Privacy Policy

Last updated: January 11, 2025

1. Introduction

Swolog ("we," "us," or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our workout tracking application and website (collectively, the "Service").

By using the Service, you consent to the practices described in this Privacy Policy. If you do not agree with our practices, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

We collect information you directly provide when using the Service:

  • Account Information: Email address used for authentication and account recovery
  • Workout Data: Exercises performed, sets, reps, weights, and other training information you log
  • Program Data: Mesocycle templates, workout templates, and custom exercises you create
  • Preferences: Settings and customizations such as weight units and muscle targeting overrides
  • Payment Information: When you subscribe, payment is processed by Stripe. We do not store your full credit card number.
  • Communications: Information you provide when contacting us for support

2.2 Information Collected Automatically

When you use the Service, we may automatically collect:

  • Device Information: Device type, operating system, and browser type
  • Usage Data: Features used, pages visited, and interactions with the Service
  • Log Data: IP address, access times, and referring URLs
  • Local Storage: Data stored on your device for offline functionality

2.3 Information from Third Parties

We may receive information from third-party services:

  • Supabase: Authentication and database services
  • Stripe: Payment processing and subscription management

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service
  • Process your subscription and payments
  • Sync your workout data across devices
  • Send transactional emails (account verification, receipts)
  • Respond to your inquiries and provide customer support
  • Analyze usage patterns to improve the user experience
  • Detect and prevent fraud or abuse
  • Comply with legal obligations

4. How We Share Your Information

We do not sell your personal information. We may share your information only in the following circumstances:

4.1 Service Providers

We share information with third-party service providers who help us operate the Service:

  • Supabase: Database hosting and authentication (based in the United States)
  • Stripe: Payment processing (see Stripe's Privacy Policy)
  • Vercel: Website hosting (based in the United States)

4.2 Legal Requirements

We may disclose your information if required by law or in response to valid legal requests, such as subpoenas or court orders.

4.3 Business Transfers

If Swolog is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you of any change in ownership or use of your personal information.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. Specifically:

  • Account Data: Retained until you delete your account
  • Workout Data: Retained until you delete your account or specific data
  • Payment Records: Retained for 7 years for tax and legal compliance
  • Support Communications: Retained for 2 years

After account deletion, we will delete or anonymize your data within 30 days, except where retention is required by law.

6. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

  • Encryption of data in transit (TLS/SSL)
  • Encryption of data at rest
  • Secure authentication via magic links (passwordless)
  • Regular security assessments
  • Access controls limiting employee access to data

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

7. Your Rights and Choices

7.1 Access and Portability

You can access your workout data at any time through the Service. You may request a copy of your data in a portable format by contacting us.

7.2 Correction

You can update your workout data and preferences directly in the app. For other corrections, contact us.

7.3 Deletion

You can request deletion of your account and associated data by contacting us at hello@swolog.com. We will process your request within 30 days.

7.4 Marketing Communications

We do not send marketing emails. All emails from us are transactional (account verification, receipts, important service updates).

8. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to Know: You can request information about the categories and specific pieces of personal information we have collected
  • Right to Delete: You can request deletion of your personal information
  • Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights
  • Right to Opt-Out of Sale: We do not sell personal information

To exercise these rights, contact us at hello@swolog.com.

9. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA) or United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR):

  • Legal Basis: We process your data based on your consent (for account creation) and contract performance (to provide the Service)
  • Right to Access: Request a copy of your personal data
  • Right to Rectification: Request correction of inaccurate data
  • Right to Erasure: Request deletion of your data
  • Right to Restrict Processing: Request limitation of how we use your data
  • Right to Data Portability: Receive your data in a portable format
  • Right to Object: Object to certain processing of your data
  • Right to Withdraw Consent: Withdraw consent at any time

To exercise these rights, contact us at hello@swolog.com. You also have the right to lodge a complaint with your local data protection authority.

10. International Data Transfers

Your information may be transferred to and processed in the United States, where our service providers are located. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable law.

11. Children's Privacy

The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately and we will delete the information.

12. Cookies and Local Storage

We use the following technologies to operate the Service:

  • Essential Cookies: Required for authentication and security
  • Local Storage: Used to store workout data for offline functionality
  • IndexedDB: Used to store your workout database locally for offline access

We do not use advertising or tracking cookies.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For significant changes, we will notify you via email. Your continued use of the Service after changes constitutes acceptance of the updated Privacy Policy.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Email: hello@swolog.com

Location: Montana, United States