Privacy Policy
Last updated: 12 October 2026
This policy explains what personal data the AquaMind app and website collect, why, who processes it and what rights you have. We wrote it to be read, not skipped: if anything is unclear, write to us.
In short: we collect what the coach needs to coach you. Your data is stored in Europe, never sold, never used for advertising, and you can delete your account and all your data from the app at any time. To improve the coach, our team may review conversations with your name and email removed; you can turn this off in the app (Profile → Privacy & Data → Data controls).
1. Who is responsible for your data
The data controller is Mariia Zghurska, the creator of AquaMind, based in France.
Contact: aquamind.swimcoach@gmail.com
2. What we collect
Account
- Your email address and the sign-in method you chose (Apple, Google or email and password). Passwords are handled by Google Firebase Authentication; we never see or store them.
- If you sign in with Apple and choose "Hide My Email", we only receive Apple's relay address.
- Your answers at sign-up: that you accept these terms and this policy, and that you are 15 or older or have a parent's or guardian's agreement.
Your swimming profile and training
- Name you give, swimming level, main stroke, goal, how often you swim, next event, optional profile photo.
- Your conversations with the coach, and the facts the coach keeps to remember you (for example your best times or an injury you mentioned). You can see and delete these in Profile → What your coach remembers.
- Workouts you log or save, pulse (heart rate) counts, timed swims and your weekly plan.
Apple Health (only if you allow it)
- If you connect Apple Health, AquaMind reads your swimming workouts, swimming distance and heart rate to coach you. It never writes to Apple Health.
- Health data is used only to provide coaching to you. It is never used for advertising, never sold and never shared with data brokers.
Purchases
- Subscriptions are handled by Apple. We do not receive your payment details; Apple only tells the app whether your subscription is active.
Reports and support
- If you report a coach message, we receive that message and the reason. If you email us, we receive your email and what you write.
What we do not collect
- No advertising identifiers, no tracking across other apps or websites, no location, no contacts. We do not sell personal data.
3. Why we use it, and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Create your account and keep your data in sync across your devices | Performance of our contract with you (Art. 6(1)(b)) |
| Coaching: answer your messages, build and adjust your sessions using your profile, workouts, pulse and memory | Contract (Art. 6(1)(b)); for health-related data such as heart rate, injuries or how you feel, your explicit consent given at sign-up (Art. 9(2)(a)), which you can withdraw at any time by deleting your account |
| Improve the coach by reviewing conversations with name and email removed | Your consent, which you can withdraw at any time in Profile → Privacy & Data → Data controls (Art. 6(1)(a) and 9(2)(a)) |
| Keep the service safe: prevent abuse, protect the coach's instructions, handle reports | Our legitimate interest in a safe service (Art. 6(1)(f)) |
| Answer your support requests | Contract, or our legitimate interest in helping you |
4. Who processes your data for us
- Google (Firebase) — sign-in, secure cloud storage of your data (Cloud Firestore, Paris region, France), and protection of our servers against abuse (App Check).
- Google (Gemini, through Firebase AI Logic) — generates the coach's replies. Your message, the recent conversation and your swimming profile are sent to the model to create each reply. Google does not use this data to train its models. This processing may take place outside the European Union; it is covered by Google's data processing terms and the EU Standard Contractual Clauses.
- Apple — Sign in with Apple, in-app subscriptions and Apple Health (Health data stays on your device unless the app reads it to coach you).
We do not share your data with anyone else, except if required by law.
5. How long we keep it
- Your data is kept while your account exists. When you delete your account in the app (Profile → Delete Account), we delete your account and all data stored in the cloud and on that device. Backups held by our providers are erased within their standard cycles, usually within 30 days.
- Support emails are kept for as long as needed to help you, then deleted.
6. Your rights
You have the right to access, correct and delete your data, to receive a copy of it (portability), to object to or restrict some processing, and to withdraw consent at any time. Most of this you can do directly in the app; for anything else, write to aquamind.swimcoach@gmail.com. We answer within one month.
You can also complain to the French data protection authority, the CNIL (cnil.fr), or to the authority in your country.
7. Young swimmers
AquaMind can be used from age 15. Younger swimmers may use it only with the agreement of a parent or guardian, which is confirmed at sign-up. If you believe a child is using AquaMind without this agreement, write to us and we will delete the account.
8. Security
Data is encrypted in transit and at rest. Only you can access your data from the app; our database rules block access to anyone else's account. We use Firebase App Check to verify that requests to the coach come from the genuine AquaMind app.
9. The AI coach
The coach is an artificial intelligence. It gives coaching, not medical advice. If you mention thoughts of harming yourself or others, the app shows help-line numbers for your country; we do not store these conversations in the coach's memory.
10. Changes
If we change this policy in a meaningful way, we will tell you in the app before the change applies. The date at the top always shows the current version.