Privacy notice

Updated 25 October 2026

VividSwim is operated by RSB Applied Ltd (RSB Applied). This notice explains how we handle personal information when you use our swim-event replay service. Contact us at developers@rsbapplied.com about privacy, your information or this notice.

Information we handle

Why we use information

We use account information to sign you in, identify your account, maintain sessions and apply access permissions. We process your content to store, prepare and display replays, provide sharing and personalisation, handle support requests and maintain the service. We use technical records to prevent abuse, diagnose faults and protect accounts.

We rely on providing the service you request for account and replay processing; our legitimate interests in operating, securing and improving the service for necessary technical and support processing; and legal obligations where applicable. Where processing requires consent, including optional uses of sensitive information, we will seek that consent. You may withdraw consent by contacting us; this does not affect earlier lawful processing. Do not upload sensitive information about another person without appropriate authority.

Google user data

Google account information is used for authentication and account functionality. We do not sell Google user data, use it for advertising, or use it to train general-purpose AI models. We share it only as necessary to provide and secure the service, follow your instructions, comply with law, or support a business transfer subject to this notice. You can remove VividSwim access through your Google Account’s third-party connections settings. Removing Google access does not itself delete your VividSwim account or previously uploaded content.

Sharing and service providers

Event owners control event invitations, viewing links, publication and approved contributions. Authorised viewers may see participant names, routes, timing, photos and approved avatars included in an event. An unlisted event is not the same as a private event; anyone with a valid viewing link may be able to view or copy what it displays. Avoid including home locations or other details you do not want viewers to see.

Cloudflare provides application hosting, database, file storage and delivery. Google provides optional sign-in. Map and terrain providers receive requests needed to display geographic content, which can reveal the approximate area being viewed and your network address. If you choose an available AI/avatar-generation feature, the inputs required for that feature may be sent to its generation provider, such as Tripo or Cloudflare AI. Google sign-in data is not supplied as avatar-generation input. Feature availability differs between environments. We may disclose information where legally required or necessary to protect users and the service.

Storage, security and international processing

Hosted content is stored using Cloudflare services; device-only content is stored in your browser. Access checks, private storage and encrypted transport help protect hosted information, but no system can guarantee absolute security. Our service providers operate internationally and information may be processed outside your country. Where required, transfers must be covered by an applicable adequacy decision or appropriate contractual safeguards. Contact us for information about the arrangements applicable to your data.

Retention and deletion

We retain account and replay information while needed to provide your account, events and requested features. Retention also depends on sharing, recovery, security, disputes and legal obligations. There is no single fixed retention period for every type of content. Account sessions normally expire after seven days unless renewed by use. Some deleted library files have a five-day recovery window; this does not mean every copy is erased after five days.

Event copies, published revisions and other people’s contributions can have separate lifetimes from your personal library. Deleting a library file does not necessarily remove an independently retained event copy. Account removal involving shared content may require review. Backups, security records and information required by law may remain until no longer needed. Contact us for the status or removal of a particular copy.

Your choices and rights

Use your account’s Personal data controls, where available, to export information, download retained originals or request account removal. You can also contact us to request access, correction, deletion, restriction or portability. These rights depend on the circumstances and applicable law, and we may need to verify your identity.

Right to object: you may object to processing based on legitimate interests, explaining your circumstances. Contact developers@rsbapplied.com. You may complain to the UK Information Commissioner’s Office or your local data-protection authority.

Browser storage and children

We use session cookies and browser storage for sign-in, preferences, caching and device saves. Clearing browser data may remove device-only content and sign you out. These pages do not add advertising trackers. VividSwim is not directed at children under 13. A parent, guardian or organiser should contact us about a child’s information or an inappropriate upload.

Changes and contact

We will update this page when our practices change and provide additional notice for significant changes where appropriate. For privacy enquiries, email developers@rsbapplied.com.