Privacy Policy
Last updated: February 17, 2026
This page explains what data we process, why we process it, and how to use your privacy rights in freeswimming.org.
Who controls your data
freeswimming.org is the controller for app-owned account, entitlement, and progress data used in this product.
What data we use
- Account identifiers like email and user ID.
- Purchase entitlement status for owned guides and services.
- Course and guide progress, including completion states and notes.
- Operational logs needed for support, abuse prevention, and reliability.
Why we use it (legal basis)
- Contract performance: provide account access, restore purchases, and sync progress.
- Legitimate interests: product safety, abuse prevention, and service quality.
- Legal obligations: payment/accounting compliance handled with our payment provider.
Processors
Supabase
Authentication, database, and account-linked progress storage.
Stripe
Payment processing, invoicing, and payment-compliance recordkeeping.
Vercel
Application hosting and delivery.
Retention baseline
Account profile and entitlements
Kept while your account is active. Removed when account deletion is confirmed.
Course and guide progress
Kept while your account is active. Removed when account deletion is confirmed.
Support messages
Kept for support and safety follow-up, then removed on regular cleanup cadence.
Payment records
Managed by Stripe under legal/accounting obligations and may be retained after app account deletion.
Your data rights
- Export your app-owned data from your signed-in session via GET /api/user/export.
- Delete your app-owned account data from your signed-in session via POST /api/user/delete.
- For access/rectification/objection requests, use Contact and include subject: Privacy request.
Operational response target for rights requests is within 30 days.
Cookies and local storage
We use essential storage for authentication and core product function. See the Cookie Policy for details.