Privacy Policy
Last updated: 5 August 2026
SwimTune is a swim training app. To build your training plan and show you your progress, it needs to know about your swimming, and some of that is health data. This policy explains exactly what we hold, why, where it lives, and what you can do about it.
The short version. Your training data is used to run SwimTune for you and nothing else. We do not sell it, we do not use it for advertising, and we do not build profiles of you for third parties. It is stored in the European Union. You can export or delete all of it from inside the app.
1Who is responsible
The controller of your personal data is the developer of SwimTune, contactable at privacy@swimtune.com. If you are in the EU or UK, this policy is written to meet the GDPR.
2What we collect
Account information
Your email address and a password, which is stored only as a cryptographic hash and is never visible to us.
Your swimmer profile
What you tell us during onboarding and can change later: age, gender, weight, resting and maximum heart rate, swimming experience, goals, weekly availability, the equipment you own, and any injuries or limitations you choose to mention. All of it is optional except what a plan genuinely needs, and you can leave fields blank.
Training data
Workouts you record, log by hand, or allow us to import: date, duration, distance, pace, heart rate, stroke type, lengths and splits, SWOLF, calories, pool length, and whether a swim was in a pool or open water. We also store the training plans generated for you, which sessions you completed, and derived measures such as training load and readiness.
Coach conversations
Messages you exchange with the AI coach, so the conversation has continuity and the coach remembers what you discussed.
Subscription status
Whether you have an active SwimTune Pro subscription, its type and renewal date, and, during a trial, how much of the trial allowance you have used. We never see your payment details. Purchases are handled entirely by Apple; we only receive the receipt confirming a subscription exists.
Technical information
Basic logs needed to operate and secure the service, such as timestamps of requests to our servers and errors encountered. The SwimTune app contains no third-party advertising, tracking, or analytics SDKs. We do not track you across apps or websites, and we do not ask for permission to do so, because we do not do it.
3Apple Health
With your permission, SwimTune reads swim workouts and heart-rate data from Apple Health, and writes swims you record in the app back to it. This permission is entirely optional and you can withdraw it at any time in the Health app; SwimTune works without it, using workouts you log by hand.
Health data read from Apple Health is used only to show you your own training and to build and adapt your plan. In line with Apple’s rules, we never use it for advertising or marketing, and never disclose it to third parties for their own purposes.
4Why we process it, and on what legal basis
| Purpose | Legal basis |
|---|---|
| Running your account and syncing your data between devices | Performance of our contract with you |
| Generating and adapting training plans, analytics and coaching | Performance of our contract; and, for health data, your explicit consent |
| Managing subscriptions and trial allowances | Performance of our contract |
| Keeping the service secure and diagnosing faults | Our legitimate interest in a service that works and is not abused |
| Meeting legal and tax obligations | Legal obligation |
Health and fitness data is a special category of personal data under the GDPR. We process it on the basis of your explicit consent, given when you grant Health permissions or enter training data. You may withdraw that consent at any time by revoking the permission, deleting the data, or closing your account.
5Artificial intelligence
SwimTune’s plans and coaching are generated by large language models. When you use an AI feature, the relevant part of your training context (your recent workouts, your plan, your profile and, for the chat, your messages) is sent from our servers to the model provider to produce a response.
We route these requests through OpenRouter, which passes them to Anthropic’s Claude models. Your name and email address are not included in what we send. These providers process the data to return a response and act as our processors under contract; the data is not used to train their models.
If you would rather no training data reach an AI provider, use SwimTune on the free tier: logging, history, analytics, training load and recovery signals all run without any AI feature.
6Who else is involved
| Provider | What they do | Where |
|---|---|---|
| Supabase | Database, accounts and server functions — where your data is stored | European Union (Frankfurt) |
| OpenRouter | Routes AI requests to the model provider | United States |
| Anthropic | Generates plans and coaching responses | United States |
| Apple | App distribution, subscriptions and payment | Per Apple’s own terms |
| Cloudflare | Serves swimtune.com | Global network |
We do not sell your personal data, and we do not share it with anyone for their own marketing.
7Where your data lives, and transfers
Your account and training data are stored in the European Union, in Frankfurt, Germany. Requests to AI providers are processed in the United States. Those transfers rely on the European Commission’s Standard Contractual Clauses together with the safeguards our providers commit to.
8How long we keep it
We keep your data for as long as your account exists. When you delete your account, your profile, workouts, plans and conversations are deleted from our systems, normally within 30 days, except where we must keep a record for legal or tax reasons, such as proof of a purchase. Backups are cycled out on a rolling basis.
Data held in Apple Health belongs to you and is not affected by deleting your SwimTune account. Remove it in the Health app if you want it gone.
9Your rights
If you are in the EU or UK, you have the right to:
- access the personal data we hold about you, and receive a copy of it;
- correct anything inaccurate;
- have your data deleted;
- restrict or object to certain processing;
- receive your data in a portable, machine-readable format;
- withdraw consent at any time, without affecting processing already carried out;
- complain to your national data protection authority. In Portugal this is the CNPD (cnpd.pt).
Deleting your account from within SwimTune exercises the deletion right directly and immediately. For anything else, write to privacy@swimtune.com and we will respond within one month.
10Security
Data is encrypted in transit and at rest. Access to your records is restricted at the database level so that one account cannot read another’s. Passwords are stored only as hashes. No system is perfectly secure, but we take this seriously and fix what we find.
11Children
SwimTune is not intended for children under 13, and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.
12The website
swimtune.com uses Google Analytics to understand how people find and use the site. This is separate from the app, involves no training or health data, and you can opt out with any standard browser or extension control.
13Changes to this policy
We may update this policy. When we make material changes we will update the date above and, where appropriate, tell you in the app. If a change affects how we use health data, we will ask for your consent again.
14Contact
Questions, requests, or anything that looks wrong: privacy@swimtune.com