Poolside Progress ("Poolside Progress", "we", "us") helps parents and guardians of UK competitive swimmers understand their own swimmer's times, qualifying-time gaps and gala-day races. This policy explains what personal data we handle, why, and your rights under UK data protection law (UK GDPR and the Data Protection Act 2018).
At sign-up you choose whether you are a parent/guardian or the swimmer. A parent/guardian (18+) holds the account and adds their swimmer(s). A swimmer aged 13 or over can hold their own account. An under-13 swimmer cannot create or hold their own account in this version; a parent/guardian can add them as a swimmer under the parent account. A parent and their 13+ child can each hold the same swimmer.
We do not build searchable profiles of other people's children, track other children over time, or offer any social features between children.
| Data | Why we process it | Lawful basis |
|---|---|---|
| Account email, authentication session | To create and secure your account | Contract (providing the service) |
| Account holder name, date of birth, role | To set up the account and apply the age rules (parent/guardian or swimmer chosen at sign-up; 13+ may hold their own account; under-13 swimmers cannot hold their own account in this version) | Legal obligation / Children's Code; Contract |
| Your swimmer's name, date of birth, club, category | To show their times, age group and qualifying gaps | Consent of the parent/guardian; Contract |
| Your swimmer's registration / membership number | To verify the swimmer and retrieve their own result history | Consent; Legitimate interests (own-swimmer data) |
| Your swimmer's race results, personal bests, splits | The core feature: progress and benchmarking for your own swimmer | Consent; Contract |
| Guardian declaration / consent record | To evidence that a parent/guardian authorised use of a child's data | Legal obligation; Consent |
| Uploaded gala programmes (may include other children) | To show your swimmer's races and field context on the day | Legitimate interests, retention-limited |
| Usage analytics (anonymous website page views and link/store clicks; app events and device type) | To understand and improve the website and app | Legitimate interests |
We minimise what we store. Where we can show aggregate or on-device information instead of storing more personal data, we do.
We apply a strict process before any child's data is added to the app:
This keeps the app to your own swimmer and prevents browsing or adding other people's children.
| Data | Retention |
|---|---|
| On-device swimmer data | Until you delete it in the app or uninstall |
| Imported gala programmes (and any derived data) | Automatically purged ~30 days after import |
| Account / login | Until you delete your account |
| Server-side swimmer verification and consent records | Until you remove the swimmer or delete your account, subject to any legal need to retain a consent audit record |
| Usage analytics | Up to 14 months from collection, then deleted |
You can ask us to access, correct, delete, or port your personal data, or to restrict or object to processing. In particular:
You can also complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.
Poolside Progress is built around a parent/guardian managing their own child's data. We follow the principles of the ICO's Age Appropriate Design Code (Children's Code): data minimisation, no profiling of other children, no behavioural nudges, and no public child profiles. A 13–17 swimmer may hold their own account. Under-13 swimmers do not have their own login in this version and must be managed by a parent/guardian account. We may revisit under-13 logins only after the verifiable-parental-consent path has legal/DPO sign-off.
We do not sell your data. We share it only with processors that run the service (e.g. Supabase hosting/analytics) under appropriate agreements, or where required by law.
We use authentication, row-level security and least-privilege access controls. The swimmer's membership number is held separately from client-readable data. No internet service can be guaranteed 100% secure.
We may update this policy. Material changes will be notified in the app. The "Last updated" date above shows the current version.