⚠️ Draft for review. This is a starting template, not legal advice. Have it reviewed before launch.
Privacy Policy
Last updated:
This policy explains what data AQUA collects, why, and how it is handled. AQUA is a coaching-management tool used by swim and sports instructors through Telegram and the web.
1. Data we collect
- Instructor account data: your Telegram identity and the profile details you provide.
- Coaching data you enter: students, families, classes, schedules, attendance, notes, invoices and balances.
- Usage data: basic technical information needed to run and secure the service.
2. How we use it
We use your data only to provide AQUA: managing your classes and students, generating invoices, sending reminders to the contacts you specify, and keeping the service secure. We do not sell your data.
3. Personal data of students and parents
As an instructor you enter personal details of students and parents. You are the controller of that data; AQUA processes it on your behalf to deliver the features you use, including reminders sent via Telegram. You are responsible for having a lawful basis to store and contact them.
4. Sharing
- Telegram: messages and reminders are delivered through Telegram, subject to Telegram's own privacy practices.
- Service providers: we use infrastructure providers (for hosting and data storage) strictly to operate AQUA.
- We do not share your data for advertising.
5. Google user data (Gmail payment matching)
If you enable payment matching, AQUA connects to your Gmail account with read-only access, used solely to detect incoming bank payment notification emails (e.g. from DBS, POSB, UOB, OCBC, Standard Chartered, HSBC or Maybank) and match them against your own pending invoices.
- Only emails from known bank sender domains are scanned, and only while you have pending invoices.
- We do not store your mailbox or full email messages. For matched or reviewed bank notifications only, we retain the payment record (amount, date, bank reference) and a short excerpt of the notification text for troubleshooting and audit.
- Gmail data is never used for advertising, never sold, and never transferred to third parties except as required to operate this feature or comply with law.
- No humans read your emails, except with your explicit permission for support or security purposes, or where required by law.
- You can disconnect at any time by removing AQUA's access at myaccount.google.com/permissions.
AQUA's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
6. Storage and security
Data is stored on managed infrastructure with access controls. We take reasonable measures to protect it, though no system can be guaranteed fully secure.
7. Retention
We keep your data while your account is active. You can request deletion of your account and associated data at any time.
8. Your rights
You may request access to, correction of, or deletion of your data. To do so, contact us using the details below.
9. Changes
We may update this policy. Material changes will be communicated through AQUA or your provided contact details.
10. Contact
Questions about privacy or data requests: [email protected].