Privacy Policy
Your privacy matters to us. Learn how we collect, use, and protect your data.
Your Privacy is Our Priority
SwimSuite AB respects your privacy and processes personal data in compliance with GDPR and Swedish data protection regulations. We never sell your personal data.
SwimSuite AB ("SwimSuite", "Swim Suite", "we", "us", "the Company") provides digital tools for swimmers, parents, and coaches.
We respect your privacy and process personal data in compliance with GDPR and Swedish data protection regulations.
This Privacy Policy describes:
- Which data we collect
- Why we collect it
- How we protect it
- Your rights as a user
- How to contact our Data Protection Officer
SwimSuite AB is the data controller for:
- SwimSuite app services
- swim-suite.com public website
- Email and support communications
We determine how and why personal data is processed.
We process personal data under:
- Contract — to provide requested services, analyses, reports
- Consent — for uploads, analytics, cookies, notifications
- Legitimate interest — platform security, improvement, fraud prevention
- Legal obligation — accounting and regulatory compliance
- Name
- Phone number
- Club or company affiliation
- Work title
- Name and contact information
- Age, gender (optional)
- Payments and subscriptions (via Stripe/RevenueCat)
- Athletic data, swim performance data
- Uploaded videos and race analysis content
- Device information, logs, crash reports
- Information shared in messages
- Emails sent to support or admin
When you choose to connect Health Connect (Android) or Apple Health (iOS), we read the following health and fitness data:
- Heart rate and resting heart rate
- Heart rate variability
- Sleep
- Active and basal energy expenditure
- Steps and distance
- Workouts
This access is read-only — we read this data from Health Connect or Apple Health but never write data back to them.
We use this data solely to calculate your daily readiness and training-load insights, and to present those insights to you and to the coaches of the club you belong to, as daily summaries (for example your resting heart rate, sleep, and training load per day). Coaches see these daily summaries, not raw or continuous sensor readings. Your health data is stored in our secure cloud database.
We do not sell your health data, and we do not use it for advertising or share it with advertisers. Our handling of Health Connect data complies with the Google Health Connect data policy.
You can withdraw access to your health data at any time through Health Connect (Android) or the Health app (iOS). Deleting your account removes the health data we have stored.
Legal basis (EU/EEA): Health data is a special category of personal data under Article 9 GDPR. We process it on the basis of your explicit consent, which you may withdraw at any time.
We use data to:
- Provide and operate SwimSuite services
- Perform AI-enhanced race analysis
- Deliver reports and insights
- Process secure payments
- Improve platform performance
- Provide technical support
- Fulfill legal obligations (accounting, invoicing)
We use cookies to improve usability, analyze traffic, and personalize visitor experience.
Types of cookies:
- Session cookies (temporary)
- Persistent cookies (expiry-based)
- First-party cookies (set by SwimSuite)
- Third-party cookies (analytics providers)
You may block cookies in your browser. Blocking cookies may limit site functionality.
We only share necessary data to deliver the service. Personal data is never sold.
Trusted partners include:
- Firebase — authentication, database, analytics
- Stripe — secure payments
- RevenueCat — subscription management
- Google Cloud — encrypted storage
- SendGrid — email delivery
- OpenAI — optional AI insights
Most data is processed within the EU/EEA. Some data may be processed outside EEA (e.g., Stripe, SendGrid, Google).
We ensure legal protection using:
- Standard Contractual Clauses (SCCs)
- Data Processing Agreements (DPAs)
We retain data only as long as needed:
- User account — until deleted
- Race videos — deleted after analysis unless user selects retention
- Reports — stored for user access
- Payment records — 7 years (required by Swedish law)
We use industry-grade protection measures:
- TLS encryption for communications
- AES-256 encryption at rest
- Role-based access controls
- Secure Google Cloud infrastructure
- Monitoring and intrusion detection
Access to personal data is strictly limited.
You may request:
- Access to your personal data
- Correction of inaccuracies
- Deletion ("right to be forgotten")
- Data export (portability)
- Objection to processing
- Withdrawal of consent
Complaints may be filed with Integritetsskyddsmyndigheten (IMY).
Users under 16 require parental consent. Coaches and guardians are responsible when submitting swimmer data.
Upon verified user request we:
- Delete account data
- Remove stored videos and files
- Remove analysis data linked to the user
- Retain only accounting-required documents (7 years)
We may update this Privacy Policy. Current version always available at https://swim-suite.com/. Significant changes will be announced through the website or in-app notifications.
Request Account Deletion
If you wish to delete your entire account and all associated data (videos, analyses, session plans, analytics, and all personal identifiers), please contact us at support@swim-suite.com. We process deletion requests within 30 days as required under GDPR.
Request Deletion