Terms of Service & Privacy Policy

Terms of Service

These Terms govern the subscription to Swimstone, a training-monitoring service for swimming coaches and their swimmers. The Service is provided by XIX Solutions LLC, a limited liability company organised in the United States, whose address is 1209 Mountain Rd Pl NE, Ste N, Albuquerque, NM 87110, USA ("we", "us"). The contract is with the club, school or coach that subscribes ("the Client"). By subscribing, the Client accepts these Terms.

1. Definitions

• Service: the Swimstone web application, its hosting, updates and support.
• Coach account: the administrator account of the Client.
• Swimmers: the athletes the Client invites to use the Service.
• Client Data: all data entered or uploaded by the Client or its Swimmers, such as profiles, effort ratings (RPE), goals, messages, files, photos, videos, training sessions and test results.
• Swim Hub: the news feed of the Service, which shows summaries of and links to public swimming content published by third parties.

2. The Service

We provide the Client with a dedicated, private space on the Service, accessible through a web browser on phone or computer. Features include session effort ratings, weekly goals, a private swimmer-to-coach channel, race targets, tests, training sessions with volume and load by zone, a media library and the Swim Hub. We may improve or change features, provided the core functions remain available during the subscription.

3. AI features

Some optional features use artificial intelligence provided by Anthropic: analysing the text of a training session to fill in sets and zones, proposing training plans and sessions that the coach checks and edits, and summarising Swim Hub content. AI output can contain errors. The coach checks and corrects analysed sessions before saving them; summaries always link to the original source. The Client should not include health information or swimmers’ names in session text sent for analysis. The AI features can be left disabled, and the Service then works in manual mode.

4. Accounts and access

The Client creates and manages the Swimmer accounts and keeps all passwords confidential. The Client is responsible for any use of its accounts and must tell us without delay if it suspects unauthorised access.

5. Client responsibilities

The Client is the controller of the Client Data. In particular, the Client:

1. Ensures every consent required by law is obtained, including the consent of a parent or legal guardian for Swimmers who are minors in their country, and the explicit consent required for health information. The in-app consent screens help, but do not replace the Client’s own obligations.
2. Obtains image-rights consent before filming or photographing Swimmers, and tags every Swimmer who appears in a photo or video, so that the Service can protect those who declined publication.
3. Does not upload unlawful content, or content that infringes the rights of others.
4. Uses the Service only for training, wellbeing and communication with its Swimmers.

6. Fees and payment

The Service is billed by subscription, monthly or yearly, at the price shown when subscribing. Fees are payable in advance by card through our payment provider, Stripe. They are non-refundable, except where the law provides otherwise. Prices exclude any taxes that apply in the Client’s country. We may change prices with 30 days’ notice; the new price applies from the next billing period.

7. Trial

We may offer a free trial. At the end of the trial, the subscription starts only if the Client chooses a paid plan. Without a paid plan, the Client Data is deleted 30 days after the trial ends.

8. Term and termination

The subscription renews automatically for the same period unless cancelled before the renewal date. Either party may terminate for serious breach not remedied within 15 days of written notice. We may suspend access immediately in case of unpaid fees after reminder, or of use that threatens the security of the Service.

9. End of subscription

At the end of the subscription, the Client can request an export of its Client Data for 30 days. After this period, we permanently delete the Client Data, including files, photos and videos, and the backups within a further 30 days.

10. Availability and support

We aim for continuous availability but do not guarantee uninterrupted service. Maintenance may cause short interruptions, announced in advance when possible. Support is provided by email at contact@swim.xavieridoux.com, on business days.

11. Third-party content

The Swim Hub shows short summaries of, and links to, content published by third parties. That content belongs to its authors; we do not control it and are not responsible for it. Summaries are written by AI from the title and the opening of each article, are labelled as such, and always link to the original. We do not copy full articles, and we do not reuse article photos except thumbnails supplied by the publisher’s own feed or by YouTube.

“Swim in…” search. When you look up a city in the Swim Hub, the city name is sent to OpenStreetMap (Nominatim and Overpass) to find it and the pools mapped around it (map data © OpenStreetMap contributors), and to Anthropic’s Claude with web search, which looks for public pages about pools, clubs, groups and competitions there. No personal data about you is sent. Each result shows the page it comes from; the information is public, may be out of date, and should be checked at the source. Organisations that want a result corrected or removed can write to contact@swim.xavieridoux.com.

“Train together”. An optional space of the Swim Hub where adults (coaches, and swimmers aged 18 or over according to the date of birth recorded by their club; never parents’ accounts or minors) can create a profile, post where and when they train, share the cities where they will be, and exchange private messages with photos and short videos with adults of other clubs using Swimstone. What is shown to them: first name and initial, club, sports, level, languages, the text and photos you add, your home city and the cities and dates of your stays. Only the city is kept, never your exact position: when you use the 📍 button, your phone’s position is sent to OpenStreetMap (Nominatim) to find the city, and then forgotten. Messages are visible only to the two people in the conversation, over an encrypted HTTPS connection (they are not end-to-end encrypted: the platform can access them to handle a report). Photos and videos sent in messages are deleted after 30 days; videos are limited to 30 seconds and 50 MB. You can block or report anyone; a report blocks the person and is reviewed by us, and abusive accounts are suspended. You can delete your profile, photos, posts, stays and messages at any time from “My profile”. Meet people you do not know in public places, such as the pool. This data is stored on our servers in France with the rest of the Service and is used only to run this feature.

Our robot (SwimstoneHub). The Swim Hub reads public news feeds and news pages a few times per hour at most. It identifies itself as “SwimstoneHub”, follows each site’s robots.txt rules, and stops when a site refuses access. Publishers who prefer not to appear in the Swim Hub, or who want an item removed, can write to contact@swim.xavieridoux.com; we remove the content promptly, and in any case within 5 business days. Blocking “SwimstoneHub” in robots.txt also stops all reading of the site.

12. Intellectual property

We own the Service, its software, its name and its design. The Client receives a non-exclusive, non-transferable right to use the Service during the subscription. The Client keeps all rights to its Client Data, and grants us only the rights needed to host and process it to provide the Service.

13. Data protection

For Client Data, we act as processor on behalf of the Client, under the Data Processing Agreement in the Annex, which forms part of these Terms. For the Client’s billing and account data, we act as controller, as described in our Privacy Policy.

14. Confidentiality

Each party keeps confidential the information of the other party that it receives under these Terms, during the subscription and for 3 years after it ends.

15. Liability

The Service is a training aid. It does not provide medical advice and does not replace the judgement of the coach or of a health professional. To the extent permitted by law, our total liability is limited to the fees paid by the Client in the 12 months before the event giving rise to the claim. Neither party is liable for indirect losses, such as loss of profit or reputation. Nothing in these Terms limits liability that cannot be limited by law.

16. Changes to these Terms

We may update these Terms. We notify the Client by email at least 30 days before material changes take effect. If the Client does not accept them, it may cancel before they take effect.

17. Governing law

These Terms are governed by the laws of the State of New Mexico, USA. Any dispute that cannot be settled amicably is submitted to the courts of Bernalillo County, New Mexico. This does not deprive a Client acting as a consumer of the protection of the mandatory laws of its country of residence.

18. Contact

XIX Solutions LLC — 1209 Mountain Rd Pl NE, Ste N, Albuquerque, NM 87110, USA — contact@swim.xavieridoux.com

Annex: Data Processing Agreement

This Annex applies when XIX Solutions LLC processes personal data on behalf of the Client. It is written to meet the processor requirements of the EU General Data Protection Regulation (GDPR, Article 28) and of the Thai Personal Data Protection Act (PDPA, Section 40).

A. Roles

The Client is the controller. XIX Solutions LLC is the processor and acts only on the Client’s documented instructions, which are these Terms and the Client’s use of the Service.

B. Processing details

C. Our obligations

1. Process Client Data only to provide the Service, never for our own purposes, advertising or sale.
2. Ensure that anyone who accesses Client Data is bound by confidentiality.
3. Apply the security measures listed in section E.
4. Help the Client answer requests from data subjects (access, correction, deletion, export).
5. Notify the Client without undue delay, and within 48 hours where possible, after becoming aware of a personal data breach, with the information available.
6. Help the Client with data protection impact assessments when needed.
7. At the end of the subscription, return and then delete Client Data as set out in section 9 of the Terms.
8. Make available the information needed to demonstrate compliance, and allow reasonable audits with 30 days’ notice, at the Client’s cost.

D. Sub-processors

The Client authorises the sub-processors below. We inform the Client at least 30 days before adding or replacing one; the Client may object and terminate if the objection cannot be resolved.

AI features are optional. When the Client does not configure them, no data is sent to Anthropic.

E. Security measures

• Encrypted connections (HTTPS) for all access.
• Passwords stored as one-way hashes, never in clear text.
• Each Swimmer sees only their own data; each club has its own separate database.
• Uploaded files are stored outside public web access and served only after sign-in and permission checks.
• Sign-in attempts are limited to block password guessing.
• Regular backups by the hosting provider.

F. International transfers

Client Data is hosted in France, in the European Union. Transfers to sub-processors in the United States are limited to the data listed in section D, and are made with appropriate safeguards required by law, such as the European Commission’s Standard Contractual Clauses.

Privacy Policy

This policy explains how Swimstone handles personal data. It applies to the coaches and clubs who subscribe, and to the swimmers who use Swimstone through their coach.

1. Who is responsible

• Swimmer data (ratings, goals, messages, files, tests, training sessions, photos, videos): the swimmer’s club or coach is the controller. XIX Solutions LLC hosts and processes this data on their behalf, as processor. Swimmers should contact their coach first; the coach’s contact details are shown in the app’s Privacy section.
• Client account and billing data (coach name, email, club, subscription, invoices): XIX Solutions LLC, 1209 Mountain Rd Pl NE, Ste N, Albuquerque, NM 87110, USA, contact@swim.xavieridoux.com, is the controller.

2. Data we process

3. Why we use it

• To provide the Service: help coaches plan and adapt training and look after swimmers’ wellbeing.
• To secure the Service: sign-in protection, preventing abuse.
• To bill the subscription and support Clients.

We never sell personal data and never use it for advertising.

4. Artificial intelligence

If the coach turns on the AI features, the text of a training session the coach writes is sent to Anthropic to fill in the sets and zones, and public Swim Hub articles are sent to Anthropic to be summarised. When the coach asks the AI to build a training plan or a session, it also receives a pseudonymised profile of the athletes concerned (#1, #2… with age, maturity stage, strength experience, sensitive body areas, race times and max loads), never their names; the names are put back only inside Swimstone. To write sessions in the coach’s own style, such a request also includes a few of the coach’s recent sessions and a “style sheet” (the coach’s habits, rewritten by the AI from time to time from the coach’s sessions and from the corrections the coach made to AI proposals); swimmers’ names are removed from this text before it is sent. Each coach can read and edit their sheet, or turn this off, in the Sessions tab. Swimmers’ accounts, ratings, messages and files are never sent. Under Anthropic’s commercial terms, this data is not used to train its models. Swimmers’ data is never used by us to train any AI.

5. Legal basis

• Swimmer data: the consent collected in the app at first sign-in, including the explicit consent for health information, and the consent of a parent or legal guardian for minors.
• Image rights: a separate yes/no choice. If a swimmer says no, media showing them is used for technique only and cannot be downloaded by swimmers.
• Billing data: performance of the contract with the Client, and our legal obligations (accounting, tax).

6. Who can see the data

• A swimmer sees only their own data, and the media they are tagged in or shared with the whole group. They never see other swimmers’ names on media.
• The club’s coaches see the data of the club’s swimmers only. Groups only change what a coach sees first; the head coach manages coach accounts.
• A parent given access by the club sees their own child’s data in read-only mode: sessions, attendance, wellness, goals, tests and races. Parents never see messages, photos or documents the swimmer sent to the coach, nor other swimmers.
• XIX Solutions LLC accesses data only when needed to run, secure or support the Service.
• When an athlete links their Polar account, Swimstone receives their workouts from Polar (Polar Electro Oy, Finland). Polar is not our sub-processor: the athlete authorises this transfer in Polar Flow and can revoke it at any time, in Swimstone (“Unlink”) or in Polar Flow. We only read workouts, never write to the Polar account.
• When an athlete links their WHOOP account, Swimstone receives their workouts, recovery and sleep from WHOOP (WHOOP, Inc., USA). WHOOP is not our sub-processor: the athlete authorises this transfer on WHOOP’s own page and can revoke it at any time, in Swimstone (“Unlink”, which also withdraws our access at WHOOP) or in the WHOOP app. We only read this data, never write to the WHOOP account. Data already received stays in Swimstone until the athlete or their coach deletes it, or the account is deleted.
• Our sub-processors process data for us under contract: o2switch (hosting, France), Anthropic (AI features, United States) and Stripe (payments, United States). When you switch notifications on, your browser’s push service (for example Google or Apple) carries an encrypted message it cannot read.

7. How long we keep it

8. Security

All connections are encrypted (HTTPS). Passwords are stored as one-way hashes. Files are stored outside public web access and shown only after sign-in and permission checks. Each club has its own separate database.

9. International transfers

Data is hosted in France (European Union). The limited data sent to Anthropic and Stripe in the United States is protected by appropriate safeguards, such as the European Commission’s Standard Contractual Clauses.

10. Cookies

Swimstone uses one cookie that keeps you signed in, and remembers your language choice on your device. Both are strictly necessary. There are no advertising or tracking cookies.

11. Your rights

You can ask to access, correct, export or delete your data, or withdraw your consent at any time. Swimmers can change their image-rights choice in the app’s Privacy section. Withdrawing consent does not affect processing already carried out. Contact your coach, or contact@swim.xavieridoux.com. You can also complain to your data protection authority: in Thailand, the Personal Data Protection Committee (PDPC); in the EU, the authority of your country.

12. Children

Swimmers under the age of majority in their country (20 in Thailand) can use Swimstone only with the consent of a parent or legal guardian, collected in the app.

13. Changes

We update this policy when the Service or the law changes. Material changes are announced in the app or by email before they apply. Last updated: 10 October 2026.