Privacy Policy
Last updated: 2026-04-26
1. Who we are
TrySwimGlobal ("TSG", "we", "our") is a swimming-lesson marketplace operated in Malaysia. This policy explains what personal data we collect from customers, coaches, and pool guards, how we use it, and the rights you have under the Personal Data Protection Act 2010 ("PDPA").
2. Data we collect
Account details (full name, email, phone, address, city), authentication credentials (managed by our auth provider), payment metadata for completed bookings (we do not store full card numbers — Chip Asia handles payment processing), booking history, family-member names you add to your account, coach profile details (bio, certifications, bank account for payouts), device push-notification tokens, and operational logs (request IDs, timestamps, IP addresses) used for security and debugging.
3. How we use your data
To create and manage your account, process bookings and payments, deliver booking confirmations and reminders, route coach payouts, validate pool entry via QR codes, prevent fraud, comply with legal obligations, and improve the service. We do not sell your data.
4. Sharing with third parties
We share the minimum data necessary with: Supabase (database + authentication hosting), Fly.io (application hosting), Vercel (web hosting), Chip Asia (payment processing), Resend (transactional email delivery), Sentry (error tracking), and Axiom (operational logs). Each provider is bound by their own data-protection terms. Coaches see customer names attached to bookings they accept; guards see customer names and family-member names attached to QR codes they scan.
5. Retention
Account data is retained while your account is active. Booking records are retained for 7 years after creation for financial-audit purposes (this survives account deletion in anonymised form, where your name and contact details are removed but the booking row remains for accounting). Operational logs are retained for 90 days.
6. Your PDPA rights
You have the right to access your personal data, correct inaccurate data, withdraw consent, and request deletion of your account. Account deletion has a 14-day grace period (cancellable by signing in during the grace window) after which your profile is anonymised. Use the in-app "Your data" controls (Profile screen) or email us at the address below.
7. Cookies and similar technologies
The web app uses first-party cookies strictly necessary for authentication and session management. We do not use advertising cookies or third-party trackers.
8. Children
Adults book lessons on behalf of children in their family. The accountholder is responsible for the family-member details they add. We do not knowingly create accounts for children under 18.
9. Changes to this policy
We will post material changes to this page and update the "Last updated" date below. Significant changes will also be emailed to active accountholders.
10. Contact
For PDPA-rights requests or any privacy question, email privacy@tryswim.my.