Privacy Policy

1. Who we are

FastBreak Powered by Swishful Athletics is operated by Swishful Athletics LLC (State of Georgia, United States). For privacy law purposes, including the UK/EU GDPR, Swishful Athletics LLC is the data controller for the information described here. You can reach us any time at Swishfulathletics@gmail.com.

2. Information we collect

• Account information — email address, password (stored only as a salted hash by our authentication provider), display name, and sign-in method.
• Athlete profile — date of birth, age bracket, height, weight, highest level played, shooting hand, position, self-reported strongest and weakest skills, training goals, days per week and minutes per session, and an optional self-entered city or area label for the leaderboard.
• Training and performance data — assessment ratings, skill test results, generated programs, logged sets, reps, weights, makes, swishes, times, personal records, points, ranks, badges, streaks and court check-ins.
• Health-adjacent information you choose to give us — injury history and current aches you enter so Swishful Prehab can suggest warmups and recovery movements. This is optional, is treated as sensitive, and is processed only with your explicit consent. You can clear it at any time.
• Coaching content — for Pro Access members, uploaded workout videos, coach feedback and messages.
• Guardian information — for athletes aged 13–17, the name, email address and relationship of the parent or legal guardian, plus the record of their signed consent (name typed, timestamp and policy version).
• Payment information — handled by our payment provider. We receive subscription status, tier, billing country and currency. We never see or store your full card number.
• Technical data — the minimum needed to keep the service working and secure, such as IP address in security logs and error reports.

3. Why we use it and our lawful bases

• To perform our contract with you — creating your account, generating your program, logging workouts, awarding points, running the leaderboard, and delivering paid features.
• Your consent — optional injury and ache information, appearing on the public leaderboard and public profile, and any optional emails. You can withdraw consent at any time without affecting the rest of your account.
• Our legitimate interests — keeping the service secure, preventing cheating on the leaderboard, and fixing errors.
• Legal obligation — keeping records of guardian consent, tax and payment records.

We do not sell your personal information, and we do not use it for third-party advertising.

4. What other people can see

If your profile is public, other players can see your display name, level, coarse area label, points, rank, badges and recent completed workouts. Nothing else is public. Your date of birth, email, guardian details, height, weight, injury information, messages and videos are never shown on the leaderboard or on public profiles. You can switch your profile to private at any time and you will be excluded from the leaderboard.

Area is a coarse, self-entered city or neighbourhood label. We do not collect live GPS location.

5. Athletes under 18

FastBreak Powered by Swishful Athletics is not available to children under 13. Athletes aged 13–17 may use the app only after a parent or legal guardian receives a consent link by email, reviews this policy, the Terms of Service and the training waiver, and signs. Until that consent is signed, the account cannot generate or log training. A guardian can withdraw consent and request deletion at any time by writing to Swishfulathletics@gmail.com. Minor accounts are excluded from direct messaging with the coach.

6. Cookies and similar technologies

We use only strictly necessary storage: a session token that keeps you signed in, and local storage that remembers a paused workout on your own device. We do not run advertising or cross-site tracking cookies, so no consent banner is required. Clearing your browser storage signs you out and clears any paused workout.

7. Who we share it with

We use a small number of processors acting on our instructions: our cloud hosting, database and authentication provider; our payment provider for subscriptions, tax and invoices; our email provider for account emails such as sign-in, password reset and guardian consent links; and an AI provider that generates written coaching notes. Coaching notes are generated from your training data and are not used to train third-party models. We may also disclose information where legally required.

8. International transfers

We are based in the United States and our processors may store data in the United States and other countries. Where personal information is transferred out of the UK, EU or EEA, we rely on the European Commission's Standard Contractual Clauses (and the UK Addendum where applicable) with each processor, together with encryption in transit and at rest.

9. How long we keep it

We keep your account and training data for as long as your account is active. If you delete your account, we remove your profile, training logs, videos and messages within 30 days, except where we must keep limited records longer: payment and tax records for up to 7 years, and guardian consent records for 3 years after the account closes so we can show consent was obtained. Backups roll off within 30 days.

10. Your rights

Depending on where you live, you have the right to access a copy of your data, correct it, delete it, restrict or object to processing, withdraw consent, and receive your data in a portable format. UK and EU residents also have the right to complain to their local data protection authority. California residents have equivalent rights to know, delete, correct and opt out of sale or sharing — we do not sell or share personal information.

You can download your data instantly and file access, correction or deletion requests from your account and privacy page, or email Swishfulathletics@gmail.com. We respond within 30 days and never charge a fee for a first request.

11. Security

Data is encrypted in transit and at rest. Every record is protected by row-level access rules so one athlete cannot read another athlete's data. Videos are stored in a private bucket readable only by the uploader and the coach. Access to production data is limited to people who need it. No system is perfect, so please report anything suspicious to us straight away.

12. Changes

If we make a material change we will update the version above and ask you to review it the next time you sign in. Continued use after that means you accept the updated policy.