Privacy Policy

PoolDeck Friends is a web app used by parents and families to follow swim meets in real time. It is operated by PoolDeck Technologies LLC (“PoolDeck Technologies LLC”, “we”, “us”). You can reach us at privacy@pooldeck.app.

• Account identifiers. A phone number or email address you use to sign in. We send a one-time 6-digit code to verify you control that number/address.
• Family and swimmer data. The names, ages, gender, date of birth, and team affiliation of the swimmers you link to your account, and the relationship between your account and each swimmer (parent, coach, etc.). Swimmer identifiers come from official meet entries you point us to.
• Friends. If you connect with another family in the app, we store the friendship link and which of their swimmers you’ve opted in to follow.
• Device & push data. If you enable push notifications, we store the push subscription token your browser gives us so we can send heat-is-starting alerts. We also record the notification preferences you set (warning minutes, friend alerts, etc.).
• Usage data. Server logs (IP, user agent, request paths, timestamps) for security and debugging. We do not run third-party advertising trackers.
• Meet data. Live race timing, heats, and results broadcast by the meet’s official timing system. This data is about the meet itself, not about you specifically.

• Send you the one-time code required to sign in (by SMS or email).
• Show you the right swimmers, heats, results, and predictions for each meet you attend.
• Deliver push notifications and SMS alerts you’ve opted into (“head to the blocks”, heat-called alerts, friend updates).
• Keep the service secure — detect abuse, enforce rate limits, and debug problems.
• Improve the product — measure which features are used and where the app is slow or broken.

When you choose phone sign-in, we send SMS messages through Twilio. By entering your phone number and requesting a code, you consent to receive an automated SMS containing a verification code at that number. Standard message and data rates may apply from your carrier.

We only send SMS that are tied to functionality you’ve asked for: sign-in codes, and (if you’ve turned on SMS heat alerts) notifications about your own tracked swimmers. We do not use SMS for marketing, and we do not sell or share your phone number with third parties for their own marketing.

To stop SMS at any time, reply STOP to any message from us. Reply HELP for assistance. You can also delete your account to stop all messages permanently (see Your rights below). Opting out of SMS does not log you out of the app — email sign-in remains available.

We share personal information only with service providers that help us run the app, and only to the extent they need:

• Supabase — authentication, database, realtime.
• Twilio — SMS delivery for sign-in codes and alerts.
• Push notification services — Apple Push Notification Service, Firebase Cloud Messaging, and the browser push services (Mozilla, Google) that deliver web push.
• Hosting & analytics — Vercel for hosting; operational metrics only (no cross-site tracking).

We do not sell personal information. We may disclose information if we’re legally required to (subpoena, court order) or to protect against abuse.

The app is intended for parents and guardians. We do not knowingly collect personal information directly from children. Swimmer information (name, age, team) that parents enter about their own children is kept private to the parent’s account and to friends the parent has explicitly connected with. If you believe a child under 13 has created an account directly, contact us at privacy@pooldeck.app and we will delete it.

We keep account and family data for as long as your account is active. Server logs are rotated within 90 days. If you delete your account, we remove your account identifiers, family data, push subscriptions, and notification preferences. Meet results that were publicly broadcast by the meet’s timing system remain part of the meet record.

You can:

• See and edit the swimmers linked to your account at any time from the “Family” page.
• Turn SMS and push notifications on or off from the “Notifications” page, or reply STOP to any SMS.
• Delete your account and personal data at any time from the Delete your account page, or ask for a copy of your data by emailing us at privacy@pooldeck.app. We respond within 30 days.

We use industry-standard encryption in transit (TLS) and at rest. Authentication cookies are HTTP-only and scoped to our domain. No system is perfectly secure; if you become aware of a vulnerability, please let us know at privacy@pooldeck.app.

We may update this policy when the app changes. The “Last updated” date at the top of this page reflects the most recent substantive change. For material changes that affect how we use your data, we will notify you in the app or by email before the change takes effect.