Privacy Policy

This policy explains how SplashRoster handles information for two groups: the swim instructors who use our platform to run their business, and the families (parents and their children) those instructors serve. The distinction matters because our role is different for each.

For information about families and children, the instructor is the controller — it is their customer relationship and their data. SplashRoster acts as a processor, handling that information on the instructor’s behalf and under their instructions solely to provide the service. If you are a parent, direct requests about your family’s data to your instructor; we will support them in responding.

For information about instructors’ own accounts and use of the platform, SplashRoster is the controller.

• Instructor account: name, business details, email, phone, login credentials, plan and billing records.
• Family records (on the instructor’s behalf): parent contact details, and each child’s name, date of birth, and the health and enrollment details the instructor records for lessons.
• Payments: processed by Stripe; we store transaction references and status, not full card numbers.
• Messages: email and SMS sent or received through the platform, and inbox items processed for sorting and draft suggestions.
• Usage: first-party, privacy-preserving analytics about how the platform is used.

SplashRoster is a tool for instructors, not a service directed to children, and children do not have accounts. We process a child’s information only as the instructor’s processor, so the instructor can schedule and safely deliver lessons. Instructors are responsible for obtaining any parental consent required by applicable law (including COPPA) before providing children’s information. We apply access controls and encryption to this data and retain it only as needed to provide the service or as the law requires.

To provide, secure, and improve the platform; to process payments and subscriptions; to send service messages, reminders, and — where permitted — marketing; to sort inbound email and suggest draft replies (which the instructor reviews before anything is sent); and to comply with legal obligations. We do not sell personal information, and we do not use family or children’s data to train AI models.

We share data with vetted providers only as needed to run the platform:

We use industry-standard safeguards — encryption in transit and at rest, access controls, and row-level isolation so one instructor’s data is not accessible to another. No system is perfectly secure. We keep information for as long as an account is active and for a reasonable period afterward, then delete or anonymize it unless the law requires longer retention.

Depending on where you live, you may have rights to access, correct, delete, or export personal information, and to opt out of marketing. Instructors can exercise these in-app or by contacting us. Families should contact their instructor, who controls their records; we will assist as the processor.

Questions or requests? Email hello@splashroster.com.