Privacy Policy
1. Who we are
AQUACORE.AI is a platform for aquatic sports performance made up of four web applications (ACore Athlete, ACore Coach, ACore Triathlete, ACore Open Water), referred to below as "the Apps" or "the Service".
Data Controller: Daniel Rogati
Contact: rogatidaniel@gmail.com
As AQUACORE.AI is currently operated by an individual (no company has been incorporated yet), the data controller is the founder himself.
2. Data we collect
2.1 Data you provide directly
- Email address (registration and login)
- Google authentication data, if you choose to sign in with Google (handled by Google, we do not store it ourselves)
- Sports data: times, distances, training sessions, personal bests (PB), training zones
- For ACore Coach: data relating to athletes entered by the coach (see section 2.4)
2.2 Data collected automatically
- IP address and browser user agent (via Netlify hosting, for security and performance purposes)
- App usage data (pages visited, features used) — we currently do not use third-party analytics tools
2.3 Payment data
Payments for Pro subscriptions are handled entirely by Lemon Squeezy, which acts as Merchant of Record. Lemon Squeezy collects and processes your credit card / payment method data — AQUACORE.AI never sees or stores your card details. We only receive confirmation of your subscription status (active, expired, etc.) and the email associated with the purchase.
2.4 Data entered by third parties (ACore Coach)
If you are a coach using ACore Coach, you may enter data relating to your athletes (name, times, personal bests). In this case:
- You, the coach, are responsible for obtaining the athlete's consent (or their legal guardian's consent, if a minor) before entering their data into the platform
- AQUACORE.AI acts as the technical provider of the platform that hosts this data, but does not have a direct relationship with the athlete whose data is entered by a third party
2.5 GPS Location (ACore Open Water — safety feature)
ACore Open Water includes (or will include in a future release) a real-time location sharing feature designed for safety during open water training. When you activate this feature:
- Your GPS location is shared with the contacts that you explicitly choose (e.g. an emergency contact)
- Sharing is always manually activated by you and can be stopped at any time
- Historical location data is not retained beyond the duration of the training session, unless you explicitly choose to save it in your history
3. Why we process your data
| Purpose | Legal basis |
|---|---|
| Providing the service (zone calculation, training history) | Performance of a contract |
| Account authentication and security | Performance of a contract |
| Managing Pro subscriptions | Performance of a contract |
| GPS safety feature (Open Water) | Explicit user consent |
| Service communications | Performance of a contract / Legitimate interest |
4. Where your data is stored
Main database: Supabase, hosted in the EU region (Frankfurt, Germany) — your data stays within European territory.
Local device data: your Pro training plan history is also saved locally in your browser via Dexie/IndexedDB technology, and does not leave your device unless synced.
Hosting: Netlify (global CDN, standard for web content delivery).
5. Who we share your data with
We do not sell or share your data with third parties for marketing purposes. Data is only shared with the service providers strictly necessary for the platform to function:
- Supabase (database and authentication)
- Lemon Squeezy (payments, acting as Merchant of Record)
- Google (only if you choose to sign in with Google)
- Netlify (hosting)
- The contacts you choose yourself for GPS safety sharing (Open Water)
6. How long we keep your data
We retain your data for as long as your account is active. If you request account deletion, your personal data is deleted within 30 days, except where legal obligations require longer retention (e.g. payment-related tax data, retained according to the timeframes required by Lemon Squeezy as Merchant of Record).
7. Your rights
As a resident of the European Union (or an EU citizen), you have the right to access, correct, delete, or port your personal data, to object to processing, and to withdraw consent at any time (e.g. disable GPS sharing).
To exercise these rights, write to rogatidaniel@gmail.com.
You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) if you believe the processing of your data violates GDPR.
8. Minimum age
The Service is intended for users 18 years of age or older. We do not knowingly collect data from minors through direct registration. The exception is the case described in section 2.4 (data of minor athletes entered by a coach), where responsibility for consent remains with the coach.
9. Security
We adopt appropriate technical measures (secure authentication, Supabase infrastructure with encryption, restricted data access) to protect your data. However, no system is 100% secure and we cannot guarantee absolute security.
10. Changes to this policy
We may update this Privacy Policy in the future, particularly as we add new features or service providers. Material changes will be communicated to you via the app or by email.
11. Contact
For any questions about this Privacy Policy: rogatidaniel@gmail.com