Privacy policy
Last updated September 27, 2026
The short version. Your schedule, pay, logbook, credentials and documents are stored on your phone, not on our servers. Your account holds your sign-in details. If you use Together, the schedule you choose to share is end-to-end encrypted — we can't read it. We don't show ads, track your location, or sell your data.
What stays on your phone
Everything you enter in Swingday is stored in a database on your device: your rotation and schedule changes, shifts, trips and travel routes, pay setup, bills, goals and balances, your Home List, private logbook, credentials, and any documents you add. It is not uploaded to Swingday's servers. Reminders are scheduled on your phone.
Your account
You sign in with an email address and password, or with Google or Facebook. We store your email address, your name if your sign-in provider shares it, which sign-in method you used, and the technical records needed to keep you signed in. If you sign in with Google or Facebook, we receive only your basic profile (name and email) — never your password or contacts.
Accounts are hosted by our service provider, Supabase, which processes this data on our behalf.
Together
If you connect with someone in Together, your phone shares only what you choose: your Work/Home schedule, and optionally your travel and shift times. It never shares Money, your logbook, credentials or documents.
What you share is encrypted on your phone before it's uploaded. The key is part of the invite you send and stays on your two phones, so our servers store only data they cannot read. When either of you disconnects, the other person's schedule is deleted from your phone and your shared data is removed from our servers.
What we don't do
- No advertising, and no selling or renting of your data.
- No GPS or location tracking.
- No third-party analytics or tracking SDKs.
Deleting your data
- Your account: in the app, go to More → Account → Delete account. This permanently deletes your account and any Together connection from our servers.
- Data on your phone: More → Privacy → Delete everything, or uninstall the app.
- You can also export your data from More → Privacy at any time.
Security
Connections to our servers use HTTPS. Together data is encrypted with AES-256 before it leaves your phone. You can add an app lock (Face ID, fingerprint or passcode) in More → Privacy.
Children
Swingday is intended for adults and is not directed at children under 16.
Changes
If we change this policy, we'll update the date above and, for significant changes, tell you in the app.
Contact
Questions about privacy: see Support.