Privacy policy
Last updated: 30 September 2026
The short version: Sweto works fully without an account. Your workouts, routines, body weight and settings are stored on your phone, and backed up weekly only to your own iCloud Drive or Google account. If you choose to create an account, your data also syncs between your own devices through our hosting provider, Supabase. We never sell or share your data, and there are no ads or trackers in the app.
Who we are
Sweto is a workout tracking app for iPhone and Android. In this policy, "we" means the developer of Sweto. You can reach us at avadhoot201@gmail.com.
Data stored on your phone
To work, the app keeps the following on your device, in its own private storage:
- Your workouts, sets, routines, personal records and notes.
- Answers you give during setup: your training goal, experience, schedule, equipment, units, and optionally your first name, body weight, age and sex. Age is stored as a birth year.
- Body weight entries you log, and your app settings.
- Food, protein and water you log, and foods you save.
- Tape measurements and progress photos you add. Photos are kept in the app's own storage on your phone and are not included in backups.
This data leaves your phone only as described below: in backups to your own Apple or Google account, when you choose to export it or save it to a health app, and, only if you sign in, when it syncs with your account. Without an account, we have no copy of it and cannot see it.
What leaves your phone
- Exercise images. Photos for exercises are downloaded the first time you view them, from the open exercise library hosted on GitHub (raw.githubusercontent.com), and then kept on your phone. Like any web request, this lets GitHub see your IP address. No information about you or your training is sent. See GitHub's privacy statement.
- Apple Health and Health Connect, only if you turn it on. Sweto can save finished workouts (type, time and estimated calories) and body weight to Apple Health on iPhone or Health Connect on Android. Separately, and only if you turn on reading, Sweto reads your body weight (to fill in days you did not log a weigh-in) and your daily steps (to estimate your everyday activity); it reads nothing else. You can turn either off at any time in the app's settings or in your phone's health settings.
- Voice logging, only if you use it. When you log food or water by voice, with Siri on iPhone or with the mic button or "Log by voice" shortcut on Android, your words are turned into text by Siri or by your phone's speech service (usually Google's). Apple or Google may process your voice on their servers, under Apple's or Google's privacy policy. Sweto only receives the text, such as "500 calories", and never records audio itself.
- Automatic backups, unless you turn them off. Once a week, Sweto saves a backup file of your data (not your progress photos). On iPhone it goes to your own iCloud Drive, in a Sweto folder you can see in the Files app; if iCloud Drive is off, it stays on your phone. On Android it is saved in the app's storage, which Android's built-in backup copies to your Google account when backup is turned on in your phone's settings. These backups are stored by Apple or Google in your account, under Apple's or Google's privacy policy. They never go to us, and we cannot see or open them. You can turn automatic backups off in the app's settings.
- Your account and sync, only if you sign in. Accounts are optional. If you create one, we keep your email address to sign you in (with a code we email you), and your workouts, routines, body weight, measurements, food, water, your own exercises and your preferences are synced between your devices. Progress photos are never uploaded. This data is stored by our hosting provider, Supabase, and each account can only read its own data through the app. The sign-in code is emailed through our email provider, Brevo, which receives your email address for that purpose only. Like any hosted service, the people who run Sweto could technically access the database; we do not look at your data except to fix a problem you ask us to fix, and we never sell it or use it for advertising. You can sign out, or delete your account and all synced data, in the app's settings at any time.
- Routines you publish, only if you choose to. When you publish a routine to Community, its name, the exercises with their sets and reps, and the author name you type are public: anyone using Sweto can see and import them. You can take a published routine down at any time. If people report a routine, we may look at it and remove it.
- Food lookups, only when you use them. When you scan a barcode or search for a food, the barcode or your search words are sent to Open Food Facts, a non-profit food database, to find the product. Nothing else about you is sent.
- Meal photos, through your own AI chat. "Estimate from a photo" does not send your photo anywhere. You send it yourself, in the AI chat app you choose (such as Claude, ChatGPT or Gemini), under that app's privacy policy. Sweto only reads the reply you bring back.
- Exports and backups you make. When you export to CSV or back up to a file, the file goes wherever you choose to send or save it. We never receive it.
- Sharing. If you share a workout image, or a routine as a message, it goes only to the app or person you pick.
What we do not do
- No required accounts: signing in is optional, and only for syncing and publishing routines.
- No analytics, advertising or tracking tools, and no data brokers.
- No selling or sharing of personal information.
- No location or contacts access. The camera is used only when you take a progress photo or scan a food barcode, the photo library only when you pick a progress photo, and Sweto has no microphone access of its own: voice logging goes through Siri or your phone's speech service, as described above.
Notifications
Rest timer alerts and workout reminders are scheduled on your phone. They are not sent through any server.
Deleting your data
Because your data is on your phone and in your own accounts, you are in control. Deleting the app removes all of its data from your phone. If you created a Sweto account, delete it in the app's settings (Account & sync > Delete account): this removes your account, everything synced with it and the routines you published, straight away. You can also email us to delete it. Automatic backups in iCloud Drive stay until you delete them in the Files app (iCloud Drive > Sweto), so you can restore them later. Android backups in your Google account are managed in your phone's backup settings. You can also restore from, or replace data with, a backup from the app's settings. Anything you saved to Apple Health or Health Connect stays there until you delete it in that app.
Children
Sweto is not directed at children under 13, and we do not knowingly collect information from anyone, of any age.
Changes to this policy
If the app ever changes how it handles data, for example by adding optional crash reports, we will update this page and the date above before that change reaches you, and describe it clearly in the app.
Contact
Questions about privacy? Email avadhoot201@gmail.com.