Data Controller: Boost Swimming Ltd (ICO Registration No. 00012702091) is the controller for your account, billing and security, and for your training data if you use Boost RPE on your own. If you use Boost RPE through a club, your club is the controller for the squad training data its coaches see, and Boost processes that data on the club's behalf under the Club Terms.
Effective date:
We collect Identity Data (name, DOB, gender), Contact Data (email, billing address), Transaction Data (payment details), and Health & Performance Data (swim times, heart rate, sleep patterns, tap-test scores, grip strength measurements, and menstrual cycle data where provided).
We use your data to:
We process your health data (Special Category Data under UK GDPR Article 9(2)(a)) based on your Explicit Consent, which you grant via our in-app biometric consent flow before accessing any testing or readiness features. To withdraw this consent, email safeguarding@boostswimming.co.uk. There is no control in the app yet for withdrawing it; one is being built. If you have connected a wearable, you can disconnect it in Settings at any time, which stops further collection from that device. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
Your data is stored in a Supabase database in Frankfurt, Germany, in the European Union. The UK recognises the European Economic Area as giving adequate protection, so no extra transfer safeguard is needed for data held there. Data is encrypted in transit and at rest. We do not sell your data to third parties. Access to your data is controlled by row-level security policies, so a record can be read only by you, the approved coaches and administrators of your club, and Boost's own administrator. Section 5 lists the other companies that process your data and where.
These companies process data for us:
Data sent to a United States provider leaves the UK and the European Economic Area. We have not yet published the transfer safeguard we rely on for each United States provider. Until we do, read this list as telling you where your data goes.
WHOOP. WHOOP is not our processor. It is a separate controller. If you connect a WHOOP account, you do so under WHOOP's own terms, and your WHOOP data is transferred to and stored in the United States by WHOOP. Boost receives the recovery, sleep, strain and workout data that WHOOP sends us for your account.
We keep your data while your account is open. We do not yet delete inactive accounts automatically; automatic deletion is being built. Whiteboard photos that coaches capture are deleted after 30 days. Records we need for tax and accounting are kept for as long as the law requires, which can be after your account closes.
Account deletion today removes your sign-in and profile. It does not yet remove every linked record, and for some accounts it does not complete at all. We are completing the deletion of every linked record. Until then, email safeguarding@boostswimming.co.uk after you ask for deletion and we delete the rest by hand within 30 days. Records the automatic deletion does not yet reach include AI usage logs, wearable event logs, your name on any biomechanics report a coach created, waiver files you uploaded, your customer record at Stripe, and your WHOOP connection, which you should also revoke in the WHOOP app.
Race analysis. At a competition or in training your coach may record, on a tablet, the times at fixed marks along the pool, stroke rate, stroke count, breakout distance and short notes for each of your races. This is performance data, held against your account and visible to the coaches of your club. It is shown to you only when your coach shares it, and for swimmers under 18 only where parental consent is on file. No photographs, video or audio are taken. It is deleted with your account.
If you are linked to a club, every approved coach of that club can open your swimmer page. Access is club-wide, not limited to your own squad. For swimmers under 18, this access opens only once a parent or guardian has confirmed consent.
Coaches can then see:
Coaches never see your menstrual cycle entries. They can see a cycle phase overlay only if you turn on sharing in Settings, and that option is not offered to swimmers under 18.
The switch named "Share Daily Notes with coaches" in Settings does not hide any written notes, because the daily check-in has no notes field. It is off by default. Today it controls whether your check-ins are included in some club-wide views in the Coach's Hub. It does not hide your scores from a coach who opens your swimmer page.
Boost RPE is not available to anyone under 13. If you are 13 to 17, this section is for you and your parent or guardian.
For swimmers. You can use the app and see your own data straight away. Your coaches cannot see any of it until your parent or guardian confirms consent. AI-written feedback is currently switched off for under-18s. Menstrual cycle sharing is not offered to you.
For parents and guardians. When your child joins through a club, we email you a link. Nothing your child records is shown to a coach until you open that link and confirm. Confirming lets your child's club coaches see what section 7 describes. If a wearable is connected, we ask you separately by email before any wearable data is shared. We do not currently send weekly reports to parents; that feature is paused. A parent or guardian can withdraw consent at any time by emailing safeguarding@boostswimming.co.uk from the address we hold. There is no screen for this. We then stop coach access and, if you ask, delete your child's data. Withdrawal does not affect what was lawfully processed before it.
We follow Swim England's Wavepower guidance. Check-ins are done at home, so no device is needed in a changing room, and nothing is shared with a coach until a parent has confirmed.
Under the UK GDPR, you have the right to access, correct, or erase your data, restrict processing, data portability, and the right to withdraw consent. To exercise these rights, contact us at safeguarding@boostswimming.co.uk. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO). Section 11 says how.
Boost RPE processes health data (tap-test scores, sleep, energy, soreness and hydration scores, wearable data, and optional menstrual cycle tracking) strictly under explicit user consent. It is encrypted in transit and at rest. It is not hidden from your club's coaching staff. Once consent is on file, coaches see the scores themselves, not only a summary. Section 7 says exactly what they see. The exception is menstrual cycle data, which coaches never see in raw form.
If you are unhappy with how we handle your data, you can complain to us first. Email safeguarding@boostswimming.co.uk. We acknowledge your complaint within 30 days and tell you the outcome without undue delay. This is your right under the Data (Use and Access) Act 2025. You can also complain to the Information Commissioner's Office at any time, at ico.org.uk or on 0303 123 1113. You do not have to complain to us first.
What changed on : we corrected the statements on withdrawing consent, where data is stored, what account deletion removes, the daily-notes switch, what coaches can see and who the controller is, and added sections on who else processes your data, children and parents, what coaches can see, retention and complaints. The previous version was dated 3 January 2026.