Privacy Policy

This Privacy Policy applies to the SwimAhead website, accounts, recruiting workspaces, questionnaires, email tools, billing features, and support interactions, collectively the Service. Daniel Beyerbach is responsible for the practices described here.

This Policy covers information SwimAhead sends to a provider, directs a provider to collect for SwimAhead, receives from a provider, or can access through an integration. Third-party websites and services also have their own privacy practices for their independent processing. Their policies govern a college site, USA Swimming Data Hub, SwimCloud, Stripe-hosted pages, Google, Microsoft, or another third-party page that you visit or authorize.

The information collected depends on the account and features used.

Please do not submit Social Security numbers, payment-card numbers, medical records, financial-account credentials, or other information that a feature does not request.

• You. Information entered at signup, onboarding, profile editing, imports, forms, support, billing, and mailbox connection.
• Other users and organizations. A coach may create a recruit record; a workspace member may add notes; a user may attest that a guardian authorized use; a guardian may later contact SwimAhead to withdraw or correct that authorization; and a questionnaire respondent may submit information to a program.
• Public and third-party sources. USA Swimming results and member-search data, government college datasets such as College Scorecard, college and athletics websites, competition results, and other recruiting sources. SwimAhead's right to use a source depends on applicable law, the source's terms, and any authorization required for that source.
• User-directed third parties. Google returns the basic identity used to sign in; Stripe collects the billing contact, address, payment method, and any configured tax information and returns billing, invoice, tax, payment, refund, and dispute details; Google or Microsoft can separately return a connected-mailbox identity and send receipts when a coach connects outreach; Supabase provides authentication records; and email providers return delivery events.
• Automatic collection. Browsers, servers, security systems, and hosting infrastructure generate session, request, device, and diagnostic data.

SwimAhead does not currently use a general SwimCloud athlete API or scrape SwimCloud. Users can provide a SwimCloud link and can paste or upload athlete-owned results. SwimCloud's own terms and privacy policy govern its site.

• Create, authenticate, secure, and support accounts and workspaces.
• Build swimmer profiles, store times, calculate performance comparisons, and personalize program or recruit matching.
• Provide boards, roster planning, campaigns, questionnaires, recruit records, notes, tasks, and other requested workflows.
• Apply a swimmer's sharing choices and record age and guardian-authorization attestations where the Service collects them.
• Create, preview, transmit, and record outreach that an authorized user directs.
• Process coach subscriptions, determine access, send receipts or billing notices, prevent repeated introductory discounts, and address charge questions.
• Respond to support, access, correction, deletion, consent, removal, security, and legal requests.
• Detect abuse, enforce access controls, troubleshoot failures, maintain service integrity, prevent fraud, and protect users.
• Evaluate and improve features using aggregate, deidentified, or appropriately restricted operational data.
• Comply with law, preserve evidence, establish or defend legal claims, and enforce the Terms.

SwimAhead uses software rules and calculations to compare swimmer times, competition categories, class years, academic preferences, costs, locations, roster performance, and coach-selected needs. The resulting match, fit, benchmark, or recommendation is an estimate intended to organize research.

SwimAhead does not make a decision that admits, recruits, rejects, ranks for eligibility, awards aid to, or removes a person from a team. Coaches, schools, swimmers, and families make their own decisions and should verify underlying information.

• Swimmer accounts. An owned swimmer profile is not public by default. Expressing interest may share limited identifying and recruiting information with the selected program. Full-profile sharing can include contact, academics, times, biography, and video information.
• Minor swimmers. A user under 18 must attest that a parent or legal guardian authorized the account, submission, and requested sharing. SwimAhead does not independently verify every guardian relationship. A verified withdrawal request stops future sharing controlled by SwimAhead but cannot retrieve copies already received or independently held by others.
• Coach workspaces. Recruit records, notes, tasks, questionnaires, campaigns, roster data, and delivery history are available to authorized members of the applicable workspace according to their role.
• Questionnaires. A person using a program's questionnaire link sends the response to that program's coach workspace. Do not submit to a program unless you intend that program to receive it.
• Public-source recruits. Coach search results may contain limited recruiting facts compiled from public or licensed sources even if the athlete does not have a SwimAhead account.
• Email recipients. Content sent through an outreach feature is disclosed to the selected recipient and the connected mail provider. Recipients may retain, forward, or copy it.
• Email images. An image uploaded for an outgoing rich email is stored at a public URL so email clients can retrieve it. Anyone with that URL may be able to view it.

SwimAhead discloses information only as reasonably needed for the purposes described here:

• Supabase provides authentication, database, server functions, and file storage.
• Stripe hosts payment entry and the billing portal and processes the billing identity and address, payment method, tax information if configured, customers, subscriptions, invoices, charges, refunds, disputes, and fraud signals. SwimAhead sends the account name, email, and internal user identifier and receives or can access the billing records described above. Stripe also processes payment details under its own privacy policy.
• Resend may transmit transactional messages and return delivery events when that feature is configured.
• Google verifies every account sign-in and returns basic profile identity: name, verified email, and provider identifier. SwimAhead does not request Gmail access for account authentication.
• Google or Microsoft mailbox connection is separate and optional for coaches. If a coach chooses it, the provider receives account-connection and send requests. SwimAhead requests identity information and send permission, not general mailbox-reading permission.
• Hosting, security, and infrastructure providers process technical data needed to operate and protect the Service.
• Authorities and affected parties may receive information when reasonably necessary to comply with valid legal process, protect safety or rights, investigate abuse, or address fraud and security incidents.
• A successor or transaction participant may receive information in a merger, financing, acquisition, reorganization, or transfer of the Service, subject to appropriate confidentiality and notice obligations.

SwimAhead does not permit a service provider to use personal information for its own targeted advertising on SwimAhead's behalf.

SwimAhead does not sell private information submitted through swimmer accounts or questionnaires for money or other valuable consideration. It does not share personal information for cross-context behavioral advertising and does not display targeted advertising based on activity across unrelated sites or services.

A paid coach subscription may provide search and matching access to limited athlete recruiting facts compiled from public or properly licensed sources. SwimAhead charges for the software workspace and its features, not a per-person record. Some privacy and data-broker laws define a sale, exchange, or covered data-broker activity broadly, however. Before publicly offering this feature, the operator must obtain a jurisdiction-specific analysis and implement any required license, notice, registration, deletion, access, correction, or opt-out obligations. A person may request removal or object to this use through the privacy contact below.

If these practices change, SwimAhead will update this Policy and provide any required notice and choice before using previously collected information for the new purpose.

SwimAhead uses cookies and browser storage that are necessary for authentication, session continuity, security, OAuth state, preferences, and navigation. The Service does not currently use third-party advertising cookies or cross-site behavioral analytics.

Blocking necessary cookies can prevent sign-in, billing return flows, mailbox connection, or other features from working. Stripe and other third-party pages may set their own cookies when you visit them.

Because browsers do not apply a uniform Do Not Track standard and SwimAhead does not conduct cross-site behavioral advertising, the Service does not change its current practices in response to a browser Do Not Track signal. This does not limit any legally recognized opt-out signal if SwimAhead later engages in a practice to which that signal applies.

SwimAhead does not knowingly permit third parties to collect activity on SwimAhead over time and across unrelated websites for advertising. When you leave SwimAhead for Stripe, Google, Microsoft, a college, or another third-party service, that service may collect activity under its own policy.

SwimAhead keeps information only for as long as reasonably necessary for the purpose collected, considering account status, user instructions, workspace needs, safety, fraud prevention, recordkeeping, legal obligations, disputes, and backup design.

• Account, profile, time, board, and workspace information is generally retained while the account or applicable workspace is active and until it is deleted or no longer needed.
• Connected-mailbox credentials are retained while the connection remains active and are removed from active credential storage when the connection is disconnected. Short-lived OAuth state expires after the connection attempt.
• Outreach drafts, send records, provider events, and related content are retained while reasonably needed for recruiting workflows, complaints, suppression, security, and delivery disputes. SwimAhead does not yet apply one automatic deletion period to every outreach record.
• Opt-out and suppression records may be retained as long as needed to avoid contacting a person again.
• Billing, consent, transaction, security, and legal records may be retained for the period required to demonstrate authorization, comply with law, prevent abuse, resolve disputes, or enforce agreements.
• Public email images and data already exported, sent, copied, or received by someone else may persist after the originating record is removed.
• Deleted information can remain temporarily in restricted backups, logs, or disaster-recovery systems until overwritten under ordinary cycles.

Where possible, SwimAhead may deidentify information instead of retaining it in identifiable form.

SwimAhead uses safeguards intended to match the nature of the information, including authenticated access, role and workspace controls, database row-level security, server-only administrative credentials, encrypted storage of connected-mailbox tokens, signed webhook verification, transport encryption, input validation, and Stripe-hosted payment entry.

No storage or transmission method is completely secure. Users should protect their Google account with a strong password and two-step verification, sign out of shared devices, limit sensitive notes, and report suspected compromise promptly.

Under 13. SwimAhead is not offered for direct use by children under 13 and does not knowingly allow them to create accounts or submit questionnaires. If we learn that an under-13 child submitted personal information directly, we will disable the account and delete the information unless retention is legally required. SwimAhead may separately process competition records obtained from public or third-party sources about athletes, including minors; a parent may request review, correction, or removal at the privacy email below.

Ages 13 through 17. A minor swimmer must have a parent or legal guardian authorize use. SwimAhead records the user's age-eligibility and guardian-authorization attestation but does not independently verify every relationship. We do not sell private information submitted through a minor's account or questionnaire, and we do not use minors' information for targeted advertising. Public-source recruiting facts are addressed separately in Section 8.

Removal of a minor's content. A registered minor may edit information available in profile controls or request removal of content or information the minor posted. Send a request identifying the account and material to db4atgm@gmail.com. Removal does not ensure complete deletion where another person copied or reposted it, another law requires retention, it has been anonymized, it came from a different person or public source, or it remains in a restricted backup.

A guardian may ask to review, correct, delete, or stop further collection of a minor's information and may withdraw guardian consent, subject to identity and relationship verification.

Depending on your relationship with SwimAhead and applicable law, you can:

• Review and correct editable account, profile, time, board, roster, and workspace information through the Service.
• Revoke an active swimmer-program share or withdraw guardian consent for future sharing.
• Disconnect a Google or Microsoft mailbox and remove its stored credentials from active use.
• Cancel a coach subscription separately from deleting the account.
• Request access to, correction of, a portable copy of, or deletion of personal information associated with you.
• Request removal of minor-posted content or correction of a public-source recruit record.
• Opt out of marketing email without losing necessary account, security, or billing messages.

Send a request to db4atgm@gmail.com. Describe the request and the email or profile involved. SwimAhead may verify identity, authority, or guardian relationship before disclosing or changing data. We may deny or limit a request where law permits, including to protect another person, preserve security or fraud records, honor legal retention, or retain data that does not identify you.

Authorized agents should identify the person represented and provide proof of authority. You may appeal a denied request by replying with "Privacy appeal" in the subject line.

Service messages can include questionnaire or workflow notices, receipts, payment failures, renewal reminders, policy notices, and security communications. These are not marketing messages and may be necessary to operate an account or subscription.

Marketing messages, if offered, include an unsubscribe method. A user who directs recruiting outreach is responsible for recipient permission and legally required opt-out handling under the Terms.

SwimAhead is designed primarily for United States college recruiting. Its providers can process information in the United States and other locations where they operate. Privacy protections and government-access rules may differ between locations.

SwimAhead may update this Policy when data practices, providers, features, or legal requirements change. The effective date and version appear at the top. Material changes will be communicated through the Service, email, or another method reasonably designed to reach affected users before they apply where required.

Send privacy questions or requests to db4atgm@gmail.com.

Billing-specific choices are explained in the Billing, Cancellation, and Refund Policy.