Privacy policy

Salto is run by Rockloss (Tony Stenberg) in Sweden, who is responsible for the personal data in Salto. Questions about your data: [email protected]

Your club decides who joins its teams and what is written about its gymnasts. For questions about that, ask your club's coach or admin first.

• Your account. Your name, email address, phone number if you add one, language, and password, which is stored in a form that can't be read back. Used to sign you in, send you invitations and password resets, and let your club reach you.
• Gymnasts' logins. A gymnast without an email address can get a login from their coach, club admin or guardian: a username made from their name and a password Salto makes up, shown only once. It has no email address or phone number. When someone else gives a gymnast a login or a new password, or removes it, the gymnast's guardians get an email.
• Your photo. Coaches and club admins can add a photo of themselves, without its location and other hidden data. It shows beside their name to the people who can see them, so parents know who their children's coaches are. Athletes never have photos.
• Your clubs and teams. The clubs and teams you belong to, your role in them, and the gymnasts you follow as a guardian. Used to show you what your teams share.
• Gymnasts. Their names and the club and teams they belong to, so coaches can plan their training. Salto has no fields for birth dates, photos or health information.
• Training. The workouts and templates you create, the documents, pictures and videos coaches attach to them, the invitations you send, and the activity feed, such as who joined a team. Used to plan together and see what's new in your teams.
• Halls. Where your club trains: the address, the size and the equipment, and how to get in and who to contact about the hall, such as the booking office, which club admins add. Used to plan training for the hall.
• Feedback. The bug reports and ideas you send, the page you sent them from, and any pictures you add, with their location data removed. Used to fix and improve Salto.
• Change history. Who changed what in a club or the library, and the values before and after, so a mistake can be put right.
• Sign-ins. When each sign-in expires, to keep you signed in. Salto doesn't store your IP address or which device you use.

Coaches write their own descriptions and notes on workouts. Please keep sensitive information, such as a gymnast's injuries or health, out of them.

The legal basis is that the data is needed for the service you and your club use (GDPR article 6.1 b) and, for the gymnasts' data and for keeping Salto secure, the club's and our legitimate interest (article 6.1 f).

• Coaches and parents in a team see the team's gymnasts, members and workouts.
• Gymnasts with a login see their team's workouts and the names of its coaches and gymnasts.
• Only coaches and club admins see the activity feed.
• A club's coaches and admins see the contact details of the people in the club, and the parents in its teams see the coaches' and admins' contact details.
• Guardians see the gymnasts they follow.
• A gymnast's coaches, club admins and guardians see the gymnast's username and can give them a new password.
• Everyone in a club sees its halls, but only its coaches and admins see how to get in and who to contact about them.
• Only those who run Salto see the change history.
• Feedback you send is read by those who build Salto.
• Nobody who runs Salto looks at your data, except to fix a problem, keep Salto secure, or when the law requires it.

Salto keeps its data on servers in Sweden. It chooses Swedish services first, then services in the EU, and others only where there is no good alternative. These companies handle data for Salto, only to provide their part of it:

• HostUp, Sweden. Runs Salto's servers and stores the database, the files, the backups and the pictures sent with feedback.
• Mediaflow, Sweden. Plays Svensk Gymnastik's exercise films. Your browser fetches a film from Mediaflow when a page shows one, so Mediaflow sees your IP address.
• Cloudflare, USA. Protects the website and passes traffic to it, so it sees your IP address and requests on the way.
• Resend, USA. Sends the invitation and password reset emails, so it receives the recipient's address and the email.
• OpenRouter, USA. Only for the AI assistant and the feedback check, see AI below.
• GitHub, USA. Feedback you send becomes an issue in Salto's private repository there: the title, the description, the page, your user number and roles, never your name or email address. It stays there.
• YouTube and Instagram, USA. Show some exercise videos. YouTube videos play in YouTube's privacy-enhanced mode, so YouTube stores nothing about you unless you play one. Instagram may set its own cookies on pages that show one of its videos.

When a company handles data outside the EU, the transfer is protected by the safeguards the GDPR requires, such as the EU's standard contractual clauses.

Salto uses AI in two places, through OpenRouter in the USA. The AI assistant helps plan workouts, and only some users can open it while it is being tested: what you write to it, and the teams (with the size and equipment of their halls), workouts, exercises and templates it looks up for you, are sent to an AI model.

Feedback you send is also read by an AI model before it is sent on, to catch spam and attempts to trick an AI. It gets the title and the description, not the pictures.

Before anything is sent, Salto replaces the names of the people in Salto, email addresses, phone numbers and personal identity numbers. The AI models come only from companies that neither keep what they get nor train on it. Salto doesn't save the chats, and nothing in Salto is used to train AI models.

The aim is to move to Berget AI, a Swedish service.

Salto sets one cookie, which keeps you signed in and remembers your language. Your browser also remembers whether you chose light or dark mode. Neither is used for tracking.

• Your account stays until you delete it. Deleting it removes your name, contact details, password, photo, memberships and guardian links, and the activity entries and invitations that name you.
• A photo is deleted when you remove it in Settings, and within a day once you are no longer a coach or club admin.
• Workouts you created stay with your team, without your name. Gymnast profiles belong to the club and stay until a club admin deletes them, which also removes the activity entries that name the gymnast.
• A deleted workout can be restored by the team's coaches for 30 days. Then it is deleted for good, with its documents and pictures.
• Activity feed entries are deleted after a year.
• The change history is deleted after 90 days.
• Pictures sent with feedback are deleted once the report is dealt with, and after 180 days at most. The report leaves Salto 90 days after it is dealt with; the issue on GitHub stays.
• Invitation links stop working after 7 days, and a sign-in lasts 60 days.
• To stop password guessing, failed sign-ins are counted for an hour by a scrambled form of the account and the IP address, in memory only.
• Server logs, which contain no names, email addresses or IP addresses, are deleted after 30 days.
• Backups are encrypted and kept for 90 days, so deleted data is gone from them within 90 days.

• Change your name, phone number and email address yourself in Settings.
• Delete your account yourself.
• Ask for a copy of the data about you, or for it to be corrected, deleted or used less: [email protected]. You get an answer within a month.
• Guardians can ask on behalf of their children.
• If you think Salto handles personal data wrongly, you can complain to the Swedish Authority for Privacy Protection (IMY) at imy.se.

When Salto changes how it handles personal data, this page and the date at the top are updated.