Swayli

Privacy Policy

Last updated: October 18, 2026

A Swayli series connects photos of the same place over time. This policy follows that information from capture and import through account services, sharing, and deletion. Swayli operates the app and handles the information described here. For questions or requests, email support@swayliapp.com.

Spot photos and records stay in the app's storage on your iPhone without automatic server synchronization. Account details, uploaded avatars, place-name lookups, notifications, and app measurement involve online services. Exporting or sharing creates separate copies.

1. Building your photo series on this iPhone

Each account has a local library containing its spot names, notes, tags, precise spot coordinates, photos, capture dates, reference-photo selections, retake schedules, and camera preferences. These records let Swayli organize a timeline, show a reference shot, find nearby spots, and prepare comparisons and reminders. The photography features do not automatically send this library to our backend or transfer it between devices.

Camera images and imported copies are processed on the device for cropping, reference overlays, image comparison, and storage. Motion-sensor readings support the level and alignment tools locally. A profile photo you upload uses the separate online process described below.

2. Reading Photos and finding a spot

Camera permission allows you to take a spot or profile photo. Photos access lets the app read the images and metadata that iOS makes available, including capture dates and any recorded coordinates. Swayli groups available photo locations on the device to suggest earlier images of similar places. Selected Photos access limits the images available for import and suggestions; saving to Photos uses the applicable add permission.

With location permission while using the app, Swayli can record a spot's position and calculate nearby distances and guidance. Its photography tools do not request continuous background location access. Some location-related actions send coordinates to Apple services, as explained in the next section.

3. Account, place-name, and notification services

• Signing in: email sign-in sends your email address and password to our account service for authentication or registration. Sign in with Apple sends Apple's authorization code and identity token to that service. Your user ID, session token, and available account details are stored on the device to keep you signed in. Apple's handling is explained in its privacy policy.
• Updating a profile: the nickname, birthday, and gender you submit go to our account service. An avatar you choose to upload goes to the storage service designated by our backend. You can skip profile steps where the app offers that choice.
• Looking up a place or opening a route: reverse geocoding can send spot coordinates, including coordinates read from imported photos, to Apple's system service to obtain a place name. Opening Apple Maps passes the destination coordinates to Maps. Storing photos locally does not prevent these coordinate lookups from using the network.
• Reminders and remote messages: retake reminders are scheduled on your device. Remote notifications, where available, use Apple Push Notification service and Firebase Cloud Messaging; installation identifiers and push tokens are processed for delivery. Notification permission controls alerts. See Firebase's privacy information.
• Contacting support: we receive the sender's email address, message, and chosen attachments to answer the request. Please leave out passwords, authentication tokens, and photos you do not want us to receive.

4. Exported copies and protecting your images

Saving an image to Photos or choosing a recipient in the system share sheet sends that copy to the destination you select. Comparison images generated by Swayli do not include GPS metadata, but their visible content may identify a person, place, or date. The destination's own settings and privacy policy apply to its copy.

Backup exports photos and spot records, including coordinates, notes, and dates, in an unencrypted ZIP. Anyone who obtains the file may be able to read it. Store it securely and check the destination before sharing. The ZIP covers your spot library, not a complete set of account, support, or provider records, and the app currently has no restore feature.

Your iPhone's backup and photo-sync settings may create additional copies outside Swayli. Those copies are managed through the relevant platform. We use device storage protections and safeguards appropriate to the service, but cannot guarantee the security of every device, transmission, or storage destination. Protect your phone and sign-in credentials.

5. Device requests and app measurement

Our backend requests carry an app-generated device identifier, app and operating-system versions, device model, time zone and UTC offset, request identifiers, environment information, and a session token when you are signed in. A push token and available attribution identifiers or referral information may also be included. Connecting to an online service exposes network information such as your IP address to that service. We use these details to authenticate requests, maintain sessions, deliver notifications, operate the service, and prevent misuse.

The device identifier uses iOS Keychain when available, with a local-file fallback. A Keychain value may survive uninstalling and reinstalling the app. Device identifiers and attribution caches are separate from an account's photo library and are not all erased by signing out or deleting that account.

Usage statistics: Google Analytics for Firebase automatically collects app and device information such as app opens, sessions, app version, and app-instance identifiers to help us understand use and reliability. Collection can start when the app launches, before sign-in. Swayli does not send spot photos, notes, or precise spot coordinates as custom analytics events. See Firebase's privacy information and Google's privacy policy.

Acquisition measurement, when enabled: Adjust processes device and app details, attribution identifiers, campaign and referral information, and interaction data for installation and acquisition measurement. Meta/Facebook processes automatic app events, including app activation, and device information for acquisition measurement; its advertising-identifier collection follows the iOS tracking authorization state. These services depend on the release configuration. See Adjust's privacy policy and Meta's privacy policy.

App Tracking Transparency controls tracking across other companies' apps and websites. Declining it does not block Swayli's photography tools, and does not switch off all technical processing or automatic analytics. Any processing that continues without tracking authorization remains subject to applicable law. Contact us about your information or rights using the address below.

6. Online providers and processing locations

Account hosting, avatar storage, authentication, notification, and measurement providers receive information needed for their respective services. Their applicable terms and privacy notices also govern their handling. Cloudflare hosts the public legal pages and can process IP addresses and request details to deliver and protect the site; see Cloudflare's privacy policy. Reading the bundled documents inside Swayli does not fetch that public site.

Online providers may process information in countries other than where you live. Where transfer safeguards are required by applicable law, we are responsible for meeting those requirements. We may also disclose information to comply with law, address fraud or security threats, or carry out a business transfer subject to applicable privacy protections. Contact us for information about handling or transfers involving your account.

External websites and sharing destinations handle information you give them under their own policies. If an online feature introduces another data use, the relevant additional notice or permission must accompany that use.

7. Removing photos and closing an account

Deleting a spot or photo: use the controls in your local library. Removing a Swayli copy does not remove an original or exported image in Photos. Local records otherwise remain until you delete them or the app's storage is removed.

Signing out or uninstalling: signing out leaves the account's library on this iPhone for a later sign-in to the same account. Uninstalling can remove the app's local data. Neither action is a request to delete your server account.

Deleting the account: Me → Delete account sends a request to our backend. If the request fails, deletion is not confirmed and you can retry after signing in if necessary. When the server reports success, the app ends the session and starts removing that account's local library on this iPhone. Interrupted local cleanup may finish on a later launch through the app's retry mechanism. Photos, ZIP files, shared copies, and independent backups outside the app must be managed separately. Email us if you cannot sign in or need help requesting deletion.

Online retention: account and operational records are retained for the purposes described here and for applicable legal, security, and dispute-resolution obligations. The necessary period depends on the data and obligation involved. Records subject to lawful retention, provider-controlled analytics, and backup copies may remain after account deletion; a successful app request does not mean every provider or backup is erased immediately. Ask us about retention or deletion of a particular record.

8. Managing access and making a privacy request

Use iOS Settings to change camera, Photos, location, notification, or tracking permissions. Me → Permissions provides access to app permission settings. A change limits future access for the affected feature; it does not undo an earlier import, upload, export, or share. You can also edit available profile fields, change reminder preferences, and export your local library through Backup.

The rights available under the laws that apply to you may include access, correction, deletion, a copy of your data, objection to or restriction of processing, withdrawal of consent, and a complaint to a privacy regulator. Describe your request in an email to support@swayliapp.com. Before releasing or deleting account information, we may verify ownership. We handle requests as applicable law requires; withdrawal leaves earlier lawful processing unaffected.

9. Adult accounts and family photos

Accounts are intended for adults aged 18 or older. A template for recording a child's growth does not create an account for that child; the adult using it is responsible for the photos and any required permissions. We do not knowingly collect account information from children under 18. Please tell us if you believe a child has provided account information so we can investigate and act appropriately.

10. Policy updates and contact

We will change the date above when this policy is revised. Material changes will receive any additional notice required by law, and new uses needing consent will be subject to that requirement. Contact Swayli at support@swayliapp.com for privacy questions, requests, or help deleting an account.