Privacy policy

Last updated September 28, 2026

What stays on your phone

Everything you enter in FIFO Loop is stored in a database on your device: your rotation and schedule changes, shifts, trips and travel routes, pay setup, bills, goals and balances, your checklists, handover notes, private notes, credentials, and any documents you add. It is not uploaded to FIFO Loop's servers, except for the specific items described under AI features (optional), and only when you use them. Reminders are scheduled on your phone. In the web app (app.swingday.app), the same data is stored in that browser on your device instead.

Backups

You can save a backup of everything in FIFO Loop as an encrypted .swingday file, or have it emailed to your account's own address. The file is encrypted on your phone before it goes anywhere and only opens in FIFO Loop signed in to the same account. When you email a backup, the encrypted file passes through our server to our email provider (Resend) for delivery and is not kept by us. Document files (photos and PDFs) aren't included in backups.

Your account

You sign in with an email address and password, or with Google or Facebook. We store your email address, your name if your sign-in provider shares it, which sign-in method you used, and the technical records needed to keep you signed in. If you sign in with Google or Facebook, we receive only your basic profile (name and email) — never your password or contacts.

Accounts are hosted by our service provider, Supabase, which processes this data on our behalf.

When you create an account, the app checks that your email's domain (the part after the @) can receive mail, using Cloudflare's public DNS service. Only the domain is sent — not your full address. When you sign in from the iPhone Home Screen web app, a one-time sign-in code is held on our server for up to 10 minutes so the Home Screen app can pick it up, then deleted.

Together

If you connect with someone in Together, your phone shares only what you choose: your Work/Home schedule, and optionally your travel and shift times. It never shares Money, your logbook, credentials or documents.

What you share is encrypted on your phone before it's uploaded. The key is part of the invite you send and stays on your two phones, so our servers store only data they cannot read. When either of you disconnects, the other person's schedule is deleted from your phone and your shared data is removed from our servers.

Places and weather

When you type in a place field (home town, work location, or a trip's airports), the app sends what you've typed to our server to suggest matching towns and airports with their time zones. To show weather on Today, it sends the place names you've saved — your home town, your work location and the airport codes or towns on your trips — to our server, which looks up their location (using OpenStreetMap services) and forecast — from Environment and Climate Change Canada for places in Canada, the US National Weather Service for the US, and MET Norway elsewhere. Only the place name or map coordinates are sent: not your account, your schedule or your device's location. Forecasts are cached briefly so the same places aren't looked up again and again.

Canadian forecasts contain information licensed under the Open Government Licence – Canada. US forecasts are from the National Weather Service. Other forecasts are from MET Norway, licensed under CC BY 4.0.

AI features (optional)

FIFO Loop Pro has optional features that use Claude, an AI model made by Anthropic. FIFO Loop works fully without them. The first time you use each one, the app explains what will be sent and asks you to continue. You need to be signed in, so we can check your Pro subscription and apply fair daily and monthly limits.

Scan a pay stub. When you choose a photo or PDF of a pay stub, that one file is sent from your phone to our server, which passes it to Anthropic to read the amounts (pay date, pay period, gross, take-home and the lines on the stub). We ask the model not to return names or ID numbers such as your SIN, SSN or employee number, and our server removes anything that looks like one. The amounts come back to your phone, where you check and edit them; nothing is saved unless you confirm, and then it's saved on your phone like pay you enter by hand. The photo stays on your phone only if you choose “Save to Documents”. Nothing else from FIFO Loop — your pay history, logbook, documents or schedule — is sent.

Scan a ticket or certificate. When you choose a photo or PDF of a training certificate, safety ticket or licence, that one file is sent from your phone to our server, which passes it to Anthropic to read the course name, issuer, issue date and expiry date. We ask the model not to return your name or any licence, certificate or ID numbers, and our server removes anything that looks like an ID number. The details fill in the form on your phone for you to check; nothing is saved until you tap Add or Save. The photo stays on your phone, with the credential, only if you choose to keep it.

Ask Loop. When you ask a question, the app sends your question (and your earlier questions and answers in the same chat), today's date, your time zone and what you call your workplace. To answer, the model can ask the app to look things up; those lookups run on your phone, and only their small results are sent back — for example the estimated pay for the paydays you asked about, whether you're home on the dates you asked about (and whether your Together partner is, without their name), the public holidays in a date range, or the reminder you asked it to add to your checklists. Your full pay setup, pay stubs, logbook, credentials and documents are not sent. The chat is kept only in memory on your phone and is cleared when you close it.

Handover. Handover notes for your back-to-back stay on your phone until you share them yourself. If you ask Ask Loop to tidy up your handover, your handover notes (not your private notes) are sent to write it; the tidied version appears on your phone for you to edit and share.

Message drafts. If you ask Ask Loop to draft a message (for example a leave request, shift swap, pay query, travel change, ticket renewal or a schedule note for your family), the same applies: to write it, the model can also ask the app for your first name, role, employer, work site and rotation pattern, your tickets' names and expiry dates, or your upcoming trips — only when you ask for a draft. The draft appears on your phone for you to edit. FIFO Loop never sends messages for you and never connects to your email account; you choose whether to copy, email or share it.

What we keep. Our server processes these requests in memory and doesn't save or log files, questions or answers. It keeps only a usage counter for your account (how many questions today and scans this month, with no content) to enforce the limits; it is deleted after 40 days without use. If you subscribe to FIFO Loop Pro, our server asks RevenueCat whether your subscription is active to give you higher limits.

Anthropic. Anthropic processes what we send only to produce the answer, as our service provider under its commercial terms. It doesn't use it to train its models, and it deletes it within 30 days (or sooner where we have arranged zero data retention). See Anthropic's privacy policy.

Not using them. Enter pay by hand and use the app's own screens — nothing is sent. The answers are estimates from your own data, not financial, tax or legal advice.

Ads in the free version

The free version of the FIFO Loop iPhone and Android apps shows a small banner ad on three screens: Money → Activity, the Rotation calendar, and More. There are no ads on Today, Together, credentials, travel, payday details, sign-in or setup, and none in the web app. Ads are provided by Google AdMob (the Google Mobile Ads SDK).

What Google collects for ads. When an ad is requested or shown, Google's SDK receives your device's advertising identifier (the Android advertising ID, or Apple's IDFA only if you allow tracking), your IP address (which gives an approximate location), basic device and app information (model, operating system, app version, language), and your interactions with ads (views and taps). Google uses this to show ads, measure them, limit fraud and, only where you've agreed, personalize them. Google's use of this data is covered by Google's privacy policy for partner apps.

What advertisers never get. Nothing you enter in FIFO Loop — your schedule, pay, logbook, credentials, documents, Together or account details — is given to Google or used to choose ads.

Your consent. Before any ad is requested, the app shows Google's consent message where the law requires it (for example in the EEA, the UK and Switzerland, in Quebec, and in US states with privacy laws), using Google's User Messaging Platform. If you don't agree to personalized ads, you get non-personalized ads, which still use your IP address and device information for delivery, frequency capping and fraud prevention. On iPhone, after that message the app may ask whether FIFO Loop can track you (Apple's App Tracking Transparency); if you say no, your IDFA isn't shared. You can change your ad choices at any time from More → Ad privacy choices (where your region requires it), and in your phone's settings: Android → Settings → Google → Ads (or Privacy → Ads), iPhone → Settings → Privacy & Security → Tracking.

Selling and sharing. We don't sell your personal information for money. In some US states, allowing an ad network to use your advertising ID for personalized ads can count as "selling" or "sharing" under state law; the consent message lets you opt out of that, and choosing non-personalized ads or FIFO Loop Pro stops it.

FIFO Loop Pro purchases

FIFO Loop Pro is an optional subscription that removes ads and unlocks some extras. It's bought through the App Store (Apple) or Google Play (Google), which handle payment under their own privacy policies — we never receive your card or payment details. We use RevenueCat to check subscriptions across Apple and Google. RevenueCat receives your FIFO Loop account's internal ID (a random identifier, not your email), your purchase and renewal history and the store's receipt, plus basic device and app information and your IP address. From it we receive only whether your subscription is active and when it renews or ends. Restoring purchases re-links a subscription to your account.

What we don't do

• We never sell or rent your data, and we never give advertisers what you enter in FIFO Loop.
• We never send your data to an AI model unless you use an AI feature, and then only what's described above. It isn't used to train AI models.
• No GPS or location tracking.
• No analytics or crash-reporting SDKs. The only third-party SDKs that receive device data are Google's ads SDK (free version only) and RevenueCat (subscriptions), described above.
• FIFO Loop Pro users don't get ads, and the ads SDK doesn't request ads for them.

Deleting your data

• Your account: in the app, go to More → Account → Delete account. This permanently deletes your account and any Together connection from our servers. Without the app, see Delete your account.
• Data on your phone: More → Privacy & security → Delete all data, or uninstall the app (in the web app, clear this site's data in your browser).
• You can also export your data from More → Privacy at any time.

Security

Connections to our servers use HTTPS. Together data is encrypted with AES-256 before it leaves your phone. You can add an app lock (Face ID or fingerprint, falling back to your phone's passcode) in More → Privacy & security.

Children

FIFO Loop is intended for adults and is not directed at children under 16.

Changes

If we change this policy, we'll update the date above and, for significant changes, tell you in the app.

Contact

Questions about privacy: see Support.