Consumer Health Data Privacy Policy

Last updated: November 14, 2026

This policy is for people in Washington and Nevada, as required by Washington's My Health My Data Act and Nevada's consumer health data law. Swold is run by Henry Byrne, an individual developer ("we" or "us"). Contact: [email protected]. Our full Privacy Policy is at swold.app/privacy.

What counts as consumer health data in Swold

Personal information linked to you that shows your past, present, or future physical health. In Swold that means:

• Your saved plan, if you make an account: age, sex, height, current and goal weight, training experience and days, and the calorie and protein targets made from them.
• What you send to the AI features after you tap Allow: your chat messages, meal photos and notes, and a little context so answers fit you (your age, your goal, targets, bulk style, meals per day, foods you like, recent weight trend, and whether you train legs).
• Inferences from that information, like a calorie target.

It does not include your food log, lift log, weigh-ins, measurements, streaks, AI chat history, or progress photos. Swold keeps those on your phone and doesn't upload them to us. If that ever changes, we'll update this policy first.

How we collect and use it

We collect consumer health data only with your consent for the purpose stated at the time, or as needed to give you the service you asked for: to make and store your plan, to restore it on a new phone, to write an AI reply or meal estimate you asked for, and to keep Swold secure. We don't use it for advertising and we don't sell it.

Who gets it, and your consent to share

We share consumer health data only with your separate consent, as needed to give you the service you asked for, or as the law requires. The AI features show a consent screen before anything is sent. Nothing goes to Anthropic, our AI provider, until you tap Allow. You can withdraw that consent any time in Settings, then AI features. Other providers that handle it for us:

• Supabase stores your account and saved plan.
• Anthropic writes AI replies and meal estimates, only after you allow it.

RevenueCat, Apple, Google, and Sentry don't get your plan or your AI messages. The analytics code is in the app but switched off at launch, so it receives nothing. Our Privacy Policy covers them.

Selling

We don't sell consumer health data. We won't sell it without the signed authorization those laws require, and we won't refuse you service because you decline to give one.

Your rights

You can ask us to confirm whether we collect, share, or sell your consumer health data, give you a copy and a list of the providers that got it, correct it, withdraw consent, and delete it, including from archived or backup systems (backups can take longer, up to what the law allows). Email [email protected]. You shouldn't have to make a new account just to ask. We'll check that the request is from you and respond within 45 days, or tell you if a permitted extension applies. If we say no, we'll tell you how to appeal, and we'll decide an appeal within 45 days. You can also complain to the Attorney General of Washington or Nevada.

Security and geofencing

We limit access to consumer health data to the people and providers who need it for the purposes above, and we use reasonable safeguards. Providers must handle it only on our instructions. We don't use a geofence around a health care facility to track you, collect data from you, or send you messages, which those laws prohibit.