Privacy Policy

1. About Touchpad and this policy

Touchpad ("Touchpad", "we", "us") is a mobile application for swim coaches, published by Bryson Alef LLC (the "Company"). This Privacy Policy explains what information we collect when you use the Touchpad app and any related services (together, the "Service"), how we use it, and the choices you have.

This policy covers the Touchpad app installed on your iOS or Android device, the cloud services it relies on, and our website at https://touchpadapp.com. It does not cover third-party services that you may link to from the Service, each of which is governed by its own policy.

By using Touchpad, you agree to the practices described here. If you don't agree, please don't use the Service.

2. Information we collect

We collect information in three categories: information you provide, information collected automatically when you use the app, and information stored on your device (some of which is uploaded to your account when you sign in).

Information you provide

• Email address. When you sign in, you provide your email address. We send you a one-time magic link to that address to verify it and sign you in. We do not collect or store passwords because Touchpad doesn't use them.
• Team information. If you create a team, we store the team name and any optional details you enter, such as a club code and a US state. If you invite another coach, we store the email address you invited and your relationship to that team.
• Roster information. If you add swimmers to your team's roster — by typing them in or by importing a roster file exported from your club's team-management software — we store the information provided about each swimmer: first and last name, and (optionally) date of birth or birth year, gender, USA Swimming ID (a registration identifier issued by USA Swimming), free-text notes, and personal best times. Roster files you import are read on your device; we store only the roster fields listed here, not the file itself. See Section 5 for important details about roster data.
• Meet and race information. The meet names, pool locations, events, lane assignments, split times, and notes that you create as you use the timing features.
• Heat sheet content. If you use the heat sheet scanner, the photo or PDF you upload is processed to extract event, heat, lane, and swimmer data. See Section 6.
• Communications. If you email us for support or feedback, we receive your email address and the content of your message.

Information collected automatically

• Account identifier. A pseudonymous account identifier used to associate your account with your data.
• Device identifier. A pseudonymous per-install identifier used by our analytics and crash-reporting services to attribute events and reports to a single install. It is not the device's advertising identifier and we do not use it for advertising.
• Usage and diagnostic data. Screen views and product-feature events (for example, that a race was started or a paywall was viewed). We design these events to capture product behavior rather than the contents of what you enter.
• Crash and error reports. Stack traces, device model, operating system version, and contextual breadcrumbs describing what the app was doing when an error occurred.
• Subscription state. Whether your account has an active Touchpad Team subscription, along with metadata about its status (active, expired, in trial, refunded).

Information stored on your device

• App preferences (for example, which features you've enabled) and the most recently selected team, stored in your device's local storage.
• Anonymous-session race data, if you time races without signing in. While you're not signed in, this race data lives only on your device. When you sign in, those races are uploaded into your account and become part of your Personal race history — which syncs across your signed-in devices — and the local copy on the device is then cleared.

3. How we use information

We use the information described above to:

• Provide the Service — sign you in, sync your team's data across devices, run the timing and roster features, parse heat sheets, and process your subscription.
• Maintain and improve the Service — diagnose crashes, monitor errors, understand which features are used, and prioritize improvements.
• Generate insights and analytics derived from your team's data — such as pace summaries, split comparisons, and aggregated patterns across a roster — and display them back to you and your team.
• Communicate with you — send magic-link sign-in emails and (rarely) operational announcements about the Service.
• Enforce our Terms of Service, prevent abuse, and comply with legal obligations.

If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with similar rules, our legal bases for processing are: performance of a contract (operating the Service you've signed up for), legitimate interests (keeping the Service secure and improving it, where those interests aren't overridden by your rights), consent (where you've opted in to specific processing, such as analytics on platforms where consent is required), and legal obligation (where applicable law requires it).

We do not use your personal information to train machine-learning models. We only engage AI providers whose contractual terms prohibit them from using your data to train their models, and we verify that commitment before integrating any new AI provider (see Section 6).

4. When we share information

We do not sell your personal information and we do not share it with advertisers. We share information only in the limited ways described below.

With service providers we rely on

We use a limited set of third-party service providers to operate the Service. They process information on our behalf, under contracts that restrict their use of it. The categories of providers we use, and the data each receives, are:

The current list of specific providers we use is available on request — contact us at the address in Section 14. We may engage new sub-processors, or replace existing ones, in the course of operating the Service. The categories of sub-processors and the types of data each processes will remain consistent with the descriptions above unless we update this policy. We use commercially reasonable efforts to keep our current sub-processor list up to date and, where required by applicable law, we will notify you of material changes before they take effect.

Team invitations are not sent by email: when a head coach invites someone by email address, the invitation is stored in the Service and surfaced to the invited person inside the app the next time they sign in with that email address.

With your team

Touchpad is built around shared teams. When you join a team, the other coaches on that team can see the team's roster, meets, race results, and notes. Your email address and role are visible to the head coach of any team you join.

For legal reasons

We may disclose information when we believe in good faith that disclosure is necessary to comply with a law, regulation, legal process, or governmental request; to enforce our Terms of Service; to protect the rights, property, or safety of Touchpad, our users, or others; or in connection with a merger, acquisition, financing, or sale of assets, in which case we will require the recipient to honor the commitments we have made in this policy.

5. Roster data and children's privacy

Touchpad is intended for use by adult swim coaches. We do not knowingly allow anyone under the age of 18 to create an account.

However, the swimmers on a coach's roster may be minors. When a coach adds a swimmer to a roster, the coach — not the swimmer — enters that information into Touchpad, whether by typing it in or by importing a roster file from the coach's team-management software. Touchpad does not collect any information directly from minors and does not market the Service to minors.

When you act as a coach using Touchpad to manage roster information about other people (including minors), you are the party that decides what information to enter, why, and how it is used. For privacy-law purposes, you are the "controller" (under the GDPR and similar laws) or "business" (under the CCPA and similar laws) of the roster information you enter, and we act as your "processor" or "service provider" with respect to that information. Among other things, you are responsible for:

• having the authority and any necessary consent (from your team, club, school, or the swimmer's parent or guardian, as applicable in your jurisdiction) to enter or import information about each swimmer into Touchpad, and for providing any required notices to those individuals;
• limiting the information you enter or import to what you actually need to coach effectively (for example, you don't need a swimmer's full date of birth or USA Swimming ID if they aren't relevant to your use of the app);
• responding to requests from swimmers or their parents to view, correct, or delete roster information about them — which you can do directly in the Service at any time;
• complying with COPPA, FERPA, the GDPR, the CCPA, and any other privacy, data-protection, or child-protection law that applies to you and to the people whose information you enter.

If you are a parent or guardian and you believe a coach has entered your child's information into Touchpad and you want it removed, please first ask the coach directly — the coach is in the best position to act on your request and is the party who decided to enter the information. If you can't reach the coach, contact us at support@touchpadapp.com and we will work with you and the coach in good faith.

We do not knowingly collect personal information directly from children. If we learn that a person under the applicable age of digital consent in their jurisdiction (13 in the United States; 13–16 in the European Economic Area and the United Kingdom, depending on country) has created an account, or that we have otherwise collected personal information directly from a child without appropriate consent, we will delete it.

6. AI processing

We use third-party AI providers for specific features in the Service. Today, this includes parsing the photos and PDFs you upload through the heat sheet scanner into structured data (events, heats, lanes, swimmer names, seed times, club codes). In the future, we may use AI for additional features — for example, to generate insights, summaries, or pattern analysis from the race, roster, and note data already in your team. If we do, the same protections described below will apply.

When AI processing is used:

• The relevant data is sent from your device to a third-party AI provider that we use solely to process that specific request.
• We only engage AI providers whose contractual terms prohibit them from using your content to train their models, and we verify that commitment before integrating any new AI provider.
• The result is returned to your device, stored in your team's data, and used to power the relevant feature.
• For heat sheets specifically, the original image or PDF is not stored on our servers beyond what is needed to complete parsing.
• Raw model responses may be temporarily cached on your device so that you can re-run a request without re-uploading. This cache is cleared when you sign out.
• AI output is presented for your review before it is saved to your roster, race records, or team data. You can edit or discard any AI-generated result — no AI feature writes to your team's data without your confirmation.

AI output is imperfect. Models can mis-read inputs, produce incorrect results, or generate misleading inferences. You should always review AI-generated output before relying on it for any consequential decision.

7. Subscriptions and billing

Most of Touchpad's roster, team, meet, and heat-sheet features require a Touchpad Team subscription. Subscriptions are processed by Apple (on iOS) or Google (on Android), and we use a third-party subscription-management provider to keep track of which accounts have an active subscription.

We do not receive your credit card number or full payment information. We do receive a platform user identifier, the subscription product you purchased, its status (active, expired, in trial, refunded), and related metadata. We use this information to decide whether your account has access to Touchpad Team features and to support you with subscription-related questions.

See the Subscriptions section of our Terms of Service for the commercial terms.

8. Analytics and crash reporting

We use analytics and crash-reporting services to understand which features are used and to detect and diagnose problems. The events we log are designed to capture product behavior — for example, that a race was started or that a sign-in succeeded — not the contents of the data you enter. We do not pass swimmer names, race notes, or heat-sheet contents to analytics.

Crash reports include your account identifier, your device model, your operating system version, and a stack trace describing where the crash occurred. They do not include the contents of your roster or race data.

Touchpad does not engage in cross-app tracking, does not present Apple's App Tracking Transparency prompt, and does not link your data with other companies' apps or websites for advertising purposes.

9. Retention and deletion

We retain different categories of information for different periods.

• Account, team, roster, meet, and race data are retained for as long as your account is active, or as needed to provide the Service to your team.
• Heat sheet uploads are not retained beyond the time it takes to parse them.
• Roster files you import are read entirely on your device and are not uploaded; the temporary on-device copy made by the file picker is deleted as soon as the file has been read.
• Analytics and crash data are retained for limited periods consistent with our service providers' default retention settings, after which they expire automatically.
• Email logs related to magic-link sign-in are retained for a short period for delivery and abuse-prevention purposes.

You can delete your account at any time from the Account screen in the app. When you delete your account:

• Your authentication record is deleted.
• Your local app data is cleared on your device.
• If you are the only head coach of a team, the team is anonymized — identifiable details about you are removed, but the team's historical race records may be retained.
• If you are the head coach of a team that has assistant coaches, you'll be asked to either transfer the head-coach role or pick a successor before deletion completes.
• If you are an assistant coach, you'll simply be removed from the team.

Some information may persist in backups for a short period after deletion, and some aggregate or de-identified information may be retained indefinitely.

10. How we protect information

We rely on established cloud infrastructure providers for the underlying security of our backend, including encryption in transit and at rest. Access to your team's data is controlled by server-side rules tied to your team membership and is enforced on every read and write. We use reasonable administrative, technical, and organizational measures designed to protect personal information.

No system is perfectly secure, however. We cannot and do not guarantee the security of any information you transmit to or store in the Service, and you provide information to the Service at your own risk. Except where prohibited by law, we are not responsible for any unauthorized access, loss, or alteration of information that occurs despite our use of reasonable security measures, including incidents caused by third-party services on which we rely.

You can help protect your account by keeping access to your email account secure (because Touchpad sign-in is based on email), by signing out on shared devices, by reviewing your team's member list periodically, and by removing coaches from your team when they no longer need access.

11. Your rights and choices

Depending on where you live, you may have specific rights with respect to your personal information.

Everyone

• Access and correct. You can view and edit most of your information directly in the app (your account email, team details, swimmer roster, meets, races, notes).
• Delete. You can delete swimmers, races, meets, and your entire account from within the app.
• Manage your subscription. You manage your Touchpad Team subscription in your Apple ID account settings (iOS) or Google Play subscriptions (Android).

If you are in the European Economic Area, the United Kingdom, or Switzerland (GDPR)

You have the right to request access to, correction of, deletion of, or portability of your personal information; to object to or restrict our processing; and to withdraw consent where we rely on it. You also have the right to lodge a complaint with your local data protection authority. Contact us at support@touchpadapp.com to exercise these rights.

If you are a California resident (CCPA/CPRA)

You have the right to know what personal information we collect about you and to request its deletion or correction. We do not sell or share personal information for cross-context behavioral advertising. You will not be discriminated against for exercising your rights. Contact us at support@touchpadapp.com to make a request.

If you are in other US states with comprehensive privacy laws

You may have similar rights of access, correction, deletion, portability, and opt-out under your state's law. Contact us at the same address to make a request.

We may need to verify your identity (for example, by confirming control of the email address on your Touchpad account) before responding to a rights request.

12. International transfers

Touchpad's data is hosted on cloud infrastructure located in the United States. If you use Touchpad from outside the United States, your information will be transferred to and processed in the United States, which may have data protection laws different from those of your country. Where required, we rely on appropriate safeguards (such as the European Commission's Standard Contractual Clauses) for these transfers.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we'll update the "Last updated" date at the top of this page. If the changes are material, we'll let you know through the app or by email before they take effect. Your continued use of Touchpad after changes take effect means you accept the updated policy.

14. Contact us

If you have questions about this Privacy Policy or how we handle your information, please contact us at:

Bryson Alef LLC
2501 Chatham Rd, Suite N, Springfield, IL 62704, USA
Email: support@touchpadapp.com