At Catch, your privacy is important to us. This Privacy Policy explains how we collect, use, and protect your personal information. By using our website, services, or products, you agree to this Privacy Policy. If you have any questions, contact us at support@catchswim.com.
1. What Information We Collect
We may collect the following information when you interact with us:
- Account Data: Name, email address, phone number, date of birth.
- Training Data: Swimming ability, goals, performance metrics, session results, progress tracking
- Health Information: Self-reported swimming ability, medical conditions affecting training (with explicit consent)
- Payment Details: Billing information processed securely through Stripe and RevenueCat
- Location Data: Pool location types, open water venues (when you choose to share)
- Watch Data: When you swim with the Catch app on a Wear OS watch, the watch uses its motion sensors to count your lengths and its heart rate sensor to measure your heart rate. This only happens during a swim you start, and is saved with that swim in your Catch account.
- Device Information: Device type, operating system, app usage analytics
- Calendar Data: Training session scheduling (only when you connect calendar services)
- Community Data: Posts, comments, interactions in community features
- Referral Data: Referral codes used and generated
Automatically Collected Data
- Usage Information: How you interact with our app and services
- Technical Data: IP address, browser type, device identifiers
- Performance Data: App performance metrics and crash reports
Connected Fitness Integrations (Optional): Garmin
If you choose to connect your Garmin account, our app can both receive your activity data from Garmin Connect and send your planned training sessions to Garmin so they can appear on your devices. This integration is optional and controlled by you. When connected, we may receive the following from Garmin:
- Activity Summaries: Activity type (e.g., lap or open water swimming), start time, duration, distance, calories
- Performance Metrics: Average speed/pace, strokes per minute (swim cadence), active lengths count, device name
- Heart Rate Metrics: Average and max heart rate (when available on your device)
- Provider Identifiers: Garmin user ID mapping and Garmin activity IDs
- Sync Metadata: Last synced time, permissions granted, and technical logs
- Raw Activity Payloads: The JSON payload received from Garmin used for troubleshooting and improving accuracy
You can disconnect Garmin at any time (see User Controls). Connecting Garmin is entirely optional and not required to use Catch.
Data We Send to Garmin (when enabled)
- Planned Sessions: Workout/session name and description
- Scheduling: Date and time the session is planned
- Structure and Steps: Intervals, repeats, rest, and step ordering
- Targets: Pace, heart‑rate zones, stroke‑rate/tempo (when applicable)
- Duration and Distance: Overall and per‑step targets where relevant
- Notes: Limited session notes necessary to deliver the feature
We do not share additional personal information beyond what is needed to sync sessions to your Garmin devices.
Connected Fitness Integrations (Optional): Strava
If you choose to connect your Strava account, we receive your swim activities from Strava so we can match them to your planned sessions and track your progress. When connected, we may receive the following from Strava:
- Activity Summaries: Activity type, start time, duration, distance
- Heart Rate Metrics: Average and max heart rate (when available)
- Provider Identifiers: Strava athlete ID and Strava activity IDs
Data We Send to Strava (when enabled)
- Activity Names: We may update the name of your swim activities on Strava to show the Catch session you completed.
- Wear OS Swims: Swims recorded with the Catch app on a Wear OS watch are uploaded to your Strava account as activities, with their reps, distance, duration and heart rate. You can turn this off at any time in Settings > Integrations > Wear OS.
We filter non-swimming activities and only process swim-related data relevant to Catch. Connecting Strava is entirely optional and not required to use Catch.
Health Connect (Optional, Android)
If you use the Catch app on a Wear OS watch, Catch can save your watch swims to Health Connect on your Android phone, so they appear in other health and fitness apps you use.
- Data We Write: Each swim as an exercise session, its distance, and your heart rate during the swim.
- Data We Read: None. Catch does not read any data from Health Connect.
- Your Choice: We ask for your permission once, the first time your watch is connected to Catch. You can turn this off at any time in Settings > Integrations > Wear OS, or remove Catch's access in Health Connect's settings.
Catch's use of Health Connect follows the Health Connect Permissions policy, including its Limited Use requirements. We do not sell this data, use it for advertising, or share it with anyone else.
2. How We Use Your Information
Your data is used to:
- Personalise your swimming plans and content recommendations.
- Process payments for memberships.
- Improve our website and services.
- Communicate updates, offers, and important information.
- Ensure compliance with legal obligations and safeguard user safety.
- Analyse usage patterns to enhance user experience
- Provide customer support and technical assistance
- Prevent misuse of our services, such as repeated free trials.
- Write your personalised coaching notes (the short note after each swim and your weekly report). These are written automatically by an AI service from your training data, and our coaches review a sample of them to check their quality.
2.1 Legal Basis for Processing
Under UK GDPR, we process your personal data on the following legal bases:
- Contract Performance: To provide our swimming training services, process payments, and manage your account
- Legitimate Interests: To improve our services, send service-related communications, ensure platform security, and prevent misuse of our services, including repeated use of free trials
- Consent: For email marketing, calendar integration, and optional data processing activities (including the Garmin, Strava and Health Connect integrations)
- Legal Obligation: To comply with accounting, tax, and regulatory requirements
- Vital Interests: For health and safety purposes related to swimming activities
You have the right to withdraw consent at any time where processing is based on consent.
2.2 Garmin Integration (Optional)
Under UK GDPR, we process your personal data on the following legal bases:
- Enhance training: Link your swims to planned sessions, personalise recommendations, and track progress
- Provide insights: Calculate derived metrics (e.g., pace per 100m) and visualise trends
- Send planned sessions to devices: Push your planned training sessions to your Garmin devices so they can appear for use during workouts (only when you enable two‑way sync)
- Maintain integration: Keep your connection active, respect your granted permissions, and address sync issues
We filter non-swimming activities and only process swim-related data relevant to Catch. The same applies to the Strava integration and to swims recorded with the Catch Wear OS app.
3. Third-Party Data Sharing
We only share your data with trusted third-party processors who help us provide our services:
Service Providers:
- Supabase (Database hosting - EU/UK servers)
- Stripe (Payment processing - adequate safeguards in place)
- RevenueCat (Subscription management - EU representative available)
- Mailchimp (Email marketing - only with your consent)
- Google Calendar API (Calendar sync - only when you connect your calendar)
- Microsoft Calendar API (Calendar sync - only when you connect your calendar)
- Anthropic: (AI writing of your coaching notes - receives the training information needed for each note, such as distances, paces, session counts, your plan week, your event and any coaching style you have chosen; not your email address or payment details)
- Google Gemini API: (AI writing of your coaching notes until 30 days after we move them to Anthropic, and as a back-up during that period) - Garmin (Optional two-way fitness sync ...
- Garmin (Optional two‑way fitness sync – when you connect your account, we receive activity data from Garmin and, if you enable two‑way sync, we send your planned training sessions to Garmin so they can appear on your devices.)
- Strava (Optional fitness sync. When you connect your account, we receive your swim activities from Strava, and swims recorded with the Catch Wear OS app are uploaded to your Strava account unless you turn this off.)
- Meta Platforms (advertising measurement - only with your advertising cookie consent): when you start a trial, pay or cancel, our server sends Meta a scrambled (hashed) version of your email and customer ID, Meta's cookie identifiers, your browser type and, for trial start and first payment only, your IP address. We and Meta are joint controllers for collecting and sending this data; Meta then uses it under its own terms.
- Google Ads (advertising measurement - only with your advertising cookie consent): when you start a trial or make your first payment, our server sends Google the ad click identifier from your visit and a hashed version of your email. We never send Google your IP address.
- Google Analytics (only with your analytics cookie consent): our server sends subscription events linked to your Google Analytics browser ID and customer ID.
Health Connect: When you allow it, swims recorded with the Catch Wear OS app are saved to Health Connect on your own phone. Health Connect is part of Android. Other apps on your phone can read those swims only if you have given them permission in Health Connect.
Google Sign‑In If you choose “Sign in with Google,” we receive your name, email address, and basic profile information from Google (scopes: openid, email, profile). We use this only to authenticate you and set up your Catch account. We do not receive your Google password, and we do not use Google data for advertising or sell it to third parties.
You can revoke Catch’s access to your Google account at any time by visiting your Google Account permissions page (myaccount.google.com/permissions). To delete your Catch account and associated data, email support@catchswim.com; we will process deletion as described in this policy.
Apple Sign‑In If you choose “Sign in with Apple,” we receive your Apple user identifier and the name and email address you choose to share. If you select Hide My Email, Apple provides a private relay email that forwards messages to your real inbox. We use this information only to authenticate you and set up your Catch account. We do not receive your Apple ID password, and we do not use Apple-provided data for advertising or sell it to third parties.
You can revoke Catch’s access to your Apple ID at any time in your Apple ID settings (appleid.apple.com → Sign‑In & Security → Sign in with Apple) or on iOS at Settings → [your name] → Password & Security → Apps Using Apple ID. To delete your Catch account and associated data, email support@catchswim.com as described in this policy.
Legal Disclosures:
We may disclose your information if required by law, court order, or to protect our rights and safety.
All third-party processors are bound by data processing agreements and must comply with UK GDPR requirements.
4. How We Protect Your Information
We take security seriously and use appropriate measures, such as:
- Data encryption during transmission and storage.
- Secure servers and restricted access to personal information.
- Regular monitoring and updating of our systems.
- However, no online platform is 100% secure. Please protect your account by using a strong password and keeping it confidential.
5. Your Data Rights
Under the UK GDPR, you have the right to:
- Access: Request a copy of the personal data we hold about you.
- Rectification: Correct inaccurate or incomplete data.
- Erasure: Request the deletion of your data (subject to legal obligations).
- Restriction: Limit how your data is processed in certain circumstances.
- Data Portability: Receive your data in a structured, commonly used format.
- Object: Withdraw consent for specific data uses, such as marketing communications, or object to processing based on our legitimate interests, including the free trial records described in section 8. If you object, we will weigh your request against our reasons and tell you our decision within one calendar month.
- Automated Decision Making: Not to be subject to purely automated decisions (we don't use automated profiling)
How to Exercise Your Rights:
- Email us at: support@catchswim.com with your request
- Response Time: We will respond within one calendar month
- Identity Verification: We may ask for ID verification to protect your privacy
- No Fee: Exercising your rights is free unless requests are excessive
Data Export Process:
To request your data export, email us at support@catchswim.com with "Data Export Request" in the subject line. We will provide your data in JSON format within 30 days.
5.1 Children's Data
Catch is for adults. Our services are for users aged 18 and over, and we do not offer accounts to under-18s, with or without parental or guardian consent. We do not knowingly collect personal data from anyone under 18.
If you are a parent or guardian and believe your child under 18 has provided us with personal data, please contact us immediately at support@catchswim.com.
If we discover we have collected personal data from anyone under 18, we will delete both the data and the account promptly.
5.2 Connected Fitness Integrations (Garmin, Strava and Health Connect)
Connect/Disconnect: You can connect or disconnect Garmin at any time in Settings > Integrations (or by contacting support). Disconnecting stops all future syncs.
Data After Disconnect: We delete your Garmin credentials and provider link upon disconnect. Existing Garmin activity records in Catch remain in your account history unless you request deletion or delete your account.
Data Stored by Garmin: Disconnecting Catch does not delete any data already stored by Garmin. To manage or delete data in Garmin services, please use your Garmin account settings and refer to Garmin’s privacy policy.
Delete Garmin Data: You may request deletion of Garmin-derived data at any time by emailing support@catchswim.com with the subject "Delete Garmin Data". We will complete deletion within 30 days.
Strava: You can connect or disconnect Strava at any time in Settings > Integrations. Disconnecting stops all future syncs and uploads. Swims already in Catch remain in your account history unless you request deletion or delete your account. Activities already uploaded to Strava stay in your Strava account, and deleting a swim in Catch does not delete it from Strava. To manage or delete data in Strava, please use your Strava account settings and refer to Strava's privacy policy.
Health Connect: You can stop Catch saving swims to Health Connect at any time in Settings > Integrations > Wear OS, or remove Catch's access in Health Connect's settings. Swims already saved to Health Connect stay there until you delete them in Health Connect.
6. Cookies & Tracking
We use cookies and similar technologies to:
- Enhance user experience.
- Track usage patterns and site performance.
- Deliver personalised content and ads.
If you accept advertising or analytics cookies, we also send the events described in section 3 from our servers, not only from your browser. We record your most recent cookie choice against your account, and we check it before every send, so if you withdraw consent in the cookie settings we stop sending from that point on. We never send these events for anyone whose date of birth shows they are under 18.
You can manage or disable cookies in your browser settings. For more details, refer to our Cookie Policy.
Your cookie choices apply across all Catch Swim websites: www.catchswim.com and our web app at web.catchswim.com. You can change them at any time using the cookie settings link.
7. Third-Party Links
Our website may contain links to third-party sites. We’re not responsible for the privacy practices of those websites. Please review their privacy policies separately.
8. Data Retention
We retain your personal data only as long as necessary:
Active Accounts:
- Training Data: Retained while your account is active
- Performance Metrics: Retained while your account is active
- Payment Records: 7 years (legal requirement for accounting)
- Marketing Data: Until you withdraw consent
- Garmin Credentials & Sync Metadata: Retained while connected; credentials are deleted immediately upon disconnect
- Garmin Activities: Retained while your account is active; can be deleted on request or upon account deletion
- AI Coaching Records: The information used to write each coaching note is kept for 30 days so we can check and improve quality. Notes our coaches have reviewed are kept, with the information used to write them, while your account is active, and deleted with your account.
- Strava and Wear OS Swims: Retained while your account is active; can be deleted on request or upon account deletion
- IP address for advertising measurement: kept only if you accepted advertising cookies, and deleted when your first payment is reported, when you cancel or withdraw consent, or after 45 days, whichever comes first.
Deleted Accounts:
- Most Data: Deleted immediately upon account deletion request
- Financial Records: Retained for 7 years (legal obligation)
- Free Trial Record: If we have reason to believe our free trial has been misused, we may keep a scrambled (hashed) copy of your email address after your account is deleted. We cannot read your email address from this record, and we use it only to check whether a new sign-up should receive a free trial. It is deleted automatically after 2 years.
- Aggregated Analytics: May be retained indefinitely (anonymized)
Automatic Deletion:
- Inactive accounts (no login for 3+ years) will receive deletion notice
- Accounts with no response to deletion notice will be deleted after 90 days
9. International Data Transfers
Some of our service providers are located outside the UK. We ensure adequate protection through:
- Adequacy Decisions: Transfers to countries with adequate data protection
- Standard Contractual Clauses: EU-approved safeguards for other transfers
- Additional Safeguards: Technical and organizational measures for data security
Current International Transfers:
- Stripe: USA (adequate safeguards via Standard Contractual Clauses)
- RevenueCat: USA (adequate safeguards via Standard Contractual Clauses)
- Google/Microsoft: Various locations (your choice to connect calendar services)
- Garmin: USA (adequate safeguards via Standard Contractual Clauses); data is only transferred when you connect Garmin
- Anthropic: USA (adequate safeguards via Standard Contractual Clauses and the UK International Data Transfer Addendum)
- Google Gemini API: USA and other locations (adequate safeguards via Standard Contractual Clauses)
- Strava: USA; data is only transferred when you connect Strava
You have the right to obtain information about these safeguards by contacting us.
Meta and Google process this data in the United States under the UK-US data bridge and their standard data transfer terms.
9.1 Data Breach Notification
In the unlikely event of a data breach that poses a high risk to your rights and freedoms, we will:
- Notify the ICO within 72 hours of becoming aware of the breach
- Notify affected users without undue delay
- Provide clear information about the breach and steps being taken
- Offer guidance on protecting yourself from potential harm
You can report suspected security issues to support@catchswim.com.
10. Updates to This Policy
We may update this Privacy Policy occasionally to reflect changes in our practices or regulations. Significant updates will be communicated via email or our website.
11. Contact Us
If you have any questions, concerns, or requests related to your personal data, reach out to:
Email: support@catchswim.com
Data Protection Officer: support@catchswim.com
Thank you for trusting Catch.
