Swimio Privacy Policy

Swimio is provided by Luca Corsilli. For this policy, "Swimio", "we", "us", and "our" mean Luca Corsilli operating the Swimio app and website.

Contact: info@swimio.app. Use the subject "Privacy Request" for privacy rights requests.

This policy applies to the Swimio iPhone and Apple Watch app, the Swimio website, and support or feedback channels.

On-device and Apple services: Swimio can handle workout plans, swim sessions, lap times, splits, stroke information, distance, pace, pool length, heart rate, readiness, personal bests, profile settings, goals, equipment, language, units, and app settings. Where possible, this data stays on your device, in Apple Health, or in your Apple iCloud account. Apple controls Apple Health and iCloud permission, storage, and security settings.

HealthKit and Apple Health: Swimio reads from and writes to Apple Health only after you grant permission in iOS. You can change those permissions in the system Health or Privacy settings. Swimio does not use HealthKit or Apple Health data for advertising, marketing, or unrelated profiling.

Feature-dependent processing: if you use AI Coach, Smart Import, team or coach tools, pool channels, live publishing, workout sharing, cloud save/load, notifications, or similar connected features, the data you submit or choose to share may be processed outside your device to provide that feature.

AI features: text, photos, audio, workout files, workout history, personal bests, profile settings, training load, and other inputs you provide to AI features may be processed to generate workouts, imports, summaries, insights, or coaching recommendations. Do not submit information you do not want processed for that feature.

In-app analytics: Swimio uses Firebase Analytics and PostHog to understand how the app is used, such as which onboarding steps are completed, which features are opened, and subscription events. These providers receive a pseudonymous account identifier and event data; they do not receive your raw health metrics, GPS coordinates, or message content. Session replay is disabled in the shipping app to avoid capture of sensitive integration and fitness surfaces.

Location: pool and team search can request access to your approximate location while you use the app, so Swimio can show pools and teams near you. Location access is optional and can be turned off at any time in iOS Settings.

Install attribution: Swimio uses Apple's AdServices framework to learn whether an install followed an App Store search or advertisement. This relies on a privacy-preserving token defined by Apple, not the advertising identifier (IDFA), and does not link your activity across other companies' apps or websites.

Third-party fitness integrations: if you connect Strava, Swimio requests only activity:write and uploads completed swims recorded with Swimio. Swimio does not read or analyze Strava activities. While connected, it stores your Strava athlete identifier, granted scope, and OAuth tokens. Upload and activity identifiers, processing status or error, and lifecycle timestamps are scheduled to expire no later than 36 hours after the initial upload attempt and are normally purged within 42 hours. Swimio does not use Strava API data for AI, advertising, sale, sharing, model training or evaluation, or product analytics. You can disconnect in the app or revoke access on Strava; either action removes your tokens and Strava metadata, and Swimio provides written confirmation in the app. Strava may monitor and collect usage data related to Swimio's access to the Strava API and may use that data for any business purpose, internal or external, as described in Strava's API terms.

Subscriptions: in-app purchases are handled by Apple. We do not receive your full payment card details. Swimio may receive purchase status or entitlement information needed to unlock paid features.

Website analytics: Swimio uses Vercel Web Analytics and Vercel Speed Insights to understand page views, referrers, browser, operating system, country or region, and performance. Vercel Web Analytics is designed to store anonymized data and not use cookies.

Optional analytics cookies: if you accept optional analytics cookies, we use Microsoft Clarity and Google Analytics to understand website interactions through pseudonymous identifiers, page views, referrers, browser and device information, clicks, scrolls, and session recordings. These providers may set first-party and third-party cookies. You can reject or clear this consent from your browser storage and cookies. This website-cookie consent is separate from the in-app analytics described in Section 2, which applies to the Swimio mobile app and is not cookie-based.

Support and feedback: if you email us or submit a support form, we process your name, email address, category, priority, subject, message, device model, iOS version, app version, and any attachments or details you choose to include.

Technical logs: our hosting and service providers may process IP address, device/browser information, timestamps, URLs, error logs, and security events to deliver and protect the website and connected services.

Provide and maintain Swimio features, including workout building, Apple Watch guidance, HealthKit sync, AI Coach, Smart Import, subscriptions, teams, sharing, notifications, and support.

Personalize workouts, insights, recommendations, readiness, training load, and performance summaries when you choose those features.

Improve reliability, safety, localization, accessibility, product quality, and website performance, including by measuring which features and onboarding steps work well.

Respond to support, feedback, privacy requests, billing questions, bug reports, and security issues.

Comply with legal obligations and enforce our rights, including fraud prevention and platform requirements.

Contract: to provide the app, subscriptions, support, and requested features.

Consent: for HealthKit permissions, location access, Strava connections, optional analytics cookies, optional AI or sharing features where consent is required, and processing health data where explicit consent is required by law.

Legitimate interests: to secure, debug, maintain, and improve Swimio, including through in-app usage analytics and install attribution, and to respond to non-sensitive support requests, unless your rights override those interests.

Legal obligation: to comply with applicable law, tax, accounting, platform, and regulatory requirements.

We do not sell your personal information.

We share data only when needed with service providers that help run Swimio, such as Apple for HealthKit, iCloud, App Store distribution, purchases, and install attribution; Google Firebase and PostHog for app backend services, push notifications, and in-app analytics; hosting and analytics providers such as Vercel; optional website analytics providers such as Microsoft Clarity and Google Analytics; email/support providers; AI processing providers for AI features; crash, logging, notification, storage, and infrastructure providers; and authorities when legally required.

If you connect Strava, Swimio sends only the selected completed Swimio workout data needed to create the activity in your own Strava account; Strava's use of that data is governed by Strava's own privacy policy.

If you use team, coach, pool channel, live publishing, export, or sharing features, information you choose to share may be visible to the recipients, team members, coaches, pool/channel participants, or people who receive your shared link or export.

Service providers are allowed to process data only for the purposes needed to provide their services to Swimio, subject to appropriate confidentiality, security, and data protection terms.

Swimio may use providers located outside your country, including in the United States and other jurisdictions. Where required, we rely on appropriate safeguards such as adequacy decisions, standard contractual clauses, provider data processing terms, and security measures.

On-device, Apple Health, and iCloud data remains under your control and can be deleted through the app, Apple Health, iCloud, or system settings where those controls are available.

Support emails and privacy requests are kept for as long as needed to respond, maintain records, and handle follow-up issues, then deleted or archived according to operational and legal needs.

Website analytics and technical logs are kept according to the retention settings of the relevant providers and only as long as reasonably needed for analytics, security, debugging, and legal compliance.

Connected feature data is kept for as long as needed to provide the feature, maintain your account or subscription status, comply with law, resolve disputes, prevent abuse, and keep backups. You can request deletion by contacting us.

Depending on where you live, you may have rights to access, correct, delete, export, restrict, or object to processing of your personal data. You may also withdraw consent where processing is based on consent.

European Economic Area, United Kingdom, and Swiss users may lodge a complaint with their local data protection authority. In Italy, this is the Garante per la protezione dei dati personali.

To exercise rights, including asking us to stop non-essential in-app analytics for your account, contact info@swimio.app. We may need to verify your request before acting on it.

Swimio is not intended to knowingly collect personal data from children where parental consent is required by law. If you believe a child provided personal data without required consent, contact us so we can review and delete it where appropriate.

Swimio may use automated processing and AI to generate workouts, import workout structure, summarize training, suggest personal bests, or provide coaching insights. These outputs are informational training aids and should not be treated as medical advice.

You remain responsible for deciding whether a workout, recommendation, or insight is appropriate for your health, ability, and swimming environment.

We may update this policy when Swimio features, providers, legal requirements, or privacy practices change. The latest version will be posted on this page with the updated date.