← Back

Privacy Policy

Surge Swimming · Last updated: 15 July 2026

Surge Swimming ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal information when you use the Surge Swimming website, mobile application, and related services (the "Service").

This Policy is intended to comply with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). By using the Service, you agree to the collection and use of information as described in this Policy.

1. Information We Collect

We collect the following categories of information:

  • Account information — name, email address, date of birth, gender, password (encrypted).
  • Swim profile information — primary stroke, goal events, experience level, training preferences, personal bests, strengths and weaknesses you provide.
  • Training data — logged sessions, ratings of perceived exertion (RPE), energy levels, technique feedback, notes, and generated training programs.
  • Health and fitness data — where you choose to connect a wearable device (such as Whoop), we may collect recovery score, heart rate variability (HRV), resting heart rate, and sleep data.
  • Payment information — processed securely by our payment provider, Stripe. We do not directly store your full card details.
  • Community content — posts, comments, likes, follows, squad memberships, and profile content you choose to share within the Service.
  • Technical information — device type, browser, IP address, and usage data collected automatically to operate and improve the Service.

2. How We Use Your Information

We use your information to:

  • Generate personalised AI-powered swim and strength training programs;
  • Adapt your training program based on your logged sessions and, where connected, wearable recovery data;
  • Provide the AI coaching chat feature ("Coach");
  • Process subscription payments and manage your account;
  • Operate community, squad, and social features;
  • Send you service-related notifications, including push notifications you have opted into;
  • Maintain the security and integrity of the Service;
  • Comply with our legal obligations.

3. AI Processing Disclosure

To generate your personalised training programs and provide AI coaching responses, certain information from your profile — including your swim profile, recent training logs, and (where relevant) wearable recovery data — is sent to Anthropic's Claude API for processing. This data is used solely to generate your training content and is subject to Anthropic's own data handling practices for API usage.

We do not use your personal training data to train third-party AI models beyond what is necessary to generate your own program and coaching responses.

4. Sharing Your Information

We do not sell your personal information. We share your information only with the following categories of third parties, and only as necessary to operate the Service:

  • Stripe — to process subscription payments;
  • Supabase — to securely host and store your account and application data;
  • Vercel — to host and serve the Surge Swimming application;
  • Anthropic — to generate AI-powered training programs and coaching responses, as described in Section 3;
  • Whoop or other wearable platforms — only where you actively choose to connect your account, to retrieve recovery and fitness data.

We may also disclose your information where required by law, or to protect the rights, property, or safety of Surge Swimming, our users, or the public.

5. Data Storage and Security

Your data is stored using Supabase's hosted infrastructure. We take reasonable technical and organisational measures to protect your personal information from unauthorised access, loss, misuse, or alteration, including encryption of data in transit and access controls on our systems.

While we take reasonable steps to protect your information, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

6. Cookies and Tracking

We use essential cookies to maintain your login session and enable core functionality of the Service. We do not currently use third-party advertising or tracking cookies.

7. Your Rights

Under the Australian Privacy Principles, you have the right to:

  • Access the personal information we hold about you;
  • Request correction of inaccurate or outdated information;
  • Request deletion of your account and associated personal information, subject to any legal obligations requiring us to retain certain records;
  • Withdraw consent to optional data collection, such as wearable device integrations, at any time by disconnecting the relevant account in your settings.

To exercise any of these rights, please contact us using the details in Section 11.

8. Data Retention

We retain your personal information for as long as your account remains active, and for a reasonable period afterward to comply with legal, accounting, or reporting obligations, resolve disputes, and enforce our agreements. If you request deletion of your account, we will delete or de-identify your personal information within a reasonable timeframe, except where we are required to retain it by law.

9. Children's Privacy

The Service is not intended for individuals under the age of 16. Users aged 16 or 17 may use the Service only with the consent of a parent or legal guardian, as set out in our Terms of Service. We do not knowingly collect personal information from children under 16.

10. Push Notifications

If you opt in to push notifications, we will send you notifications relating to your training, such as reminders and AI adaptation updates. You can disable push notifications at any time in your device or account settings.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us at:

surgeswimmingau@gmail.com

If you are not satisfied with our response, you may also contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting the updated Policy within the Service or by other reasonable means. Your continued use of the Service after such changes constitutes your acceptance of the updated Policy.