Privacy Policy

1. Introduction

Swull is a strength training app. We are committed to protecting your personal information and being transparent about how we collect and use it. This policy explains what data we collect, why we collect it, and how we handle it. We collect only the information needed to create your account, generate workouts, track training progress, protect the service, and operate the app.

2. Information We Collect

Account Information

Your email address and display name, used to create and secure your account. Authentication is handled through Firebase Authentication.

Profile & Training Setup

Information you provide when setting up your training profile, such as birthday, age, experience level, goals, bodyweight, gym type, available equipment, and estimated one-rep maxes.

Workout Data

Prescribed workouts, completed sessions, sets, reps, weights, duration, heart rate fields when available, and progression state. This data is stored in Cloud Firestore and used to power your training experience.

Uploaded Files

Files you choose to upload, such as Garmin .fit workout files. We parse these files to import workout data into your account history.

Technical & Security Signals

Request metadata and abuse-prevention tokens collected through Firebase, Google Cloud, and Firebase App Check with reCAPTCHA Enterprise, used to detect abuse and keep the service reliable.

3. How We Use Your Information

• To create and secure your account.
• To generate workouts, track progress, calculate volume and fatigue indicators, and update training recommendations.
• To import and deduplicate uploaded Garmin .fit workouts.
• To detect abuse, reduce automated traffic, debug issues, and maintain service reliability.
• To send service-related communications, such as Firebase Authentication password resets.
• To comply with legal, security, and operational obligations.

We do not sell your personal data to third parties.

4. Garmin Data

If you upload a Garmin .fit file, Swull reads the file to extract workout details such as date, exercises, sets, reps, weights, duration, and heart rate fields when present. Imported workouts are stored in your account history so the app can show your progress and avoid duplicate imports. Garmin data is not sold or shared for advertising and is not shared with Garmin. It is processed by our infrastructure providers solely to operate the app.

5. Data Sharing & Third-Party Services

Google Firebase (Primary Infrastructure)

All user data is stored and processed on Google Firebase. This includes Firebase Authentication, Cloud Firestore, Cloud Functions, Firebase Hosting, and Firebase App Check with reCAPTCHA Enterprise. These providers process data solely to operate, secure, and deliver the service. Your data is subject to Google's Privacy Policy and Firebase's data processing terms.

Other Service Providers

We may use additional trusted vendors to help operate the app. These providers are not permitted to use your data for their own purposes.

Legal Requirements

We may disclose your information if required by law, court order, or to protect the rights and safety of our users or the public.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.

6. International Data Transfers

Our infrastructure runs on Google Firebase, with servers primarily located in the United States. If you access Swull from outside the US, your data will be transferred to and processed in the US, which may have different data protection laws than your country of residence.

7. Data Retention

We retain your account, profile, and workout history while your account is active or as needed to operate the app. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law or where limited records remain in security logs, backups, or provider operational systems for a limited period.

8. Your Choices

• You can update your profile information in the app settings.
• You can delete individual workout history entries within the app.
• You can delete your account and personal data using the in-app Delete account option in Profile settings.

9. Security

We use Firebase Authentication, Firestore Security Rules, Cloud Functions, and Firebase App Check to help protect your account data and reduce unauthorized or automated use. We take reasonable technical and organizational measures to complement these protections. No system can be guaranteed completely secure.

10. Health & Training Information

Swull is for fitness tracking and workout guidance. It is not a medical service and does not provide medical advice. Consult a qualified professional before making decisions related to injury, illness, or medical conditions.

11. Children's Privacy

Swull is not intended for users under the age of 13. We ask for birthday during onboarding and do not allow users under 13 to complete setup. If you believe a child has provided us with their data, please use the in-app Delete account option or contact the app operator so the data can be deleted.

12. Changes to This Policy

We may update this policy as the app changes. The effective date at the top of this page will reflect the latest version.