LEGAL

Privacy Policy

Last updated
[2026-07-10]

This Privacy Policy explains how personal information is collected, used, disclosed, and protected when you use the Swea mobile application (“Swea”, the “App”, or the “Service”), operated under the Swea brand by Miharu Okajima (the “Service Provider”, “we”, “us”, or “our”).

The App is currently available on the Apple App Store for iPhone, iPad, and other compatible Apple devices. By downloading or using the App, you acknowledge that you have read and understood this Privacy Policy.

If you do not agree with any part of this Privacy Policy, please do not download or use the App.

1. Who We Are

The Swea brand is operated by Miharu Okajima, based in Japan. Miharu Okajima is the registered developer on the Apple App Store and the entity responsible for the operation of the Service.

You can contact us at any time at:

2. Age Requirement

The App is intended for users aged 12 and older. We do not knowingly collect personal information from children under the age of 12. If you are under 12, please do not use the App.

If you are between the ages of 12 and the age of majority in your jurisdiction, you should review this Privacy Policy together with a parent or legal guardian and use the App only with their permission.

If we become aware that we have collected personal information from a child under the age of 12 without verifiable parental consent, we will take reasonable steps to delete that information promptly. If you believe a child under 12 has provided us with personal information, please contact us at support@sweafitness.com.

For users located in the European Economic Area, the United Kingdom, or other jurisdictions where a higher digital consent age applies (typically 13 to 16 depending on the country), we rely on parental consent as required by applicable law.

3. Information We Collect

We collect the following categories of information.

3.1 Account Information

When you create an account, we collect:

  • Email address
  • A unique user identifier (Firebase User ID)
  • Optionally, your display name
  • The sign-in method you use (email and password, Sign in with Apple, or Google Sign-In)

You may create an account using your email address, Sign in with Apple, or Google Sign-In. If you choose Sign in with Apple or Google Sign-In, the respective provider authenticates you and shares a limited set of information with us, such as an email address (which may be a private relay address in the case of Sign in with Apple) and a unique identifier. We do not receive your password for these providers.

If you use Guest Mode without creating an account, we do not collect account information, but certain locally stored data and diagnostic data described below may still be processed.

3.2 Fitness and Profile Information

To provide workout tracking functionality, we collect and store:

  • Date of birth (optional)
  • Fitness goals and weekly workout frequency you provide during onboarding
  • Workout history, including exercises, sets, repetitions, weights, durations, distances, and dates
  • Custom exercises and workout routines you create
  • Notes and comments you attach to workouts
  • Images you take or select to represent your workouts and custom exercises (see Section 3.10)
  • Preferred units of measurement (for example, pounds or kilograms, miles or kilometers)

3.3 Subscription and Purchase Information

When you purchase a subscription or lifetime plan, we and our subscription provider RevenueCat receive:

  • Subscription plan type (Monthly, Annual, or Lifetime)
  • Purchase date, expiration date, and renewal status
  • Anonymized transaction identifiers from Apple

We do not receive your full payment card details. All payments are processed by Apple through your Apple ID account.

3.4 Device and Technical Information

We automatically collect:

  • Device model, operating system version, and language settings
  • IP address
  • App version and configuration
  • Advertising identifier (IDFA) if you grant permission through Apple’s App Tracking Transparency framework
  • Vendor identifier (IDFV)
  • Session data and interaction events

3.5 Usage Data and Analytics

Through Firebase Analytics, we collect information about how you use the App, including screens viewed, features used, session duration, and events such as workout logging, sharing actions, and subscription conversions.

3.6 Diagnostic and Crash Data

Through Firebase Crashlytics, we collect information about App crashes and errors, including device state at the time of the crash, App version, and stack traces. This data helps us identify and fix issues.

3.7 Advertising Attribution Data

Through the Meta SDK (Facebook SDK for iOS via react-native-fbsdk-next), if you have granted App Tracking Transparency permission, we and Meta receive:

  • Advertising identifier (IDFA)
  • App install, launch, and conversion events
  • Subscription purchase events

If you do not grant tracking permission, this data is either not collected or is collected in aggregated, non-identifying form only.

3.8 User-Generated Content

  • Workout summary images you generate through the App
  • Any content you choose to share externally through Apple’s share sheet
  • Images you select from Unsplash to represent your workouts (Unsplash may collect data as described in its own privacy policy)

3.9 Location Information

The App does not currently collect precise or approximate location data. If we introduce location-based features in the future (for example, route tracking for outdoor workouts), we will update this Privacy Policy and, where required, request your explicit permission before collecting such data.

3.10 Camera and Photo Library

With your permission, the App accesses your device camera and photo library so that you can:

  • Take a photo or select an existing image to represent your workouts and custom exercises.
  • Save workout summary images you generate to your device photo library.

Images you take or select for your workouts and custom exercises are stored in Firebase Storage as part of your account data. We request camera and photo access through the standard iOS permission prompts, and you can change these permissions at any time in your device settings. We do not access your camera or photo library for any purpose other than those described above.

4. How We Use Your Information

We use your information for the following purposes:

  • App Functionality: to create and manage your account, save and display your workout data, process subscription purchases, and provide customer support.
  • Service Improvement: to analyze usage patterns, diagnose technical issues, and improve features.
  • Analytics: to understand aggregate user behavior through Firebase Analytics.
  • Advertising and Attribution: to measure the effectiveness of our marketing campaigns and, in aggregated form where possible, to reach users who may be interested in Swea.
  • Communication: to respond to your inquiries, send important service notifications, and, with your consent where required, to send marketing communications.
  • Legal Compliance: to comply with applicable laws, respond to lawful requests from authorities, and enforce our Terms of Use.

5. Legal Bases for Processing (EEA and UK Users)

If you are located in the European Economic Area or the United Kingdom, we rely on the following legal bases under the General Data Protection Regulation (GDPR) and the UK GDPR:

  • Performance of a contract: to provide the App and process your subscription.
  • Consent: for optional analytics, advertising identifiers, and marketing communications where required.
  • Legitimate interests: to improve the Service, prevent fraud, and secure the App, provided your rights and interests do not override our interests.
  • Legal obligation: to comply with applicable laws.

You may withdraw your consent at any time where processing is based on consent.

6. Third-Party Services and Data Sharing

We work with the following third-party service providers. Each has its own privacy policy that applies to their handling of your data.

6.1 Apple

Apple processes your App Store purchases and provides the platform on which the App runs. Apple also provides the Sign in with Apple service; if you choose to sign in with Apple, Apple handles your authentication and may provide us with your name and an email address (which may be a private relay address that forwards to your real email). See Apple’s Privacy Policy at https://www.apple.com/legal/privacy/.

6.2 Google (Firebase)

We use the following Firebase services provided by Google:

  • Firebase Authentication: to manage user accounts, including email and password, Sign in with Apple, and Google Sign-In.
  • Cloud Firestore: to store your workout and account data.
  • Firebase Storage: to store images you take or select for your workouts and custom exercises.
  • Cloud Functions for Firebase: to perform server-side operations, such as account and data deletion.
  • Firebase Analytics: to analyze App usage.
  • Firebase Crashlytics: to collect diagnostic and crash data.

If you use Google Sign-In, Google authenticates you and shares a limited set of information with us, such as your email address and a unique identifier.

See Google’s Privacy Policy at https://policies.google.com/privacyand Firebase’s privacy information at https://firebase.google.com/support/privacy.

6.3 RevenueCat

RevenueCat manages our subscription and purchase infrastructure. RevenueCat receives anonymized transaction data and subscriber identifiers.

See RevenueCat’s Privacy Policy at https://www.revenuecat.com/privacy.

6.4 Meta Platforms, Inc. (Facebook)

We integrate the Meta SDK through the react-native-fbsdk-next library. When you use the App, and subject to your App Tracking Transparency permission, we may share the following with Meta for advertising measurement and attribution purposes:

  • Advertising identifier (IDFA)
  • App install, launch, and specified in-app events
  • Subscription purchase events

See Meta’s Privacy Policy at https://www.facebook.com/privacy/policy/and Meta Platform Terms at https://www.facebook.com/legal/terms/businesstools.

Data shared with Meta may be considered a “sale” or “share” under certain U.S. state privacy laws. See Section 9 below for information about how to opt out.

6.5 Expo

We use Expo as our development framework. Expo may collect limited technical data.

See Expo’s Privacy Policy at https://expo.dev/privacy.

6.6 Unsplash

If you use the feature to select images from Unsplash for workout summaries, your interactions with Unsplash are subject to Unsplash’s own privacy practices.

See Unsplash’s Privacy Policy at https://unsplash.com/privacy.

6.7 Other Disclosures

We may disclose your information:

  • To comply with applicable laws, legal process, or lawful government requests.
  • To protect our rights, property, or safety, or that of our users or others.
  • With trusted service providers who work on our behalf, only for the purposes described in this Privacy Policy and under confidentiality obligations.
  • In connection with a merger, acquisition, reorganization, or sale of assets, in which case the acquiring entity will be bound by this Privacy Policy or provide notice of any changes.

We do not sell your personal information in exchange for monetary consideration.

7. Where Your Data Is Stored (International Data Transfers)

Your data is stored in Google Cloud Firestore, in the asia-northeast1 region located in Tokyo, Japan.

If you are located outside Japan, this means your personal information is transferred to and stored in Japan. Japan has been recognized by the European Commission as providing an adequate level of protection for personal data (Adequacy Decision for Japan, 2019), so transfers from the EEA to Japan do not require additional safeguards.

For users in Canada, the United States, the United Kingdom, and other jurisdictions, the transfer is made subject to appropriate contractual protections with our infrastructure providers.

Certain third-party services may process your data in other jurisdictions (for example, the United States for Meta and Google infrastructure) subject to their own transfer safeguards.

8. Data Retention

We retain your personal information for as long as your account is active, and for a reasonable period thereafter as required for our legitimate business purposes, legal compliance, dispute resolution, and enforcement of our agreements.

  • Account data: retained until you delete your account.
  • Workout and fitness data: retained until you delete the data or your account.
  • Diagnostic and crash data: retained by Firebase Crashlytics for up to 90 days by default.
  • Analytics data: retained by Firebase Analytics according to the retention period configured in our Firebase settings.
  • Subscription records: retained as required for tax, accounting, and legal purposes, typically for up to seven years.

9. Your Rights

Depending on your jurisdiction, you may have the following rights with respect to your personal information.

9.1 Universal Rights (Available to All Users)

You may:

  • Access your data: view your account and workout data through the App.
  • Correct your data: update your profile information at any time in the App.
  • Delete your account: use the in-app account deletion feature available in the Settings screen. When you delete your account, we remove your account data and associated workout data from our active systems within a reasonable period.
  • Contact us: email support@sweafitness.com with any privacy-related request.

9.2 Rights for California Residents (CCPA/CPRA)

If you are a California resident, you have the right to:

  • Know what personal information we collect, use, and disclose.
  • Request access to your personal information.
  • Request deletion of your personal information.
  • Request correction of inaccurate personal information.
  • Opt out of the “sale” or “sharing” of your personal information.
  • Not be discriminated against for exercising your rights.

To opt out of sharing your information with Meta for advertising purposes, you can disable App Tracking Transparency permission in your device settings (Settings > Privacy & Security > Tracking, or by responding to the ATT prompt when you first launch the App). You can also contact us at support@sweafitness.com.

We do not knowingly sell or share the personal information of individuals under 16 without consent.

9.3 Rights for EEA, UK, and Swiss Users (GDPR/UK GDPR)

You have the right to:

  • Access your personal data and receive a copy.
  • Rectify inaccurate personal data.
  • Erase your personal data (“right to be forgotten”).
  • Restrict processing of your personal data.
  • Object to processing, including for direct marketing.
  • Data portability, where technically feasible.
  • Withdraw consent at any time where processing is based on consent.
  • Lodge a complaint with your local supervisory authority.

9.4 Rights for Canadian Residents (including Quebec)

You have the right to:

  • Access and correct your personal information.
  • Withdraw consent, subject to legal and contractual restrictions.
  • Be informed about the use of automated decision-making, where applicable.

Residents of Quebec have additional rights under Quebec’s Law 25, including the right to data portability and to be informed about international data transfers.

To exercise any of these rights, contact us at support@sweafitness.com. We will respond within the timeframes required by applicable law.

10. Apple App Tracking Transparency

On iOS, the App uses Apple’s App Tracking Transparency (ATT) framework. When you first launch the App, or when we first attempt to access your advertising identifier, iOS will prompt you to grant or deny permission for tracking.

If you deny permission, we will not use your advertising identifier (IDFA) to link your activity across other apps or websites for advertising purposes. Meta SDK data collection is limited accordingly.

You can change your tracking permission at any time in Settings > Privacy & Security > Tracking on your device.

11. Security

We take reasonable technical and organizational measures to protect your personal information, including:

  • Encryption of data in transit using industry-standard TLS.
  • Encryption at rest for data stored in Cloud Firestore.
  • Access controls and authentication for our production systems.
  • Regular review of our security practices.

No method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

12. Marketing Communications

If we send you marketing communications (for example, product updates), you can unsubscribe at any time using the link provided in the message or by contacting us.

Transactional communications related to your account or subscription (for example, purchase confirmations and important service notices) are not considered marketing.

13. Automated Decision-Making

We do not use your personal information for automated decision-making that produces legal or similarly significant effects concerning you.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the “Last Updated” date at the top of this page and, where appropriate, by providing additional notice through the App or by email.

Your continued use of the App after any changes take effect indicates your acceptance of the updated Privacy Policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:

For users in the European Economic Area or the United Kingdom, you also have the right to lodge a complaint with your local data protection supervisory authority.

This Privacy Policy is provided for informational purposes and does not constitute legal advice. We recommend consulting with a qualified attorney regarding your specific privacy rights and obligations.