DRAFT, not legal advice, review before launch

Privacy Policy

Draft of November 13, 2026

This policy explains what the Swold iPhone app and this website collect, why, who else touches it, and how to delete it. Swold is run by PLACEHOLDER company legal name, PLACEHOLDER address ("we" or "us").

Short version: most of what you log stays on your phone. We don't sell your data, we don't show ads, and we never scan or score faces.

1. What stays on your phone

These are saved on your iPhone and are not sent to our servers:

• Your food log, lift log, weigh-ins, daily tasks, and streaks.
• Progress photos. They're kept in the app's own private folder. They're never uploaded, never added to a shared album, and never scored.

2. What we collect when you make an account

You can sign in with Apple, Google, an email code, or a phone code. Supabase runs sign in and stores account data for us. When you make an account we keep:

• How you signed in, plus the email address or phone number you used, or the account ID Apple or Google gives us. If you use Sign in with Apple and hide your email, we only get Apple's relay address.
• Your name, if you give one.
• Your saved plan: your answers to the setup questions (things like age, sex, height, current and goal weight, training experience, training days, and goal) and the calorie and protein targets made from them. We keep this so your plan comes back when you sign in on a new phone.

You can use parts of Swold without an account. Then your plan stays on your phone only.

3. Food estimates

When you ask Swold to estimate a meal, the text you typed or the food photo you took is sent to our server, which passes it to Anthropic, an AI provider, to get a calorie and protein estimate back. Photos are shrunk first. We don't keep the text or photo on our server after the estimate comes back. Anthropic handles it under its own commercial terms. Only send food photos, not photos of people.

4. Subscriptions

Purchases go through Apple. We never see your card or payment details. We use RevenueCat to check whether your subscription is active. RevenueCat gets your purchase history from Apple and an app user ID, and it doesn't get your name or photos.

5. Analytics

We use PostHog to see how the app is used, mostly where people get stuck during setup. We built it to send as little as possible:

• It records things like which screen you saw and which button you tapped.
• It never sends food text, photos, your name, email, phone number, or sign in IDs.
• Body weight is only sent as a 10 lb range, like "150-159". Streaks are only sent as rough bands.
• If you make an account, analytics uses a scrambled ID that doesn't name you.
• No session recordings and no location lookups.

"Delete all local data" in Settings also resets your analytics ID.

6. Who we share data with

Only the service providers above, each for the job described: Supabase (accounts and saved plans), Anthropic (food estimates), RevenueCat (subscription status), PostHog (analytics), and Apple (purchases). We don't sell or rent your data, and we don't share it for advertising. We may share data if the law requires it, or to protect people's safety or our rights.

7. Website

This website has no analytics, ads, or tracking cookies. Our host, Cloudflare, may keep standard server logs, like IP addresses, to run and protect the site.

8. Deleting your data

• Delete account: in the app go to Settings, then Delete account. That deletes your account and your saved plan from our servers and clears the app's data on your phone.
• Delete all local data: in Settings, this clears everything Swold saved on your phone, including progress photos.
• Deleting the app also removes what it saved on your phone.
• Deleting your account doesn't cancel an Apple subscription. Cancel that in your iPhone Settings.

If you can't get into the app, email [email protected] from the address on your account and we'll delete it for you.

9. How long we keep data

We keep account data and your saved plan until you delete your account. Service providers may keep backups or logs for a limited time under their own policies.

10. Security

Data sent to our servers is encrypted in transit. Account data is locked so each account can only read its own records. No system is perfectly secure, so keep your phone and sign in accounts locked down too.

11. Kids

Swold isn't meant for children under 13, and we don't knowingly collect data from them. If you think a child has made an account, email us and we'll delete it.

12. Your rights

Depending on where you live (for example the EU, UK, or California), you may have the right to see, correct, export, or delete your data, or to object to how we use it. Email [email protected] and we'll help. You can also complain to your local data protection authority. Our servers and providers may be in the United States, so your data may be handled there.

13. Changes

If we change this policy in a way that matters, we'll update the date at the top and let you know in the app before the change applies.

14. Contact

Privacy questions or requests: [email protected].