Privacy policy

Last updated October 5, 2026

The short version. Your schedule, pay, logbook, credentials and documents are stored on your phone, not on our servers. Your account holds your sign-in details. If you use Together, the schedule you choose to share is end-to-end encrypted — we can't read it. There are no ads and no tracking. Purchases go through Apple or Google — we never see your card. If you use the optional AI features in FIFO Loop Pro (scanning a pay stub, receipt, travel itinerary or ticket, or Ask Loop, which can also draft messages for you), only the document you pick or your request and the few answers needed to reply are sent to be processed, and we don't keep them. We don't track your location and we never sell your data.

What stays on your phone

Everything you enter in FIFO Loop is stored in a database on your device: your rotation and schedule changes, shifts, trips and travel routes, pay setup, bills, goals and balances, your checklists, handover notes, private notes, credentials, and any documents you add. It is not uploaded to FIFO Loop's servers, except for the specific items described under AI features (optional), and only when you use them. Reminders are scheduled on your phone. In the web app (app.swingday.app), the same data is stored in that browser on your device instead.

Backups

You can save a backup of everything in FIFO Loop as an encrypted .fifoloop file, or have it emailed to your account's own address. The file is encrypted on your phone before it goes anywhere and only opens in FIFO Loop signed in to the same account. When you email a backup, the encrypted file passes through our server to our email provider (Resend) for delivery and is not kept by us. Document files (photos and PDFs) aren't included in backups.

Your account

You sign in with an email address and password, or with Google or Facebook. We store your email address, your name if your sign-in provider shares it, which sign-in method you used, and the technical records needed to keep you signed in. If you sign in with Google or Facebook, we receive only your basic profile (name and email) — never your password or contacts.

Accounts are hosted by our service provider, Supabase, which processes this data on our behalf.

When you create an account, the app checks that your email's domain (the part after the @) can receive mail, using Cloudflare's public DNS service. Only the domain is sent — not your full address. When you sign in from the iPhone Home Screen web app, a one-time sign-in code is held on our server for up to 10 minutes so the Home Screen app can pick it up, then deleted.

Together

If you connect with someone in Together, your phone shares only what you choose: your Work/Home schedule, and optionally your travel and shift times and a small copy of your profile photo (on by default for a partner or family member, and you can turn it off for each person). It never shares Money, your logbook, credentials or documents.

What you share is encrypted on your phone before it's uploaded. The key is part of the invite you send and stays on your two phones, so our servers store only data they cannot read. When either of you disconnects, the other person's schedule is deleted from your phone and your shared data is removed from our servers.

Places and weather

When you type in a place field (home town, work location, or a trip's airports), the app sends what you've typed to our server to suggest matching towns and airports with their time zones. To show weather on Today, it sends the place names you've saved — your home town, your work location and the airport codes or towns on your trips — to our server, which looks up their location (using OpenStreetMap services) and forecast — from Environment and Climate Change Canada for places in Canada, the US National Weather Service for the US, and MET Norway elsewhere. Only the place name or map coordinates are sent: not your account, your schedule or your device's location. Forecasts are cached briefly so the same places aren't looked up again and again.

Canadian forecasts contain information licensed under the Open Government Licence – Canada. US forecasts are from the National Weather Service. Other forecasts are from MET Norway, licensed under CC BY 4.0.

AI features (optional)

FIFO Loop Pro has optional features that use Claude, an AI model made by Anthropic. FIFO Loop works fully without them. The first time you use each one, the app explains what will be sent and asks you to continue. You need to be signed in, so we can check your Pro subscription and apply fair daily and monthly limits.

Scan a pay stub. When you choose a photo or PDF of a pay stub, that one file is sent from your phone to our server, which passes it to Anthropic to read the amounts (pay date, pay period, gross, take-home and the lines on the stub). We ask the model not to return names or ID numbers such as your SIN, SSN or employee number, and our server removes anything that looks like one. The amounts come back to your phone, where you check and edit them; nothing is saved unless you confirm, and then it's saved on your phone like pay you enter by hand. The photo stays on your phone only if you choose “Save to Documents”. Nothing else from FIFO Loop — your pay history, logbook, documents or schedule — is sent.

Scan a receipt. When you choose a photo or PDF of a receipt, that one file is sent from your phone to our server, which passes it to Anthropic to read the business name, total, date and a category. We ask the model never to return card numbers, authorisation codes, people's names, addresses or phone numbers, and our server removes anything that looks like an ID number. The details fill in the expense on your phone for you to check; nothing is saved until you tap Save, and the photo stays on your phone with the expense only if you keep it.

Scan an itinerary. When you choose a photo or PDF of a ticket, boarding pass or crew travel notice, or paste a booking email, that one file or text is sent from your phone to our server, which passes it to Anthropic to read the legs of the trip (places, dates, times, flight numbers and how you travel). We ask the model never to return passenger names, booking references, ticket or frequent-flyer numbers, seats, prices or addresses. The legs fill in the trip on your phone for you to check; nothing is saved until you tap Save.

Scan a ticket or certificate. When you choose a photo or PDF of a training certificate, safety ticket or licence, that one file is sent from your phone to our server, which passes it to Anthropic to read the course name, issuer, issue date and expiry date. We ask the model not to return your name or any licence, certificate or ID numbers, and our server removes anything that looks like an ID number. The details fill in the form on your phone for you to check; nothing is saved until you tap Add or Save. The photo stays on your phone, with the credential, only if you choose to keep it.

Ask Loop. When you ask a question, the app sends your question (and your earlier questions and answers in the same chat), today's date, your time zone and what you call your workplace. To answer, the model can ask the app to look things up; those lookups run on your phone, and only their small results are sent back — for example the estimated pay for the paydays you asked about, whether you're home on the dates you asked about (and whether your Together partner is, without their name), the public holidays in a date range, or the reminder you asked it to add to your checklists. Your full pay setup, pay stubs, logbook, credentials and documents are not sent. The chat is kept only in memory on your phone and is cleared when you close it.

Handover. Handover notes for your back-to-back stay on your phone until you share them yourself. If you ask Ask Loop to tidy up your handover, your handover notes (not your private notes) are sent to write it; the tidied version appears on your phone for you to edit and share.

Message drafts. If you ask Ask Loop to draft a message (for example a leave request, shift swap, pay query, travel change, ticket renewal or a schedule note for your family), the same applies: to write it, the model can also ask the app for your first name, role, employer, work site and rotation pattern, your tickets' names and expiry dates, or your upcoming trips — only when you ask for a draft. The draft appears on your phone for you to edit. FIFO Loop never sends messages for you and never connects to your email account; you choose whether to copy, email or share it.

What we keep. Our server processes these requests in memory and doesn't save or log files, questions or answers. It keeps only a usage counter for your account (how many questions today and scans this month, with no content) to enforce the limits; it is deleted after 40 days without use. If you subscribe to FIFO Loop Pro, our server asks RevenueCat whether your subscription is active to give you higher limits.

Anthropic. Anthropic processes what we send only to produce the answer, as our service provider under its commercial terms. It doesn't use it to train its models, and it deletes it within 30 days (or sooner where we have arranged zero data retention). See Anthropic's privacy policy.

Take-home pay. Tax, CPP and EI on your pay are worked out on your phone from published payroll tables; your pay figures are never sent to work them out. When you confirm what a pay actually came to, that stays on your phone too, and the app learns from it there.

Not using them. Enter pay by hand and use the app's own screens — nothing is sent. The answers are estimates from your own data, not financial, tax or legal advice.

FIFO Loop Pro purchases

FIFO Loop Pro is an optional subscription that unlocks the AI features and some extras. It's bought through the App Store (Apple) or Google Play (Google), which handle payment under their own privacy policies — we never receive your card or payment details. We use RevenueCat to check subscriptions across Apple and Google. RevenueCat receives your FIFO Loop account's internal ID (a random identifier, not your email), your purchase and renewal history and the store's receipt, plus basic device and app information and your IP address. From it we receive only whether your subscription is active and when it renews or ends. Restoring purchases re-links a subscription to your account.

What we don't do

We never sell or rent your data. There are no ads, no advertising ID and no tracking.
We never send your data to an AI model unless you use an AI feature, and then only what's described above. It isn't used to train AI models.
No GPS or location tracking.
No analytics or crash-reporting SDKs. The only third-party SDK that receives device data is RevenueCat (subscriptions), described above.

Deleting your data

Your account: in the app, go to More → Account → Delete account. This permanently deletes your account and any Together connection from our servers. Without the app, see Delete your account.
Data on your phone: More → Privacy & security → Delete all data, or uninstall the app (in the web app, clear this site's data in your browser).
You can also export your data from More → Privacy at any time.

Security

Connections to our servers use HTTPS. Together data is encrypted with AES-256 before it leaves your phone. You can add an app lock (Face ID or fingerprint, falling back to your phone's passcode) in More → Privacy & security.

Children

FIFO Loop is intended for adults and is not directed at children under 16.

Changes

If we change this policy, we'll update the date above and, for significant changes, tell you in the app.

Contact

Questions about privacy: see Support.