:

Request access to personal information we maintain about you;
Request correction of inaccurate personal information;
Request deletion of personal information;
Request a portable copy of certain information;
Withdraw consent where processing is based on consent;
Object to or restrict certain processing where applicable;
Appeal certain privacy-request decisions where provided by law; and
Lodge a complaint with an applicable data-protection authority.

These rights may be subject to exceptions and limitations under applicable law.

To exercise an applicable privacy right, contact:

admin@swimdna.app

We may take reasonable steps to verify your identity before fulfilling certain requests.

We will not discriminate against you for exercising privacy rights provided by applicable law.

18. California and Other U.S. Privacy Rights

Residents of California and certain other U.S. states may have additional rights under applicable privacy laws.

Where those laws apply to SwimDNA, those rights may include:

Access to personal information;
Correction of inaccurate personal information;
Deletion of personal information;
Data portability;
Information about certain disclosures of personal information; and
Rights concerning certain sales, sharing, targeted advertising, or profiling practices.

SwimDNA does not sell users' personal information or health and workout information, and does not share it for targeted advertising.

To exercise any of these rights, contact us at admin@swimdna.app.

19. International Users and Data Transfers

SwimDNA is operated from the United States, and your personal information is stored in the United States. SwimDNA is currently offered in the United States only.

If you use SwimDNA from outside the United States, your personal information may be processed in the United States or in other countries where SwimDNA's service providers operate.

Privacy and data-protection laws in those jurisdictions may differ from the laws where you live.

Where applicable law requires additional safeguards for an international transfer of personal information, SwimDNA will use legally recognized transfer mechanisms appropriate to the circumstances.

Users in the European Economic Area, United Kingdom, Switzerland, and certain other jurisdictions may have additional rights under applicable privacy and data-protection laws. SwimDNA does not currently offer the Services in those jurisdictions.

20. Data Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information against:

Unauthorized access
Unauthorized disclosure
Alteration
Loss
Destruction
Misuse

These safeguards include:

Encrypted transmission (TLS/HTTPS) for all traffic between the app and our servers, and between our servers and OpenAI
Database encryption at rest, provided by Supabase
Row-level security on every database table with no client-side access policies, so your data is reachable only through our server functions using a service credential
Authentication through Apple and Google sign-in tokens; SwimDNA holds no passwords
Session tokens stored in the iOS Keychain on your device
Verification of your signed-in session on every server request
API secrets kept in our infrastructure provider's secret store, never in the app

Your plan and training history are also stored on your device in the app's sandboxed database, protected by iOS data protection; the app does not apply additional encryption of its own to that database.

No electronic transmission or storage system can be guaranteed to be completely secure, and we cannot guarantee absolute security.

21. Children's Privacy

SwimDNA is not intended for children under 13. The age question in the app starts at the 13–17 band and offers no answer below it. Use by individuals aged 13–17 is subject to the guardian requirements in our Terms.

We do not knowingly collect personal information from children under 13.

If we learn that personal information has been collected from a child in violation of applicable law, we will take reasonable steps to delete it.

A parent or guardian who believes a child has improperly provided personal information to SwimDNA may contact:

admin@swimdna.app

22. Third-Party Services

SwimDNA relies on services operated by the following third parties:

Apple (Sign in with Apple, App Store and TestFlight distribution, and payment processing when subscriptions launch)
Google (Sign in with Google)
Google Firebase (analytics and crash reporting)
OpenAI (artificial-intelligence processing)
Supabase (cloud infrastructure, database hosting, and authentication)
Slack (internal operational alerts containing no personal information)

A subscription-management provider will be added when subscriptions launch, and this list will be updated.

Independent third parties are responsible for their own privacy practices when they process information independently rather than solely on SwimDNA's behalf.

Their services may be governed by their own privacy policies and terms.

This Privacy Policy describes SwimDNA's processing of personal information and does not replace the privacy policies of independent third-party services.

23. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in:

SwimDNA functionality
Data-processing practices
HealthKit integrations
Service providers
Security practices
Business operations
Legal or regulatory requirements

When we update this Privacy Policy, we will revise the “Last Updated” date at the beginning of the policy.

If a change materially affects how we process personal information, we may provide additional notice or obtain consent where required by applicable law.

24. Contact Us

If you have questions about this Privacy Policy, SwimDNA's privacy practices, your personal information, or a privacy request, contact us at:

SwimDNA, LLC
P.O. Box 3390
276 Kingsbury Grade, Suite 2000
Stateline, NV 89449-3390
United States

Email: admin@swimdna.app
Website: https://swimdna.app