Privacy

Which data we process, and why

This text is written to be understood, not to satisfy a lawyer. We did not shorten it: every item below is something the app actually does.

Last updated: 31 August 2026

Data controller

Swiip. Contact: info@swiip.app. Any privacy question or request can be sent to this address.

Data we process

Account

Your email address and a hash of your password (never the password itself). Used to create your account, verify your sign-in and let you reset your password.

Assessment answers

Your answers to the assessment questions. Your program and nutrition targets are calculated from them. Some of these answers — injury, illness, medication, pregnancy, eating disorder history — are special category personal data under GDPR and the Turkish KVKK. We process them only to write you a safe program, and we ask for separate explicit consent at sign-up. Without that consent the app opens, but no program is produced.

Measurements and weight

Height, weight and, if you enter them, circumference measurements. Used for calorie and macro calculation and progress tracking. Circumference measurements need their own consent; without it the body fat estimate is shown as a wider range and the app still works.

Body photo

Your photo is not stored on our servers. It travels over an encrypted channel to the analysis service, measurements are extracted, and the photo is dropped from memory within the same request. It is never written to our disk; there is no photo column in the database. The only things kept are numeric outputs: body fat range, muscle distribution scores, posture flags. Your photo stays on your phone and never leaves it — change phones and it is gone.

Food logs

The foods you add, their amounts and the calculated macros. Used for the daily summary and the TDEE correction.

Coach chat

What you write to the coach and the answers you receive. Stored so the conversation keeps its context. Because these messages can contain health information, they are protected like special category data and masked in server logs.

Analytics

Aggregate counts only, such as how many people stop at which assessment question. Measurements that return no personal data and are not tied to an identity. There is no ad network, tracking pixel or third-party analytics SDK.

What goes to the AI

AI runs in four places: interpreting the assessment, analysing the body photo, recognising food and the coach chat. It decides nothing in any of them — volume, calories, macros and progression are computed with deterministic formulas.

The data sent to the service provider for program generation does not include your injury, illness or medication details; only a summary of the decision trail is sent. For food recognition, only the photo and the question "what dish is this" are sent; nutritional values always come from our own database.

How long we keep it

• While your account is open: account, answers, program, measurements, food logs.
• Body photo: not stored. In memory during analysis, then gone.
• If you delete your account: everything is deleted. It remains in backups for at most 30 days, then drops out of those too.

Deleting your account

From inside the app: Settings → Delete my account. Once you type the confirmation, your account and every related record are deleted at the same time; this cannot be undone. For details, and for what to do if you cannot reach the app, see the account deletion page.

How to exercise your rights

You have the right to access, correct and delete your data and to object to its processing (GDPR articles 15–21; KVKK article 11). From inside the app, Settings → Export my data gives you everything we store in a machine-readable form. For other requests write to info@swiip.app — we respond within 30 days at the latest.

You can withdraw the consents you gave. If you withdraw health data consent, program generation stops; if you withdraw circumference measurement consent, the analysis runs with a wider range.

Who we share it with

We do not sell data and we do not share it for advertising. There are only the providers needed to run the service: the server that hosts the app, email delivery, the AI service provider, and the payment infrastructure of the store you bought through (App Store or Google Play). Each one sees only the data it needs to do its own job.

International transfers

The AI service provider may be outside your country. We ask for separate explicit consent for this transfer at sign-up, and the transferred data, as written above, does not contain health details.

Children

The app is for ages 18 and over. If you state in the assessment that you are under 18, no program is produced.

If this text changes

We publish changes on this page, and for a significant change we tell you from inside the app. We do not change it quietly.

Swiip is not a medical device and does not diagnose. The numbers it gives are estimates; if you have a health concern, talk to your doctor.