Privacy

Pool Tracking is self-hosted: your data lives in this server's database and data volume. A few features send some of it to third parties, listed below so you know what leaves this server.

What this server stores

• Your email address (for passwordless login).
• Your pools, readings, notes, and any pool or test-strip photos you upload. Photos and pool details are stored unencrypted in the data volume.
• Each pool's location (place name and latitude/longitude) if you set one. This effectively identifies where your pool — usually your home — is.
• Device-account credentials (Aiper / Blueriiot), encrypted at rest and used only to fetch your own readings.

What is sent to third parties

• Anthropic (Claude) — when advice is generated, your pool details, recent readings, weather, and notes are sent for analysis. When you read a test strip from a photo, the photo is uploaded to Anthropic to interpret it. Avoid capturing people or identifying surroundings in strip photos.
• Open-Meteo — to show weather alongside readings and to find your local timezone, your pool's coordinates (and the place name when geocoding) are sent to Open-Meteo. No account or API key is used.
• Email delivery (resend) — login links are delivered by your configured provider, which receives your email address and the link.
• Device clouds — connecting a device logs in to that vendor's cloud (and, for Aiper, AWS IoT) using your account, to read your measurements.
• MQTT broker (192.168.2.30) — this instance is configured to publish every pool's readings (pool name, timestamps, and measurements — no location or notes) to the broker above on a schedule.

Exports

The JSON export and the 4-hour snapshot include your pool details, readings, and location coordinates and notes. If you paste an export into another tool or an LLM, you are sharing that information with it. Images are never included in exports.

Your control

• Delete individual readings, a photo (on the pool's edit page), or a whole pool at any time; deleting a pool removes its readings and advice.
• Disconnect a device to remove its stored credentials.
• Leave a pool's location blank to keep coordinates off this server and out of Open-Meteo calls (you lose weather correlation and local time).