Privacy Policy

Last updated: September 9, 2026

Welcome to Swimmigo. We take your privacy and that of your child seriously. This privacy policy explains how Bobika (trading as Swimmigo, KVK 95172076, based in the Netherlands) collects, uses and protects personal data. This policy applies to the Swimmigo app and the website swimmigo.com.

1. Who we are and the roles of the parties

Bobika is the data controller for your Swimmigo account: your login, settings, notification preferences and your progress record.

The swim school or instructor is the data controller for the student and lesson data they record in the app, and for the payment relationship with their customers.

Swimmigo acts as a processor for student, lesson and payment data, on the instructions of the swim school. We sign a data processing agreement with every swim school for this purpose.

Stripe is the swim school's payment provider and processes payments between parents and the swim school. Apple and Google process the Swimmigo subscription of swim schools and instructors.

Your child's data are the personal data of your child. You, as parent or guardian, exercise your child's rights.

2. What data we process

• Account data: email address, encrypted password, name (if provided), language and display preferences.
• Child profiles: child's first name, swimming level, progress data (scores and requirements met), attendance and obtained diplomas.
• Media: profile photos (optional, stored securely).
• Technical data: IP address, device ID and log files for debugging and security.
• Purchase data (subscription): transaction history of the Swimmigo subscription via the Apple App Store or Google Play Store.
• Lesson payments (transaction data): payment status, amounts, dates and the related lesson package or subscription, per student. We process this data on the swim school's instructions. We never receive or store card or bank details; those go directly to Stripe.
• Analytics: limited, anonymised where possible, usage data via PostHog to improve the app.
• Contact and support: messages you send us via the contact form or chat.

3. Purposes and legal basis

We process personal data on the basis of:

• Performance of the contract: to deliver your Swimmigo account, the app and the subscription features.
• Legal obligation: for our tax administration.
• Legitimate interest: for security, fraud prevention and improving app stability.
• Instructions of the swim school: we process student, lesson and payment data solely on the swim school's instructions, under the data processing agreement. The swim school must itself have a valid legal basis towards you.

4. Sharing with third parties (sub-processors)

We never sell your data. We engage only the following service providers:

• MongoDB Atlas (EU): database storage.
• AWS S3 (eu-west-3, France): image storage.
• Resend (United States): email delivery.
• Stripe (Stripe Payments Europe, Ireland): processing of lesson payments.
• PostHog (United States): product analytics.
• Apple and Google: processing of the Swimmigo subscription.

All our service providers are bound by a data processing agreement to at least the same level of protection as this policy.

5. International transfers

Your data are primarily stored within the European Economic Area. Some providers (Resend, Stripe, PostHog) may process data in the United States. For those transfers we rely on the EU-US Data Privacy Framework and the European Commission's standard contractual clauses.

6. Retention periods

• Account data: for as long as your account is active. When you delete your account, your data are deleted immediately and permanently, unless the law requires a longer period.
• Parent accounts without a swimmer: if no swimmer is added within 7 days, we delete the account automatically (after a warning on day 4).
• Student, lesson and payment data (on the school's instructions): for as long as the school uses the app. If the school stops, the process in section 7 applies.
• Backups: kept for a maximum of 30 days.
• Tax administration: 7 years, as required by law. The swim school keeps its own payment administration in its own Stripe environment.

7. What happens when a swim school stops

When a swim school stops using Swimmigo, the following applies.

• The link between the school and your account is disconnected immediately; the school and its instructors lose access.
• The school has 30 days to export its own student and payment data.
• After that we delete the data we processed on that school's instructions, permanently and automatically.
• Your own account, settings and your child's progress record remain with you, as your learning record.

Payment data held directly at Stripe remain in the swim school's environment, where the school applies its own legal retention obligation.

8. Your rights (GDPR)

You have the right to access, rectification, erasure and restriction of your data, to data portability, and to object to processing based on legitimate interest. You may withdraw consent at any time. For data we process on a school's instructions, we may need to forward your request to that school.

You can exercise your rights in the app settings, or via hello@swimmigo.com. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or another European supervisory authority.

9. Children

The app is intended for parents to track their child's progress. We do not collect data directly from children under 16 without the involvement and consent of the parent or guardian, who manages the app. We process only minimal data about children (first name, swimming level and progress). Contact us immediately if a child has provided us with data without a parent's consent; we will delete it as soon as possible.

10. Security

We protect data with encryption in transit and at rest, access control and the principle of least privilege. Only people and systems that need the data can access it.

11. Contact

Questions about privacy, or want to exercise a right? Email hello@swimmigo.com.

Bobika (Swimmigo) KVK 95172076 Address: Request via contact page hello@swimmigo.com