Privacy Policy
Effective July 24, 2026
Sweloop is a calm home-memory app: you write short notes about your home, and Sweloop remembers what's due and when. It is built local-first and privacy-first, and this policy describes exactly what that means in practice.
What we collect
- Your notes. The text you type (for example, "pool cleaned, paid $180"), along with anything Sweloop reads out of it or you correct by hand: a category, an amount, a date, a repeat schedule, and optional vendor details (a company name and contact) that you choose to add.
- Account basics, only if you sign in. Signing in with Google gives us your email address and name (via our authentication provider, Supabase). You can set an optional display name. Sign-in is optional: without it, everything stays only on your device.
- Hosting logs. Our hosting providers (Vercel, Supabase) keep standard server logs (such as IP addresses) to run and secure their services.
What we deliberately do not collect
- No home address, no location, no property value — the app has no fields for them and our tests fail if such fields are ever added.
- No analytics, no trackers, no advertising, no fingerprinting.
- No cookies. Sweloop sets no cookies. Your data and sign-in state live in your browser's own storage (IndexedDB and localStorage), used solely to make the app work. That is why you will never see a cookie banner here.
Where your data lives
First on your device, in your browser's local database. If you sign in, your notes also sync to our database hosted by Supabase, protected by row-level security so only your account can read them. The website is served by Vercel.
Who processes data
- Supabase — database and authentication.
- Google — sign-in only; we receive your email and name and nothing else from your Google account.
- Vercel — website hosting.
We do not sell or share your data with anyone else, for any reason.
Your controls
- Export everything as a file, any time (profile sheet).
- Forget notes from today, a date range, or everything.
- Clear this device removes the local copy and sync state.
- Delete your account: email us at viveksama.developer@gmail.com and we will delete your account and all synced data within 30 days. (Self-serve deletion is on our roadmap.)
Retention
We keep your data until you delete it. Deleted notes are removed from sync; local copies clear per the controls above.
Children
Sweloop is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Signing in requires a Google account, which has its own age requirements. If you believe a child has provided us personal information, contact us and we will delete it.
Security
Data in transit is encrypted (HTTPS). Synced data is protected by row-level security. No system is perfectly secure, and we cannot guarantee absolute security — but we collect so little that there is unusually little to lose.
Changes
If this policy changes, we will update the date above and, for meaningful changes, say so in the app.