Privacy Policy

1. Introduction

Swull is a strength training app operated by Swull Strength LLC, an Arizona limited liability company ("Swull," "we," "us"). Swull Strength LLC is responsible for the personal information described in this policy. If you live in a state with a consumer health data law, such as Washington or Nevada, our Consumer Health Data Privacy Policy also applies. We are committed to protecting your personal information and being transparent about how we collect and use it. This policy explains what data we collect, why we collect it, and how we handle it. We collect only the information needed to create your account, generate workouts, track training progress, protect the service, and operate the app.

2. Information We Collect

Account Information

Your email address and display name, used to create and secure your account. Authentication is handled through Firebase Authentication.

Profile & Training Setup

Information you provide when setting up your training profile, such as birthday, age, sex, height, bodyweight, goal weight (for the lean goal), experience level, goals, training days, gym type, available equipment (including details such as your bench's positions), and estimated one-rep maxes.

Workout Data

Prescribed workouts, completed sessions, sets, reps, weights, duration, heart rate fields when available, and progression state. This data is stored in Cloud Firestore and used to power your training experience.

Running, Races & Cardio

If you log cardio or set up a race, we store what you enter and what the app plans for you: cardio sessions (type, duration, distance, and average heart rate when available), the race type, date, goal, and target time, your race plan and paces, race-day checklist progress, fueling amounts you record, your race result, and an optional post-race check-in about how your legs feel.

Bodyweight & Preferences

Bodyweight entries you log over time (used to track trends for the lean goal), and exercise preferences you set, such as marking a movement to do less often or avoid. Swull does not ask you to provide diagnoses, medical records, medications, injuries, illnesses, or other clinical medical information. The app does process fitness and training information, such as body weight, exercise performance, heart rate when available, and the optional post-race soreness check-in. Some of this information may be considered health data or sensitive personal information under applicable law, and we handle it accordingly: we use it only to provide and personalize Swull, and we never use it for advertising.

Estimates the App Makes About You

Swull's software uses your information to estimate things such as your one-rep maxes, training level, run paces, fatigue, and recovery after a race. These estimates are used only to generate and adjust your training, and they are stored with your account like the rest of your training data. Swull does not use them to make decisions with legal or similarly significant effects, such as decisions about credit, employment, housing, or insurance.

Terms & Policy Acceptance

When you accept (or decline) our Terms of Use and this Privacy Policy, we record which version you responded to, the time, and your browser's user-agent string (which describes your browser and device type), so we know your current agreement status and have an accurate record of it. These records are kept while your account exists and are deleted along with your account (see Data Retention).

Uploaded Files

Files you choose to upload, such as Garmin .fit workout files. We parse these files to import workout data into your account history.

Information Stored on Your Device

To work offline and remember your settings, Swull stores some information in your browser on your device: your sign-in session (kept by Firebase Authentication so you stay signed in), a workout or guided run in progress, workouts you log while offline (until they sync to your account), your latest workout recommendations, display preferences such as the theme, small reminders such as whether you dismissed an install prompt, and copies of the app's own files. This information stays on your device and is not used for advertising. Swull does not use advertising or cross-site tracking cookies. Signing out does not remove every item; you can clear it through your browser's site-data settings.

Location

Swull does not collect your device's precise location or GPS data, including during guided runs. Like most online services, our infrastructure providers receive your IP address when you use the app, which can indicate an approximate location; see Technical & Security Signals below.

Technical & Security Signals

Request metadata (such as IP address, browser type, and request times) and abuse-prevention tokens collected through Firebase, Google Cloud, and Firebase App Check with reCAPTCHA Enterprise, used to detect abuse and keep the service reliable. Swull's pages also load their fonts from Google Fonts, so your browser sends Google a standard web request (including your IP address) when it loads them. reCAPTCHA Enterprise is subject to Google's Privacy Policy and Terms of Service.

3. How We Use Your Information

• To create and secure your account.
• To generate workouts, running and race plans, and fueling suggestions; track progress; calculate volume and fatigue indicators; and update training recommendations.
• To import and deduplicate uploaded Garmin .fit workouts.
• To detect abuse, reduce automated traffic, debug issues, and maintain service reliability.
• To send service-related communications, such as email verification, password resets, account-deletion confirmations, and notices of changes to our Terms of Use or this Privacy Policy.
• To comply with legal, security, and operational obligations.

We do not sell personal information or consumer health data, and we do not share personal information or consumer health data for cross-context behavioral advertising or targeted advertising. Swull does not show ads.

Because Swull does not track you across other websites, sell personal information, or share it for advertising, all users already receive the protection that browser signals such as Do Not Track and Global Privacy Control request. For that reason, we do not need to respond to those signals differently.

4. Garmin Data

If you upload a Garmin .fit file, Swull reads the file to extract workout details such as date, exercises, sets, reps, weights, duration, and heart rate fields when present. Imported workouts are stored in your account history so the app can show your progress and avoid duplicate imports. Garmin data is not sold or shared for advertising and is not shared with Garmin. It is processed by our infrastructure providers solely to operate the app.

5. Data Sharing & Third-Party Services

Google Firebase (Primary Infrastructure)

Our primary infrastructure is Google Firebase. This includes Firebase Authentication, Cloud Firestore, Cloud Functions, Firebase Hosting, and Firebase App Check with reCAPTCHA Enterprise. These providers process data solely to operate, secure, and deliver the service. Your data is subject to Google's Privacy Policy and Firebase's data processing terms.

Resend (Account and Policy Emails, and Support Requests)

We use Resend to send an account-deletion confirmation to your account email address after cleanup is verified, and to email you notices of changes to our Terms of Use or this Privacy Policy. When you submit an in-app support request, we also use Resend to send its subject, message, ticket reference, and verified account email to Swull's support inbox. We do not automatically attach your profile or workout history. Email delivery records are subject to Resend's operational retention policies.

Support messages and reply addresses are held temporarily in a private delivery queue and removed from that queue after email acceptance, cancellation, or the retry deadline. Limited ticket metadata is retained for up to 30 days afterward, then removed by a scheduled cleanup. Copies delivered to our support inbox and subsequent correspondence may be retained as needed to resolve your request. Queued requests are checked for account deletion before sending. Deletion cannot retract email already sent or necessarily stop a send already in progress. Support drafts stay in page memory and are cleared when you switch accounts or reload the page.

Other Service Providers

We may use additional trusted vendors to help operate the app. These providers are not permitted to use your data for their own purposes.

Legal Requirements

We may disclose your information if required by law, court order, or to protect the rights and safety of our users or the public.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.

6. International Data Transfers

Swull is currently intended for users located in the United States. Our infrastructure runs on Google Firebase, with servers primarily located in the United States. If you access Swull from outside the US, your data will be transferred to and processed in the US, which may have different data protection laws than your country of residence.

7. Data Retention

We keep each category of information only for as long as reasonably necessary for the purposes described in this policy, and no longer than your account exists except as described below.

For deletion confirmations, we temporarily keep the recipient email address in a restricted delivery job outside the account's data tree. We remove that job after the email provider accepts the message. Unsent jobs expire within 30 days of the request; automatic sending retries stop within 23 hours of the first attempt. Email delivery failures do not delay deletion of your account or workout history.

We retain your account, profile, and workout history while your account is active or as needed to operate the app. If you delete your account, we will delete your personal data, including your terms and policy acceptance records, within 30 days, except where retention is required by law or where limited records remain in security logs, backups, or provider operational systems for a limited period.

8. Your Choices

• You can update your profile information in the app settings.
• You can delete individual workout history entries within the app.
• You can delete your account and personal data using the in-app Delete account option in Profile settings.
• Depending on where you live, you may also have rights to access, correct, delete, or obtain a copy of certain personal information, or to withdraw consent to certain processing. We offer these to all users. To make a privacy request, email support@swullstrength.com from the email address on your account.

We may need to confirm that a request comes from the account owner before completing it, for example by asking you to write from the email address on your account. You may also have an authorized agent make a request on your behalf; we may ask for your written, signed permission and confirm your identity directly. We will not treat you differently for exercising your privacy rights. If we decline a request, we will explain why, and you may appeal by emailing support@swullstrength.com with "Appeal" in the subject line. We will respond to an appeal in writing, and if you are not satisfied with the result, you may contact your state attorney general.

9. Security

We use Firebase Authentication, Firestore Security Rules, Cloud Functions, and Firebase App Check to help protect your account data and reduce unauthorized or automated use. We take reasonable technical and organizational measures to complement these protections. No system can be guaranteed completely secure.

10. Health & Training Information

Swull is for fitness tracking and workout guidance. It is not a medical service and does not provide medical advice. Consult a qualified professional before making decisions related to injury, illness, or medical conditions.

11. Age Requirement

Swull is intended only for adults aged 18 and older. We ask for your birthday during onboarding and do not allow anyone under 18 to complete setup. If you believe someone under 18 has provided us with their data, please use the in-app Delete account option or contact us at support@swullstrength.com so the data can be deleted.

12. Changes to This Policy

We may update this policy as the app changes. When we make material changes, we will email the address on your account at least 14 days before the changes take effect, update the effective date at the top of this page, and may also ask you to review and accept the new version in the app. Continuing to use Swull after an update takes effect means the updated policy applies.

13. Contact

If you have questions about this policy or how your data is handled, contact us by email at support@swullstrength.com.