Legal

Privacy Policy

Last updated: 6 July 2026

Stroke ("we", "us") provides a swim training log at this website. This policy explains what personal data we collect, why, and how you can control it. It applies to every account tier (Free, Solo, Coach).

1. What we collect

Category	Examples
Account details	Username, email address, password (stored as a salted hash — we never see or store your plain-text password)
Social sign-in	If you use Google or Apple sign-in, we receive your email and display name from that provider
Training data	Swim times, events, splits, session sets, goals, notes you enter
Coach/squad data	Squad and club names, roster membership, lane group, coach's private notes about a swimmer, injury/availability status
Guardian consent data	Where a squad requires parental consent for a minor swimmer, the guardian's name and email address
Technical data	A session cookie that keeps you signed in. We don't use advertising or cross-site tracking cookies

2. How we use it

To operate your account — logging in, saving your swims, showing your stats and history
To power features you opt into — the leaderboard (only for users who explicitly opt in), coach rosters, printed reports
To send you account emails — email verification codes and, if you're part of a squad, your coach's announcements
We do not sell your data, and we do not use it for third-party advertising

3. Who we share it with

Resend — our email provider, used only to deliver verification codes to your inbox
Google / Apple — only if you choose to sign in with one of those providers, to authenticate you
Your coach — if you join a squad, your coach can see your training data, notes they write about you, and any status flags they set. They cannot see your account password
Other swimmers — only if you explicitly opt in to the leaderboard, other opted-in users can see your name and times for a given event

We do not share your data with any other third party.

4. Children's privacy

Stroke's Coach tier lets a coach mark a squad invite as requiring parental consent for a minor swimmer. In that case, the swimmer's account is not activated until a parent or guardian confirms consent and provides their name and email address. That consent record is stored so we can show it was given.

If you are a parent or guardian and have questions about a minor's account, or want it removed, contact us using the details in section 7 — we'll act on that promptly.

5. How long we keep it

We keep your data for as long as your account is active. If you delete your account, we delete your personal data, except where we need to keep a minimal record (like an admin audit log entry) for security or legal reasons.

6. Security

Passwords are hashed with bcrypt before storage. Access to admin tools and coach-only data is restricted by account role. No method of storage is 100% secure, but we take reasonable steps to protect your information.

7. Your rights

You can ask us to access, correct, export, or delete your personal data at any time. To do so, email privacy@stroke.app or use the account settings once available.

8. Changes to this policy

If we make material changes to this policy, we'll update the date above and, where appropriate, let you know in-app.

9. Contact

Questions about this policy or your data can be sent to privacy@stroke.app.