Garmin Connect Developer Compliance Verified

Privacy Policy — FormSync AI Swim Coach

Effective Date: October 25, 2026

Summary of Our Privacy Commitment:

Zero Raw Video Uploads: All swimming video pose tracking (33-point skeletal analysis) is processed locally on your mobile device. Your raw videos never leave your phone.
Strict Garmin Data Protection: Data synced from Garmin Connect (via the Garmin Training API and Garmin Activity API) is used solely to deliver your personalized swim training plan and post-swim stroke analytics.
No Sale or Public AI Model Training: We never sell your personal or biometric data, and we never use your Garmin activity files to train public or third-party foundational AI models.

1. Information We Collect

When you use FormSync AI Swim Coach, we collect only the minimum information required to provide adaptive swim coaching:

Account & Profile Information: Email address, swim goals (target distance/pace), preferred pool length (25m/50m/25yd), and Critical Swim Speed (CSS) baseline.
Garmin Connect Integration Data (with your explicit OAuth consent):
- Via Garmin Training API: Permission to publish structured swim workouts and training schedules to your Garmin Connect calendar.
- Via Garmin Activity API: Completed swimming activity files (.FIT format) including lap/length split times, stroke count, stroke rate, SWOLF, distance per stroke (DPS), and heart rate.
On-Device Biomechanics Telemetry: Summarized joint angle arrays and up to 3 compressed still keyframes extracted locally on your device to generate technique drill recommendations.

2. How We Use Your Information

Your data is used strictly to:

Generate and schedule personalized, goal-based swimming workouts directly to your Garmin watch.
Analyze your stroke mechanics and identify your "Form Breakdown Point" across pool lengths.
Automatically adapt upcoming swim sessions based on your completed workouts.

3. Data Sharing, Storage, and Security

All data is encrypted in transit (TLS 1.3) and at rest (AES-256) using Supabase PostgreSQL with Row-Level Security (RLS). OAuth tokens for Garmin Connect are stored in encrypted server vaults. We do not sell, rent, or trade your personal or health data to any third party.

4. Revoking Access & Data Deletion

You may disconnect your Garmin Connect account at any time from within the FormSync AI app settings or directly via your Garmin Connect Account Settings page. You may also request immediate and permanent deletion of your account and all associated activity records by clicking "Delete Account & Data" in the app or emailing privacy@formsync.ai.