RecordTrack

Privacy Policy

Effective November 9, 2026

RecordTrack helps families keep their swimmers’ results in one place. This policy explains what we collect, why, and who can see it. We don’t sell your information or show ads.

What we collect

  • Account: your name and email address, and the sign-in methods you connect (Google, Apple, or email with a password, which we store only as a secure hash).
  • Athletes: each swimmer’s name, date of birth, state, and team history, which set their age group and time standards.
  • Swims: results, meets, and the families and people you share them with.
  • Technical: a session cookie that keeps you signed in, the last athlete you viewed (stored in your browser, so RecordTrack can reopen it), and basic server logs (such as IP address and request times) for security and troubleshooting.

How we use it

  • to sign you in and keep your account secure;
  • to show results, personal bests, and progress to you and the people you share with;
  • to send account email, such as sign-in codes and password resets;
  • to fix problems and keep RecordTrack running.

Who can see it

Athletes and their results are private. Only you and the people you invite to a family or share an athlete with can see them, at the access level you choose. You can remove someone’s access at any time.

Services we use

We share information with these providers only as needed to run RecordTrack:

  • Amazon Web Services runs our servers and sends account email.
  • MongoDB Atlas stores the database, on Amazon Web Services.
  • Vercel hosts the website.
  • Google and Apple, if you choose to sign in with them.
  • OpenAI reads swims from files and pasted text when RecordTrack can’t read them on its own. It gets only that file or text, through its API, and the file isn’t kept by RecordTrack afterward. OpenAI doesn’t use API data to train its models.

Children

Athletes are often children. Their records are added and managed by a parent or guardian, not by the children themselves, and children don’t have accounts. If you think a child’s information was added without a parent’s permission, contact us and we’ll remove it.

Keeping and deleting your data

We keep your information while your account is open. You can ask us to delete your account and the athletes only you manage. Deleted data is removed from our live database and ages out of backups afterward.

Security

Data is encrypted in transit, access is checked on every request, and sign-in codes and passwords are never stored in readable form. No system is perfectly secure, so please tell us right away if you notice anything wrong.

Changes to this policy

If we change this policy in a way that matters, we’ll update the effective date and let you know in RecordTrack or by email.

Contact

Questions, or requests to see or delete your data: support@recordtrack.app.