Privacy Policy

1. About Touchpad and this policy

Touchpad ("Touchpad", "we", "us") is a mobile application for swim coaches, published by Bryson Alef LLC (the "Company"). This Privacy Policy explains what information we collect when you use the Touchpad app and any related services (together, the "Service"), how we use it, and the choices you have.

This policy covers the Touchpad app installed on your iOS or Android device, the cloud services it relies on, and our website at https://touchpadapp.com, including its subdomains (such as the share-link viewer at links.touchpadapp.com). It does not cover third-party services that you may link to from the Service, each of which is governed by its own policy.

By using Touchpad, you agree to the practices described here. If you don't agree, please don't use the Service.

2. Information we collect

We collect information in three categories: information you provide, information collected automatically when you use the app, and information stored on your device (some of which is uploaded to your account when you sign in).

Information you provide

• Email address. When you sign in, you provide your email address. We send you a one-time magic link to that address to verify it and sign you in. We do not collect or store passwords because Touchpad doesn't use them.
• Team information. If you create a team, we store the team name and any optional details you enter, such as a club code and a US state. If you invite another coach, we store the email address you invited and your relationship to that team.
• Roster information. If you add swimmers to your team's roster — by typing them in or by importing a roster file exported from your club's team-management software — we store the information provided about each swimmer: first and last name, and (optionally) date of birth or birth year, gender, USA Swimming ID (a registration identifier issued by USA Swimming), free-text notes, personal best times, and any training-group labels you assign (such as a practice group or a specialty). Roster files you import are read on your device; we store only the roster fields listed here, not the file itself. See Section 5 for important details about roster data.
• Meet and race information. The meet names, pool locations, meet dates, events, lane assignments, split times, and notes (including per-swimmer ratings and free text) that you create as you use the timing features.
• Workout and practice information. The workouts and practices you write, scan, or save; the dates you assign them to; attendance records; the training-group labels you attach to a practice; if you use the workout energy feature, the AI-generated classification of a workout's training emphasis; and, on a Touchpad Team subscription, an AI-suggested name for a workout you leave unnamed.
• Coach-tool results. The results of in-app coach tools you run with a swimmer — for example, the Threshold Test stores the tap times you record and the pace metrics computed from them.
• Scanned content. If you use a scanning feature, the photo or PDF you upload is processed to extract structured data: heat sheets and meet programs are parsed into event, heat, lane, and swimmer data, and a photo of a written practice (for example, a whiteboard) is transcribed into workout text. See Section 6.
• Share links. If you create a share link, we store the shared content (or a reference to it) together with the link's token so the link can be resolved. See Section 4.
• Communications. If you email us for support or feedback, we receive your email address and the content of your message.

Information collected automatically

• Account identifier. A pseudonymous account identifier used to associate your account with your data.
• Device identifier. A pseudonymous per-install identifier used by our analytics and crash-reporting services to attribute events and reports to a single install. It is not the device's advertising identifier and we do not use it for advertising.
• Usage and diagnostic data. Screen views and product-feature events (for example, that a race was started or a paywall was viewed). We design these events to capture product behavior rather than the contents of what you enter.
• Crash and error reports. Stack traces, device model, operating system version, and contextual breadcrumbs describing what the app was doing when an error occurred.
• Subscription state. Whether your account has an active Touchpad Team subscription, along with metadata about its status (active, expired, in trial, refunded).

Information stored on your device

• App preferences (for example, which features you've enabled) and the most recently selected team, stored in your device's local storage.
• Anonymous-session race data, if you time races without signing in. While you're not signed in, this race data lives only on your device. When you sign in, those races are uploaded into your account and become part of your Personal race history — which syncs across your signed-in devices — and the local copy on the device is then cleared.
• Anonymous-session workouts and saved sets, if you use the workout library without signing in. Like anonymous races, they live only on your device; when you sign in, they are uploaded into your account's personal workout library and the local copies are then cleared.

3. How we use information

We use the information described above to:

• Provide the Service — sign you in, sync your team's data across devices, run the timing, roster, and workout features, process the content you scan, serve the share links you create, and process your subscription.
• Maintain and improve the Service — diagnose crashes, monitor errors, understand which features are used, and prioritize improvements.
• Generate insights and analytics derived from your team's data — such as pace summaries, split comparisons, and aggregated patterns across a roster — and display them back to you and your team.
• Communicate with you — send magic-link sign-in emails and (rarely) operational announcements about the Service.
• Enforce our Terms of Service, prevent abuse, and comply with legal obligations.

If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with similar rules, our legal bases for processing are: performance of a contract (operating the Service you've signed up for), legitimate interests (keeping the Service secure and improving it, where those interests aren't overridden by your rights), consent (where you've opted in to specific processing, such as analytics on platforms where consent is required), and legal obligation (where applicable law requires it).

We do not use your personal information to train machine-learning models. We only engage AI providers whose contractual terms prohibit them from using your data to train their models, and we verify that commitment before integrating any new AI provider (see Section 6).

4. When we share information

We do not sell your personal information and we do not share it with advertisers. We share information only in the limited ways described below.

With service providers we rely on

We use a limited set of third-party service providers to operate the Service. They process information on our behalf, under contracts that restrict their use of it. The categories of providers we use, and the data each receives, are:

The current list of specific providers we use is available on request — contact us at the address in Section 14. We may engage new sub-processors, or replace existing ones, in the course of operating the Service. The categories of sub-processors and the types of data each processes will remain consistent with the descriptions above unless we update this policy. We use commercially reasonable efforts to keep our current sub-processor list up to date and, where required by applicable law, we will notify you of material changes before they take effect.

Team invitations are not sent by email: when a head coach invites someone by email address, the invitation is stored in the Service and surfaced to the invited person inside the app the next time they sign in with that email address.

With your team

Touchpad is built around shared teams. When you join a team, the other coaches on that team can see the team's roster, meets, race results, workouts, and notes. Your email address and role are visible to the head coach of any team you join.

When you create a share link

Some features let you publish content at a unique web link (for example, links.touchpadapp.com/w/… for a workout, or links.touchpadapp.com/r/… for a race result) so you can send it to swimmers, parents, or other coaches. Share links are public in one important sense: anyone who has the link can view the shared content in a web browser, without an account. Links use long, unguessable tokens and are marked so that search engines are asked not to index them, but we cannot control who a recipient forwards a link to. Share a link only with people you intend to see its content.

• A workout link shows the workout's content and an attribution line (your name, and the team name for a team workout).
• A race result link shows a single swimmer's result for one race: the swimmer's name, the event and date, final and seed times, splits and a comparison against reference splits and time standards, any lane notes (ratings and free text), and a "shared by" line with your name (and your team's name, for a team race).
• Depending on the link type, the page shows either a live view of the current content or a snapshot taken when you created or last refreshed the link.
• You can turn any link off from the same place in the app where you created it — a turned-off link stops working permanently. Links also stop working when the underlying content is deleted or when the team behind a team link is dissolved, and link snapshots expire automatically after an extended period of inactivity (roughly one year). Links you own personally are deleted when you delete your account.
• One nuance for team workout links: un-sharing a workout from your team pauses its link rather than retiring it. If you later share the same workout with the same team again, the same URL starts working again — anyone who kept the old link regains access. Use "Turn off link" when you want a link permanently dead.
• When someone opens a share link, we process their IP address (in coarse, bucketed form) to rate-limit abuse, and we keep minimal, short-lived server logs of the request. We do not require viewers to have an account and do not build profiles of them.

Because a race result link identifies a swimmer — who may be a minor — by name, create one only if you have the authority and any consent needed to publish that swimmer's information this way (see Section 5).

For legal reasons

We may disclose information when we believe in good faith that disclosure is necessary to comply with a law, regulation, legal process, or governmental request; to enforce our Terms of Service; to protect the rights, property, or safety of Touchpad, our users, or others; or in connection with a merger, acquisition, financing, or sale of assets, in which case we will require the recipient to honor the commitments we have made in this policy.

5. Roster data and children's privacy

Touchpad is intended for use by adult swim coaches. We do not knowingly allow anyone under the age of 18 to create an account.

However, the swimmers on a coach's roster may be minors. When a coach adds a swimmer to a roster, the coach — not the swimmer — enters that information into Touchpad, whether by typing it in or by importing a roster file from the coach's team-management software. Touchpad does not collect any information directly from minors and does not market the Service to minors.

When you act as a coach using Touchpad to manage roster information about other people (including minors), you are the party that decides what information to enter, why, and how it is used. For privacy-law purposes, you are the "controller" (under the GDPR and similar laws) or "business" (under the CCPA and similar laws) of the roster information you enter, and we act as your "processor" or "service provider" with respect to that information. Among other things, you are responsible for:

• having the authority and any necessary consent (from your team, club, school, or the swimmer's parent or guardian, as applicable in your jurisdiction) to enter or import information about each swimmer into Touchpad, and for providing any required notices to those individuals;
• limiting the information you enter or import to what you actually need to coach effectively (for example, you don't need a swimmer's full date of birth or USA Swimming ID if they aren't relevant to your use of the app);
• responding to requests from swimmers or their parents to view, correct, or delete roster information about them — which you can do directly in the Service at any time;
• complying with COPPA, FERPA, the GDPR, the CCPA, and any other privacy, data-protection, or child-protection law that applies to you and to the people whose information you enter.

If you are a parent or guardian and you believe a coach has entered your child's information into Touchpad and you want it removed, please first ask the coach directly — the coach is in the best position to act on your request and is the party who decided to enter the information. If you can't reach the coach, contact us at [email protected] and we will work with you and the coach in good faith.

We do not knowingly collect personal information directly from children. If we learn that a person under the applicable age of digital consent in their jurisdiction (13 in the United States; 13–16 in the European Economic Area and the United Kingdom, depending on country) has created an account, or that we have otherwise collected personal information directly from a child without appropriate consent, we will delete it.

6. AI processing

We use third-party AI providers for specific features in the Service. Today, this includes:

• parsing the photos and PDFs you upload through the heat sheet scanner into structured data (events, heats, lanes, swimmer names, seed times, club codes);
• extracting the event list from a scanned meet program;
• transcribing a photo of a written practice (for example, a whiteboard or a printed sheet) into workout text;
• reading a document of practices you import (a PDF, CSV, or pasted text) to find the individual workouts in it and rewrite each one as workout text;
• classifying a workout's training emphasis (its energy systems) from the workout text; and
• suggesting a short name for a workout you leave unnamed, from the workout text (Touchpad Team subscriptions).

In the future, we may use AI for additional features — for example, to generate insights, summaries, or pattern analysis from the race, roster, and note data already in your team. If we do, the same protections described below will apply.

When AI processing is used:

• The relevant data is sent from your device to a third-party AI provider that we use solely to process that specific request.
• We only engage AI providers whose contractual terms prohibit them from using your content to train their models, and we verify that commitment before integrating any new AI provider.
• The result is returned to your device, stored in your team's data, and used to power the relevant feature.
• For scanning features (heat sheets, meet programs, practice photos), the original image or PDF is deleted from our servers promptly after processing completes, and an automatic cleanup is designed to remove any residual upload shortly afterward. A workout document you import is processed in several steps, so it is not deleted immediately — the same automatic cleanup removes it within about 24 hours.
• For the workout import feature, the text of the document you import and the resulting workout text are also recorded in our service logs for up to 30 days. We use these logs to review the feature's accuracy and improve how it reads coach-written workouts; they are never used to train AI models, and they are deleted automatically.
• A photo you scan may incidentally capture more than you intend — for example, names written on a whiteboard or people or objects in the background. Frame your photos to capture only the content you want processed.
• Raw model responses may be temporarily cached on your device so that you can re-run a request without re-uploading. This cache is cleared when you sign out.
• AI output that parses or transcribes your content — heat sheets, meet programs, practice photos — is presented for your review before it is saved to your roster, race records, or team data, and you can edit or discard it. Derived classifications (such as a workout's energy classification) are computed automatically from content you already saved, are presented as estimates in the app, and are recomputed when you edit the underlying content. A suggested workout name fills in only a name you left blank. It never replaces a name you typed, and you can change it at any time.

AI output is imperfect. Models can mis-read inputs, produce incorrect results, or generate misleading inferences. You should always review AI-generated output before relying on it for any consequential decision.

7. Subscriptions and billing

Most of Touchpad's roster, team, meet, and heat-sheet features require a Touchpad Team subscription. Subscriptions are processed by Apple (on iOS) or Google (on Android), and we use a third-party subscription-management provider to keep track of which accounts have an active subscription.

We do not receive your credit card number or full payment information. We do receive a platform user identifier, the subscription product you purchased, its status (active, expired, in trial, refunded), and related metadata. We use this information to decide whether your account has access to Touchpad Team features and to support you with subscription-related questions.

See the Subscriptions section of our Terms of Service for the commercial terms.

8. Analytics and crash reporting

We use analytics and crash-reporting services to understand which features are used and to detect and diagnose problems. The events we log are designed to capture product behavior — for example, that a race was started or that a sign-in succeeded — not the contents of the data you enter. We do not pass swimmer names, race notes, or heat-sheet contents to analytics.

Crash reports include your account identifier, your device model, your operating system version, and a stack trace describing where the crash occurred. They do not include the contents of your roster or race data.

Touchpad does not engage in cross-app tracking, does not present Apple's App Tracking Transparency prompt, and does not link your data with other companies' apps or websites for advertising purposes.

9. Retention and deletion

We retain different categories of information for different periods.

• Account, team, roster, meet, race, and workout data are retained for as long as your account is active, or as needed to provide the Service to your team.
• Scan uploads (heat sheets, meet programs, practice photos) are deleted promptly after processing; an automatic cleanup is designed to remove any residual upload shortly afterward.
• Share-link records and snapshots are retained until you turn the link off, until the link expires after an extended period of inactivity (roughly one year), or until the underlying content, team, or account is deleted — whichever comes first.
• Roster files you import are read entirely on your device and are not uploaded; the temporary on-device copy made by the file picker is deleted as soon as the file has been read.
• Analytics and crash data are retained for limited periods consistent with our service providers' default retention settings, after which they expire automatically.
• Email logs related to magic-link sign-in are retained for a short period for delivery and abuse-prevention purposes.

You can delete your account at any time from the Account screen in the app. When you delete your account:

• Your authentication record is deleted.
• Your local app data is cleared on your device.
• Share links you own personally are deleted and stop resolving. Links that belong to a team remain with the team; they stop working when the shared content is deleted or the team is dissolved (see Section 4 for how un-sharing pauses, rather than permanently retires, a team workout link).
• If you are the only head coach of a team, the team is anonymized — identifiable details about you are removed, but the team's historical race records may be retained.
• If you are the head coach of a team that has assistant coaches, you'll be asked to either transfer the head-coach role or pick a successor before deletion completes.
• If you are an assistant coach, you'll simply be removed from the team.

Some information may persist in backups for a short period after deletion, and some aggregate or de-identified information may be retained indefinitely.

10. How we protect information

We rely on established cloud infrastructure providers for the underlying security of our backend, including encryption in transit and at rest. Access to your team's data is controlled by server-side rules tied to your team membership and is enforced on every read and write. We use reasonable administrative, technical, and organizational measures designed to protect personal information.

No system is perfectly secure, however. We cannot and do not guarantee the security of any information you transmit to or store in the Service, and you provide information to the Service at your own risk. Except where prohibited by law, we are not responsible for any unauthorized access, loss, or alteration of information that occurs despite our use of reasonable security measures, including incidents caused by third-party services on which we rely.

You can help protect your account by keeping access to your email account secure (because Touchpad sign-in is based on email), by signing out on shared devices, by reviewing your team's member list periodically, and by removing coaches from your team when they no longer need access.

11. Your rights and choices

Depending on where you live, you may have specific rights with respect to your personal information.

Everyone

• Access and correct. You can view and edit most of your information directly in the app (your account email, team details, swimmer roster, meets, races, notes).
• Delete. You can delete swimmers, races, meets, and your entire account from within the app.
• Manage your subscription. You manage your Touchpad Team subscription in your Apple ID account settings (iOS) or Google Play subscriptions (Android).

If you are in the European Economic Area, the United Kingdom, or Switzerland (GDPR)

You have the right to request access to, correction of, deletion of, or portability of your personal information; to object to or restrict our processing; and to withdraw consent where we rely on it. You also have the right to lodge a complaint with your local data protection authority. Contact us at [email protected] to exercise these rights.

If you are a California resident (CCPA/CPRA)

You have the right to know what personal information we collect about you and to request its deletion or correction. We do not sell or share personal information for cross-context behavioral advertising. You will not be discriminated against for exercising your rights. Contact us at [email protected] to make a request.

If you are in other US states with comprehensive privacy laws

You may have similar rights of access, correction, deletion, portability, and opt-out under your state's law. Contact us at the same address to make a request.

We may need to verify your identity (for example, by confirming control of the email address on your Touchpad account) before responding to a rights request.

12. International transfers

Touchpad's data is hosted on cloud infrastructure located in the United States. If you use Touchpad from outside the United States, your information will be transferred to and processed in the United States, which may have data protection laws different from those of your country. Where required, we rely on appropriate safeguards (such as the European Commission's Standard Contractual Clauses) for these transfers.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we'll update the "Last updated" date at the top of this page. If the changes are material, we will take reasonable steps to notify you — such as a notice in the app or an email — and, where required by applicable law, we will do so before the changes take effect. Your continued use of Touchpad after changes take effect means you accept the updated policy.

14. Contact us

If you have questions about this Privacy Policy or how we handle your information, please contact us at:

Bryson Alef LLC
2501 Chatham Rd, Suite N, Springfield, IL 62704, USA
Email: [email protected]