Privacy Policy

Last updated: November 9, 2026

poolcntrl (“we,” “us”) operates poolcntrl.com and the poolcntrl iOS app. This page describes what we collect, why, and what you can do about it.

What we collect

• Account data: your email and a hashed password (we never see the plaintext password — Supabase handles authentication).
• Pool data you enter: properties, pools, water test readings, chemical logs, maintenance logs.
• Subscription metadata: plan and current status. Payments are handled by the Apple App Store; we do not store payment card numbers.
• Photos you add: pictures you attach to tests and logs, and photos you take of test strips or pool problems. Strip and diagnosis photos are additionally sent server-side to OpenAI to read the strip or diagnose the issue — never directly from your device, and never for training.
• Approximate property location: the address or zip code you type for a property is geocoded to coordinates so we can fetch weather, freeze alerts, and satellite imagery for that pool. The app never reads your device’s GPS and never asks for location permission.
• Product usage and diagnostics: in-app interaction events (which screens and features are used) tied to your account ID and email, and crash/error reports, so we can fix what breaks and improve what’s confusing.
• Server logs: standard request logs (timestamp, route, status, latency) kept by our hosting providers for operational purposes.

What we don’t collect

• Precise device location — no GPS read, no location permission requested. The only location we hold is the approximate coordinates of the pool address you type in.
• Contacts, calendar, or photos beyond what you explicitly add.
• Browsing history outside poolcntrl.com.
• Device identifiers used for cross-app tracking, and we do not track you across other companies’ apps or websites.
• Audio or video.

Why we collect it

Solely to provide the product: store your pool history, generate dosing recommendations, process subscriptions, and send transactional emails (account confirmation, password resets, payment receipts). We do not sell your data.

Subprocessors

We use the following third parties to operate the service:

• Supabase — database, authentication, storage. (US and EU regions.)
• RevenueCat — subscription management across the Apple App Store.
• Vercel — web hosting and edge functions for poolcntrl.com.
• Fly.io — hosting for the API server.
• Sentry — error monitoring.
• PostHog — product analytics: in-app interaction events with your account ID and email. Pool names, addresses, photo URLs, and water readings are never sent as event properties.
• OpenAI — reads test-strip photos and diagnoses pool-problem photos, server-side only. Your device never talks to OpenAI directly.
• Mapbox — geocodes the property address/zip you enter and serves satellite imagery for pool tracing.
• OpenWeatherMap — receives the property’s approximate coordinates to provide forecasts and freeze alerts.

Each subprocessor receives only the minimum data required to perform its function. No subprocessor is authorized to use your data for any purpose other than serving you.

How long we keep your data

As long as your account exists. When you delete your account, we delete your account row, properties, pools, water tests, chemical logs, maintenance logs, and recommendations within 30 days. Anonymized aggregate metrics (e.g. “number of recommendations generated this month”) may persist for product analytics.

Your rights

You can:

• Export your data — every entity (pools, water tests, etc.) is available via the API; we’ll publish a one-click export endpoint before public launch.
• Delete your data — by deleting your account from within the app, by emailing the contact below, or from our account deletion page.
• Correct your data — the app lets you edit pools, tests, and logs directly.
• Object or restrict processing — email us; we’ll respond within 30 days.

Children

poolcntrl is not directed at children under 13 and we do not knowingly collect data from them. If you believe a child has signed up, contact us and we’ll delete the account.

Cookies and tracking

poolcntrl.com uses functional cookies for authentication and session management only. We do not use advertising cookies or third-party trackers. To understand how the site is used, we collect anonymous, first-party usage events (pages viewed, links clicked) with no cookies, no account linkage, and no IP address storage — a random per-visit identifier expires when you close the tab, and we honor your browser’s Do Not Track setting.

The home page, the pricing page and the free calculator at poolcntrl.com/calculator set one more first-party cookie, pc_sid. It holds a random identifier and nothing else, and decides which of two versions of those pages’ layout you see, so the same visitor sees the same version each time. It is not linked to an account, it is not sent with the usage events above (they record only which version was shown), and it expires after one year. Clearing your cookies removes it.

The signed-in pages at poolcntrl.com/app also show one of two versions of their layout. They pick it from your account’s id, in your browser: no cookie is set for it, and the id is not sent with the usage events, which record only which version was shown.

The website also sends some of those usage events to PostHog, which we use to see how the site is used. It runs in cookieless mode: it sets no cookie and stores nothing in your browser’s local storage. It receives the path of each page you view, the campaign tags on the link that brought you (src, ref and utm_ tags), and a short list of actions — asking the calculator for a plan, a plan that could not be made, copying a link to a plan, seeing or pressing a trial offer, and pressing an App Store or “Where to buy” link — with which version of the page was shown. It never receives your readings, your ZIP code or pc_sid. Our PostHog project is configured to discard IP addresses rather than store them, and we honor Do Not Track here too.

Security

Data is encrypted in transit (TLS 1.2+) and at rest (provider-managed). Database access is governed by row-level security: your rows are visible only to your authenticated session. Service-role access is restricted to our backend processes.

Changes

When we update this policy materially, we’ll bump the “Last updated” date and notify you by email if you have an account.

Contact

Questions, requests, complaints: email hello@poolcntrl.com.