Privacy Policy

1. Our Privacy Commitment

We designed PoolFu with privacy as a core principle. We collect only the minimum information necessary to provide you with a secure, personalized pool and spa management experience. We do not sell your personal information. We do not use your data for advertising. We do not track you across other apps or websites.

When you sign in, certain information syncs to our secure cloud infrastructure so you can access your pool data and preferences across devices.

2. Information We Collect

Account Information

When you create an account, we collect your email address or Apple ID credentials depending on your chosen sign-in method. We also record when you created your account and when you last signed in.

Profile and Preferences

Your profile includes settings you choose within the App such as your preferred measurement units (US/Metric), appearance mode, and display name (optional).

Pool and Spa Data

We store information about your pools and spas including:

• Pool names, types (pool, spa, swim spa), and configurations
• Water body characteristics (volume, surface type, sanitizer system)
• Water test results and chemistry history
• Treatment recommendations and actions taken
• Custom chemistry target ranges

This data syncs to the cloud to provide persistence across devices and enable historical analysis.

Pro Subscriber Customer Data

If you subscribe to PoolFu Pro and use the customer management features for your pool service business, you may choose to store information about your customers. This is entirely optional and under your control. Customer data you may store includes:

• Customer names
• Phone numbers
• Email addresses
• Service addresses (street, city, state, postal code, country)
• Service notes
• Service scheduling preferences
• Location coordinates (for route optimization)

Important: This customer data belongs to you and is stored to help you manage your service business. We do not use customer contact information for marketing purposes. We do not contact your customers. This data is encrypted and protected with the same security measures as all other PoolFu data.

As a Pro subscriber, you are the data controller for your customer information. If your customers wish to access, correct, or delete their personal data stored in the App, they should contact you directly. We act as a data processor and will assist you in responding to such requests.

Location Information

With your permission, we access your device's location to provide accurate weather data for your area. Weather information helps optimize chemistry recommendations based on temperature, UV index, and precipitation. You can disable location access at any time in your device settings; the App will function without it but weather features will be limited.

For Pro subscribers using route optimization, we may geocode customer service addresses to provide mapping and route planning features. This geocoding is performed securely through our service providers.

AI Conversation Data

When you use Splash AI, we process your questions and the AI's responses to provide chemistry guidance. Conversations are processed by our AI service providers:

• Anthropic (Claude) - See Anthropic's Privacy Policy
• OpenAI - See OpenAI's Privacy Policy

Your conversations are not used to train AI models. We do not store AI conversation content on our own servers. Conversations are processed in real-time by our AI providers and are subject to their respective data retention policies. Please refer to the Anthropic and OpenAI privacy policies linked above for details on how they handle conversation data.

We may log limited request metadata (such as timestamps and error information) for troubleshooting purposes, but this does not include conversation content.

Subscription Information

We receive your subscription status from Apple, including whether you're in a trial period, have an active subscription, or if your subscription has expired. We do not receive your payment card information. Apple processes all payments and only shares subscription entitlement information with us.

Device Information

We collect basic device information such as your device model to help troubleshoot issues and ensure the App works properly on your device.

Analytics (Optional)

Analytics collection is disabled by default. If you enable analytics in Settings > Privacy, we collect information about how you interact with the App using anonymous identifiers. We do not associate analytics data with your account identity. You can disable analytics at any time.

Abuse Prevention

When you request a magic link to sign in, we generate anonymous tokens derived from your email and a truncated version of your IP address to prevent abuse. We do not retain your raw email or full IP in the rate-limit store, and these tokens are automatically deleted after 24 hours.

Support Communications

If you contact us at [email protected], we receive your email address and the contents of your message. We retain support communications as long as necessary to resolve your request and maintain business records.

3. How We Use Your Information

We use the information we collect to:

Authenticate you securely and maintain your account. We verify your identity using either Apple Sign-In or passwordless magic links sent to your email address.

Sync your data across devices. When you sign in on multiple devices, we keep your pool data, test history, preferences, and subscription status synchronized.

Provide chemistry recommendations. We analyze your water test results to calculate chemical adjustments and provide guidance for maintaining safe, balanced water.

Power AI assistance. When you ask Splash AI questions, we process your queries with AI service providers to generate helpful responses about pool and spa care.

Deliver weather-aware guidance. With your permission, we use your location to provide local weather data that informs chemistry recommendations.

Process your subscription. We work with Apple to manage your subscription, including trial periods, renewals, and cancellations.

Enable Pro service features. For Pro subscribers, we store and process customer data you provide to enable customer management, route optimization, service scheduling, and report generation.

Deliver transactional emails. We send you magic link emails when you sign in and account confirmation emails when you delete your account. For Pro subscribers with auto-send reports enabled, we send service reports to your customer email addresses on your behalf.

Prevent abuse. We use rate limiting and security measures to protect the App from malicious activity.

Provide support. When you contact us with questions or issues, we use your information to help resolve them.

Improve the App. If you enable analytics, we use aggregated, anonymized usage data to understand which features are most valuable and where we can make improvements.

4. How We Store and Protect Your Information

Your information is stored both on your device and in secure cloud storage to provide you with a seamless experience across devices.

On Your Device

Certain app data and content are stored locally on your device. You maintain complete control and can clear local data through the App's settings or by deleting the App entirely.

In Our Cloud Infrastructure

When you sign in, we store your account credentials, subscription status, pool data, test history, preferences, and settings in secure cloud storage. As you add pools and log water tests, your data syncs to the cloud so you can seamlessly access it on any device.

For Pro subscribers, customer data is stored in secure cloud storage under your account. Each customer's data is isolated and accessible only to you.

Your cloud data is encrypted using industry-standard AES-256 encryption when stored on our servers and Transport Layer Security (TLS) when transmitted over the internet. We configure strict access controls so only you can read or modify your information.

5. Service Providers

We use trusted third-party companies to help us operate the App. These service providers process data on our behalf and are required to protect your information and use it only for the purposes we specify.

Cloud Authentication and Database Infrastructure: We use cloud services for user authentication, data storage, and server-side functions.

AI Services: Anthropic (Claude) and OpenAI power Splash AI conversations. Because you interact directly with these AI services through the App and their acceptable use policies apply, we identify them specifically. See their privacy policies linked above.

Transactional Email Delivery: We use an email delivery service for magic links and account notifications. Our email provider does not retain message bodies or extended delivery logs.

Weather Data Services: We use a weather data provider to deliver local forecasts and conditions based on your location.

Geocoding Services: For Pro subscribers using route features, we use geocoding services to convert addresses to coordinates for mapping purposes.

App Distribution and Payments: Apple (App Store, StoreKit)

For a complete list of our service providers (subprocessors), contact us at [email protected].

All of our primary service providers' infrastructure is located in the United States. If you access the App from outside the United States, your information will be transferred to and processed in the United States.

6. Marketing Communications

We do not send marketing emails. We will never share your email address with third parties for their marketing purposes.

7. Legal Disclosures

We may disclose your information if required by law, court order, or government request. We may also disclose information when we believe in good faith that disclosure is necessary to protect our legal rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.

8. International Data Transfers and GDPR

Our service infrastructure is located in the United States. If you access the App from the European Economic Area (EEA), United Kingdom, or other regions with data protection laws, your personal information will be transferred to and processed in the United States.

International data transfers are supported by Standard Contractual Clauses (SCCs) with our service providers.

Your Rights Under GDPR

If you are located in the EEA or UK, you have specific rights under the General Data Protection Regulation (GDPR). Section 10 below generally covers these privacy rights, but EU and UK residents also have the following:

Right to Object to Processing - If we process your data based on legitimate interests, you may object on grounds relating to your particular situation. We will stop processing unless we have compelling legitimate grounds that override your interests.

Right to Restriction of Processing - You may request that we restrict the processing of your personal information in certain circumstances, such as while you contest the accuracy of your data or while we assess an objection you have raised.

Right Not to Be Subject to Automated Decision Making - We do not currently make decisions about you based solely on automated processing. Chemistry recommendations are guidance only and require your action to implement.

Right to Lodge a Complaint - You may lodge a complaint about our data collection and processing actions with the appropriate supervisory authority. We ask that you contact us first to see if we can resolve your issue.

To exercise these rights, contact us at [email protected]. Our usual processing time is to respond within three business days, but it could take up to one month for these requests. If your request is complex or we receive multiple requests, we may extend this period by up to two additional months, in which case we will inform you of the extension and the reasons for the delay within the first month.

Legal Basis for Processing

We process your personal information based on the following legal grounds:

Contract Performance - Processing your account information, pool data, and subscription data is necessary to provide the App services you've subscribed to.

Legitimate Interests - We process abuse prevention data and support communications based on our legitimate interest in maintaining service security and providing customer support.

Consent - We collect optional analytics data only with your explicit consent, which you can withdraw at any time in Settings > Privacy.

Your rights are not absolute, and exceptions may apply. These exceptions can arise from different factors including our legal obligations, the rights of others, your or another's safety, and our ability to bring or defend against legal claims.

9. Data Breach Notification

We designed PoolFu to minimize the personal information we collect. We never collect your home address or payment information (Apple handles all billing). Pro subscribers may choose to store their customers' service addresses for business purposes, but we never collect the subscriber's own home address. By keeping personal information to an absolute minimum, we reduce the risk and impact of any potential data breach.

Our infrastructure is designed with security in mind. We use strict access controls and verification systems to ensure that only authorized users and services can access data.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the appropriate supervisory authority within 72 hours of becoming aware of the breach, as required by GDPR. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly without undue delay.

We will also notify affected users in accordance with applicable US state data breach notification laws, including North Carolina's requirements where applicable.

Our breach notification will include the nature of the breach, the likely consequences, and the measures we have taken or propose to take to address the breach and mitigate any adverse effects.

10. Data Retention and Deletion

We retain your information only as long as necessary to provide the App services and comply with legal obligations.

Active Accounts - We retain your information as long as your account is active. We do not automatically delete inactive accounts.

Deleted Accounts - When you delete your account, we immediately delete your account information, pool data, test history, customer data (for Pro subscribers), and preferences from our cloud storage. This deletion is permanent and cannot be undone.

Local Data - Data stored on your device remains until you manually clear it through the App settings or delete the App.

Temporary Data - Magic link abuse prevention tokens are automatically deleted after 24 hours.

Support Communications - Support emails are retained as needed to resolve requests and maintain business records.

Analytics Data - If you've enabled analytics, historical analytics data associated with anonymous identifiers is retained for 14 months, but new analytics collection stops immediately when you disable it or delete your account.

AI Conversations - We do not store AI conversation content on our servers. AI providers may retain conversation data according to their own policies. Request metadata (timestamps, error logs) may be retained for troubleshooting.

11. Your Privacy Rights and Choices

You control your data and how we use it.

Choose Your Sign-In Method

You can sign in with Apple to use Apple's private email relay, or use your own email address with magic link authentication.

Control Location Access

You can enable or disable location access at any time in your device settings. The App functions without location access but weather-aware features will be limited.

Control Analytics

Analytics is disabled by default. You can enable or disable analytics at any time in Settings > Privacy.

Update Your Information

You can update your pool configurations, preferences, and profile information at any time through the App. Pro subscribers can add, edit, or delete customer information at any time.

Export Your Information

To request a copy of the information we store about you, email us at [email protected]. We will verify your identity and provide your data in a commonly used, machine-readable format (JSON) within 30 days.

Correct Your Information

If any information we store about you is inaccurate, you can update it through the App or by contacting us at [email protected].

Delete Your Account

You can delete your account at any time in Settings > Account > Delete Account. If you have an active subscription, you will be prompted to cancel it through your Apple account settings before proceeding with account deletion. You may need to sign in again immediately before deletion for security verification. Once deleted, your information is permanently removed from our systems and cannot be recovered.

Stop Using the App

You can stop using PoolFu at any time by deleting the App from your device and canceling any active subscription through your Apple account.

No Retaliation or Discrimination

You have the right not to receive discriminatory or retaliatory treatment for making a request regarding your personal information.

Upon receiving your request, we may ask for additional information from you in order to verify the request or confirm how you would like to proceed. We endeavor to respond to a verifiable request without undue delay. If we require an extended amount of time, we will inform you using the email associated with your account or the email you used to make the request.

12. Age Requirements

Due to the nature of pool and spa chemical handling, which involves potentially hazardous materials, PoolFu is intended for users 18 years of age and older. We do not knowingly collect personal information from anyone under 18.

If you believe we have collected information from someone under 18, please contact us immediately at [email protected] so we can delete it.

13. California Privacy Rights

If you're a California resident, you have specific rights under the California Consumer Privacy Act (CCPA).

You have the right to know what personal information we collect, use, and share. This Privacy Policy describes our practices, but you can request additional details by contacting us.

You have the right to request deletion of your personal information. You can delete your account directly through the App in Settings > Account > Delete Account, or contact us to request deletion.

You have the right to request correction of inaccurate personal information. You can update most information directly through the App, or contact us for assistance.

You have the right to opt out of the sale of personal information. We do not sell personal information.

You have the right to non-discrimination. We will not discriminate against you for exercising any of your privacy rights.

To exercise these rights, contact us at [email protected]. We may need to verify your identity before processing your request.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect new features, legal requirements, or changes in our privacy practices. When we make changes, we will update the "Effective Date" at the top of this policy.

Your continued use of the App after changes take effect means you accept the updated policy. We encourage you to review this policy periodically to stay informed about how we protect your information.

15. Contact Us

If you have questions about this Privacy Policy or how we handle your information, please contact us:

Your trust matters to us. We are committed to transparency and to protecting your privacy. If you have concerns about how we handle your information, please reach out to us before uninstalling the App so we can address them.