Privacy Policy

Last updated: March 02, 2026

Introduction

ChriSwim Journal ("we", "our", or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our swimming training journal application.

GDPR Compliance: This policy complies with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Information We Collect

Personal Information
  • Account Information: Name, email address, display name
  • Profile Data: Year of birth, swimming club, bio information
  • SwimRankings ID: Optional external service identifier
  • Authentication Data: Password hash, OAuth tokens (Google/Facebook)
Swimming Data
  • Training Sessions: Date, duration, distance, RPE, session notes
  • Performance Results: Competition times, meet information, personal bests
  • Goals: Personal targets, progress tracking, completion status
  • Coach Feedback: Comments, ratings, training plan assignments
Technical Information
  • Usage Data: Pages visited, features used, session duration
  • Device Information: Browser type, operating system, IP address
  • Cookies: Session cookies, preference cookies, analytics cookies

How We Use Your Information

Service Provision
  • Provide training journal functionality
  • Generate performance analytics and charts
  • Enable coach-swimmer communication
  • Process goal tracking and progress updates
Analytics & Improvement
  • Analyze service usage patterns
  • Improve user experience and features
  • Generate aggregated performance insights
  • Identify and fix technical issues
Communication
  • Send service-related notifications
  • Provide account security alerts
  • Share important service updates
  • Respond to support requests
Legal Compliance
  • Comply with legal obligations
  • Protect our rights and property
  • Prevent fraud and abuse
  • Ensure service security and integrity

Your Rights Under GDPR

As a data subject, you have the following rights:

Data Subject Rights
  • Right to Access: Request copies of your personal data
  • Right to Rectification: Correct inaccurate personal data
  • Right to Erasure: Delete your personal data ("right to be forgotten")
  • Right to Restrict: Limit processing of your data
  • Right to Portability: Receive your data in a structured format
  • Right to Object: Object to processing of your data
To exercise your rights, contact us at: privacy@tulevikulaps.ee

Data Sharing and Disclosure

We do not sell your personal data. Your swimming data is only shared as described below.
When We Share Data
  • With Your Coach: Training data and performance metrics (with your consent)
  • With Your Parents: Progress summaries (through secure sharing tokens you control)
  • Service Providers: Third-party services that help us operate (under strict data processing agreements)
  • Legal Requirements: When required by law or to protect rights and safety
Data Security

We implement appropriate technical and organizational measures to protect your data:

  • Encryption in transit and at rest
  • Secure authentication protocols
  • Regular security audits
  • Access controls and monitoring
  • Data backup and recovery procedures
  • Staff training on data protection

Cookies and Tracking

Cookie Type Purpose Required
Essential Cookies Login sessions, security, basic functionality Required
Preference Cookies Remember your settings and preferences Optional
Analytics Cookies Understand how you use our service Optional

You can manage cookie preferences in your browser settings. Disabling non-essential cookies may affect some service functionality.

Data Retention

We retain your personal data only as long as necessary for the purposes described in this policy:

  • Active Accounts: Data retained while your account is active
  • Inactive Accounts: Data deleted after 2 years of inactivity (with prior notice)
  • Account Deletion: Most data deleted immediately upon request
  • Legal Requirements: Some data may be retained longer for legal compliance
Account Deletion: You can delete your account and all associated data at any time from your account settings or by contacting us.

International Data Transfers

Your data is primarily processed within the European Union. If data is transferred outside the EU, we ensure appropriate safeguards are in place through standard contractual clauses or adequacy decisions.

Contact Information

Data Protection Officer

For privacy-related questions, concerns, or to exercise your rights:

  • Email: privacy@tulevikulaps.ee
  • Website: Legal Information
  • Response Time: We aim to respond within 72 hours
Supervisory Authority

You have the right to lodge a complaint with your local data protection authority if you believe we have not addressed your privacy concerns adequately.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by:

  • Posting the updated policy on our website
  • Sending email notification to registered users
  • Displaying a notice in the application

Your continued use of the service after any changes indicates your acceptance of the updated policy.