S
Swim Squad Privacy Policy

Privacy Policy

Version 1.0 Last updated: 29 March 2026 Effective: 29 March 2026

1. Introduction

This Privacy Policy explains how Swim Squad ("the App", "we", "us") collects, uses, stores, and protects personal data in connection with the coaching management software provided to swimming clubs.

Swim Squad is a closed, invitation-only platform provided to swimming clubs for use by their authorised coaching staff. Access is granted exclusively to individuals who have received a formal invitation from their club's administrator.

This policy applies to all coaches who use the App. It covers the personal data we hold about you as a coach, and the personal data relating to swimmers that you enter and manage through the App in the course of your coaching duties.

This policy should be read alongside the separate Swim Squad Data Notice for Parents and Swimmers, which covers how swimmer data is handled and which your club administrator can provide to the parents and guardians of your swimmers.

2. Who is Responsible for Your Data?

Data Controller

Your swimming club is the Data Controller for personal data entered into the App by its coaches and administrators. This means the club determines what data is collected and how it is used within the App.

Data Processor

Swim Squad (developed by Josh Montgomery) acts as a Data Processor on behalf of each swimming club, processing personal data only in accordance with the club's instructions and this policy. A Data Processing Agreement is in place between Swim Squad and each club that uses the platform.

For any data protection enquiries relating to the Swim Squad platform itself, please contact:
Josh Montgomery — Swim Squad
admin@swimsquadapp.co.uk

3. Data We Collect About You (Coaches)

CategoryDataPurpose
IdentityFirst name, last nameIdentifying you across the platform
ContactEmail addressAccount access, invitations, notifications
ProfessionalQualification level (Level 1–3 or None)Calculating coaching rates, displaying credentials
PersonalDate of birthVerifying coach eligibility, record keeping
AuthenticationEmail address, hashed passwordSecure account login (passwords are never stored in plain text)
Account StatusActive / pending / suspended statusAccess management
DeviceiOS device tokenSending push notifications to your device
ActivitySessions you led, co-coached, assisted, or wroteScheduling, accountability, and payroll records
FinancialCoaching hours worked, session writing creditsInvoice generation and payroll calculation

We do not collect payment card details, bank account information, device location data, or advertising identifiers.

4. Data We Collect and Store About Swimmers

CategoryDataPurpose
IdentityFirst name, last nameIdentifying individual swimmers
RegistrationSwim England (ASA) numberMatching club membership records
PersonalDate of birthDetermining age range, age-appropriate training
PersonalGenderTraining record categorisation
OrganisationalSquad assignmentManaging training groups and session allocation
AttendancePresent / Absent / Part Session, lateness notesMonitoring engagement, duty of care

Swimmer data is accessible to all active coaches within the same club. Data is never shared between clubs — each club's data is completely isolated.

5. Training Session Data

When sessions are created and managed, the App stores: date, start time, end time, and duration; pool location; lead coach, second coach, helper, and set writer assignments; training set content (free text written by coaches); coaching notes; session focus; AI-calculated distance breakdowns; linked drills; session feedback ratings; and swimmer attendance records.

Session content and coach assignments — including the date, time, and location of coaching sessions — are visible to all active coaches within the same club.

6. Legal Basis for Processing

DataLegal Basis
Coach identity, contact, and professional detailsContractual necessity — required to fulfil your coaching role with the club
Coach authentication dataContractual necessity — required to provide access to the App
Coach financial recordsLegitimate interests — payroll and invoicing
Device tokens for push notificationsConsent — you may opt out via your device settings at any time
Swimmer personal dataLegitimate interests of the club — managing a sports programme, safeguarding, duty of care
Swimmer attendance recordsLegitimate interests — safeguarding, attendance monitoring, programme quality
Session feedbackLegitimate interests — improving coaching quality and programme delivery

7. AI Features — What Data Is Involved

The App uses artificial intelligence provided by OpenAI (via their business API) in two specific ways.

7.1 Automated Session Distance Parsing

When you write a training session, the App sends the session content text only (e.g., "4 x 100m FC as 25m Drill / 75m Swim") to OpenAI. The AI calculates distances per stroke and activity type. No personal identifiers — names, dates of birth, or registration numbers — are included in this request.

7.2 AI Coaching Assistant

When you use the coaching assistant, the following context is sent to OpenAI: squad name; number of swimmers in the squad; the age range and average age of the squad (derived from dates of birth — no individual's DOB is transmitted); pool name and length; the current session's date, focus, distance, and content; a summary of up to 10 recent sessions (dates, focus areas, and distances only); and your message to the assistant.

Individual swimmer names, dates of birth, Swim England numbers, gender, or attendance records are never sent to OpenAI.

7.3 OpenAI Data Handling

Under OpenAI's API terms (as at March 2026), data submitted via the API is not used to train OpenAI's AI models. Learn more at openai.com/policies/api-data-usage-policies.

8. Third-Party Services

ServicePurposeData Shared
OpenAIAI session parsing and coaching assistantSession text content, squad aggregate demographics, training history summaries
ResendSending invitation and verification emailsCoach email address and invitation link
Apple Push Notification Service (APNs)Delivering push notifications to iOS devicesDevice token only
Replit / PostgreSQLApplication hosting and databaseAll App data, stored on Replit's managed infrastructure

9. Data Isolation Between Clubs

Swim Squad serves multiple swimming clubs. Data entered by one club is completely isolated from all other clubs. Coaches can only access data belonging to their own club. There is no cross-club data sharing of any kind.

10. Data Security

Passwords are hashed using bcrypt and never stored in plain text. Access is restricted to invited coaches only — there is no public registration. Invitation tokens expire after 48 hours. Email verification tokens expire after 24 hours. HTTPS is enforced for all data in transit. All data is stored in a managed PostgreSQL database on Replit's infrastructure. In the event of a breach, we will notify affected clubs and the relevant supervisory authority in line with our legal obligations.

11. Data Retention

Data TypeRetention Period
Coach account and profile dataDuration of active coaching role, and 7 years thereafter (or until deletion is requested)
Session and attendance data7 years from creation, or until deletion is requested
Swimmer dataDuration of active club membership, and 7 years thereafter (or until the club requests removal)
Invitation tokensExpire automatically after 48 hours
Email verification tokensExpire automatically after 24 hours
Push notification device tokensRetained while the account is active; removed upon deactivation

The 7-year retention period aligns with standard safeguarding record-keeping obligations for sports organisations in the United Kingdom.

12. Your Rights Under UK GDPR

To exercise these rights, contact your club administrator or reach us directly at admin@swimsquadapp.co.uk. We will respond within one calendar month.

You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

13. Children's Data

The App is for use by coaches only and is not intended for use by individuals under 18. However, the App stores personal data relating to swimmers, many of whom may be under 18. This data is managed by coaches acting in their professional capacity on behalf of their club. Information for parents and guardians is available in the separate Data Notice for Parents and Swimmers.

14. Changes to This Policy

We may update this policy from time to time. Where changes are material, we will notify coaches via their registered email address. The current version is always accessible within the App.

15. Contact

Josh Montgomery — Swim Squad
admin@swimsquadapp.co.uk