FlipTurn Privacy Policy

Version v0-beta · effective May 1, 2026

This is a beta-stage placeholder. The lawyer-reviewed policy lands before the friends-and-family beta opens beyond invited testers (Phase 6 in the project roadmap).

What FlipTurn collects

Parent / admin accounts: email address (used as login), display name you provide, and an audit log of consent events (which policy version you accepted, when, and the action — sign-up, adding a swimmer, sending an invite, etc.).
Swimmer profiles (your children): display name, birth year (year only — no full date of birth), and the swims you log on their behalf. Children under 13 do not have accounts and cannot sign in.
Swims: stroke, distance, course (pool length), time, date, optional meet name, optional pool/location, optional notes.

How it's used

To show you and other family members in your family the swims you've logged.
To compute personal bests and season summaries from those swims.
To send transactional email (sign-in links, family invitations).

FlipTurn does not run advertising or sell data.

Who can see your data

By default, your family's data is visible only to members of your family in FlipTurn.
Sharing with anyone outside the family (a coach, a team, a friend) happens only when an admin parent in your family explicitly creates a share grant.
The FlipTurn operator (Thomas Skaff) has database-level access for support and debugging only.

Your rights (parental rights for minors)

Access — request a copy of all data we hold about your family.
Correction — fix anything that's wrong.
Deletion — remove a swim, a swimmer profile, or your entire family.
Export — get your family's data in a portable format.

Contact thomas.skaff@gmail.com to exercise any of these rights. (DSR self-service flows ship in Phase 6.)

Compliance

COPPA: children under 13 cannot create accounts. Their data is collected only with parental consent and managed exclusively by an admin parent.
Virginia VCDPA: default-private settings, no targeted advertising, opt-in for any sale (FlipTurn does not sell).
The beta is US-only. GDPR / UK AADC scope is deferred until international users are explicitly supported.

Changes

Updates to this policy are versioned. The version you accepted at signup (or any subsequent re-acceptance) is recorded in the audit log along with your consent action.