Privacy policy

What we collect

• Your account: your email address. If you sign in with Google, Google also gives us your name and profile picture.
• Your bikes and service: each bike’s year, make, model and odometer readings, your maintenance tasks and intervals, and the service you log (dates, odometer readings, where it was done, costs and notes).
• Your settings: distance units, theme, which reminder emails and push notifications you want, and which bike you had open last.
• Push addresses: when you turn on push notifications on a device, your browser (or the SwingArm app) gives us an address for sending notifications to that device. Turning push off there, or signing out on it, deletes it. If you sign out with push on, that device remembers it (on the device only), so push comes back on when you sign in there again.
• Things you send in for all riders: owner’s manual links, and makes or models that weren’t in our list.
• Reminder records: which reminder emails and notifications we’ve sent you, so we don’t send the same one twice.
• Usage statistics: which pages are visited, and a few actions in the app, like adding a bike (with its make and model), logging service (how many tasks) or creating a share link. They’re counted without cookies and never include your name, email, notes or share links, so we see totals, not what any one rider did.
• Technical information: like most websites, our hosting providers log requests, including IP address, browser type and the pages requested. These logs are used for security and fixing problems.

We don’t collect your location, your contacts or any payment details. SwingArm is free during early access.

How we use it

• To run SwingArm for you: show your garage and work out which maintenance is due.
• To send the emails and notifications you ask for: sign-in codes and links, and the reminder emails and push notifications you’ve turned on.
• To show a bike’s history to people you share it with, when you create a share link.
• To review manual links and bike models before other riders see them.
• To keep SwingArm secure, fix problems, and answer you when you write to us.
• To see how SwingArm is used, from usage statistics, so we know what to improve.

We don’t sell your information, use it for advertising, or share it with data brokers.

Who can see your information

• Your garage is private. Other riders can’t see your bikes, tasks or history.
• Share links: when you create one, anyone with the link can see that bike’s year, make and model and its service history: dates, odometer readings, where it was done, costs and notes. It never shows your email or name. You can turn a link off at any time.
• Things you send in: once approved, manual links and bike models are shown to all riders, without your name.
• The people who run SwingArm can reach the database to keep the app running. We look at a rider’s data only when we need to, for example to fix a problem you’ve reported.

We may also share information if the law requires it, for example to answer a valid court order.

If SwingArm changes hands

If Cheese and Beer LLC is part of a merger or acquisition, or sells SwingArm, your information may pass to the new owner as part of that deal. The new owner must follow this policy for the information it receives, or tell you before any change takes effect, so you have time to download your data or delete your account.

Services that help us run SwingArm

These companies handle data for us, only to provide their service:

• Supabase: our database and sign-in.
• Vercel: hosts the website and collects the usage statistics (Vercel Web Analytics).
• Resend: sends sign-in and reminder emails.
• Push services: if you turn on push notifications, the company behind your browser delivers them to your device: Google (Chrome and Android), Apple (Safari, iPhone and iPad), Microsoft (Edge) or Mozilla (Firefox). The notification’s text is encrypted on the way, so they can’t read it; they see your device’s push address and when a notification is sent. In the SwingArm app for Android, Google’s Firebase Cloud Messaging delivers them instead; Google handles the notification’s text, along with the app’s push address, to deliver it.
• Google: if you choose Sign in with Google.
• Anthropic: when we add a manufacturer’s maintenance schedule from an owner’s manual, the manual pages we pick are sent to Anthropic’s Claude to read the schedule. Those pages come from the manufacturer’s manual and don’t include your account or bike details. Under Anthropic’s commercial terms, what we send through its API isn’t used to train its AI models.

Your information is stored in the United States.

Cookies and browser storage

SwingArm uses cookies to keep you signed in. Your browser also stores your theme and which sections you’ve collapsed, so the app looks right the moment it opens. If you turn on push notifications, your browser keeps a small SwingArm script (a service worker) that shows them. We don’t use advertising or tracking cookies. Our usage statistics don’t use cookies or store anything in your browser.

Emails and notifications

Reminder emails about tasks coming due and odometer check-ins are on when you sign up. The monthly summary is off until you turn it on. Turn any of them off under Reminder emails on the More page, or with the unsubscribe link in every reminder. We may also email you about your account or important changes to SwingArm.

Push notifications are off until you turn them on for a device under Push notifications on the More page. Turn them off there, or in your browser’s or device’s settings.

How long we keep it, and deleting it

We keep your information while you have an account. To delete it, open More, then Delete account. That erases your profile, bikes, tasks, service history, share links and push addresses right away. The same dialog lets you download a copy of your data first.

• Our database backups are kept for 7 days, so deleted data is gone from them within a week.
• Manual links and bike models you sent in stay for other riders, no longer connected to you.
• Our email and hosting providers keep their own delivery records and logs for a limited time.

Your choices and rights

You can change anything you’ve entered in the app, download a copy of your data, and delete your account. For anything else, such as a question about what we hold, write to support@swingarm.app. Depending on where you live (for example California, the EU or the UK), you may have more rights over your information. We’ll honor those requests as the law requires.

Security

SwingArm only runs over HTTPS. Each account can only reach its own data, and sign-in works without passwords, so there’s no password of yours for anyone to steal from us. No system is perfectly secure, though. If you find a problem, please tell us at support@swingarm.app.

Children

SwingArm isn’t meant for children under 13, and we don’t knowingly collect their information. If you think a child has signed up, write to us and we’ll delete the account.

Changes to this policy

When we change this policy, we’ll update it here and change the date at the top. For significant changes, we’ll tell you by email or in the app before they take effect. See also our terms of use.

Questions?

Write to support@swingarm.app.

SwingArm home