What Swig collects, and why.

Who this covers

This policy applies to Swig™: the app at app.swig.beer, and this website at swig.beer. Swig is an independently developed app, currently in private beta. Questions or requests about your data go to hello@swig.beer, a real inbox checked by the person who builds Swig.

What we collect

Account

Your email address and password, to create and secure your account. Your password is handled by our authentication provider (Supabase) and is never visible to us in readable form.

Region and timezone

The country you select determines which official drinking guideline Swig calculates against (Australia's NHMRC, the UK's CMO guidance, the US's NIAAA, Canada's CCSA, or WHO guidance elsewhere). That's the whole point of the app: real numbers against your own country's standard, not a generic average.

Biological sex, age range, activity level, drinking context, and motivation

Asked once during setup. All five are optional and skippable, and can be changed or cleared anytime from your Profile.

Biological sex specifically: some countries set different guideline thresholds for men and women, others don't. Concretely, the US and UK guidelines Swig calculates against are sex-differentiated, so your biological sex directly changes the numbers you're shown. Australia and Canada's guidelines currently use the same threshold regardless of sex. For those regions we still ask, both because that may change and because it's one factor among several that shapes the tone of your AI Insights (see below). If you'd rather not say, "prefer not to say" is a real option, not a dead end: Swig falls back to the more conservative threshold.

Age range, activity level, drinking context, and motivation exist purely to make your weekly AI Insights read like they're written for you rather than a generic template. None of them change the standard-drink maths itself.

What you log

Each drink entry: beverage type, volume, ABV, the standard drinks Swig calculates from those two numbers, how you logged it (camera or manual), an optional note you type yourself, and the time. That's it. No location is attached to an entry.

Favourites photos

If you save a favourite drink with a photo, that photo is your own upload, stored privately in your own account folder. It's never used for anything except displaying it back to you.

Camera and Venue Menu photos

Point the camera at a can, bottle, or a pub's tap list, and that photo is sent once to Anthropic's AI to read the label or menu. The photo itself is then discarded, not stored, by us or by Anthropic. For a venue menu, the text Swig reads off the photo (drink names, ABV) is kept temporarily so you can tap through it during your visit, and is automatically and permanently deleted after 7 days regardless of whether you cleared it yourself.

AI Insights

Your logged drink numbers, not photos, not your email, are sent to Anthropic's AI to generate your weekly Insights summary: a plain-language read on your own patterns. Never a diagnosis, never medical advice, never a BAC estimate. That's a hard line for Swig, not a policy we might loosen later.

What we don't collect

• No location tracking, ever. Not even for the venue menu feature: you tell Swig where you are by naming the venue yourself.
• No contacts, no social graph, no friends list. Swig v1 is deliberately private and personal; nothing you log is ever visible to anyone else.
• No analytics or advertising trackers of any kind. No Google Analytics, no Meta Pixel, no ad network scripts. Nothing watches how you use the app beyond what's needed to run it.
• No blood-alcohol estimates, no medical or diagnostic data, no treatment records. Swig doesn't calculate or infer these, so there's nothing of that kind to collect.

Who we share it with

A short, genuinely complete list. These are the only other companies that ever touch your data, and only to do the specific job below:

• Supabase: our database, authentication, and file storage. Every table is locked down so you can only ever read or write your own rows.
• Vercel: hosts the app itself, standard web-hosting infrastructure, the same way any website has a host.
• Anthropic: processes label/menu photos (Camera and Venue Menu) and your drink data (AI Insights) as described above. Anthropic doesn't retain the photos, and doesn't use your data to train its models.
• Our email sender: a standard mail server we operate ourselves, used only for account emails such as verifying your address and password resets. No marketing mailing list, because there isn't one.
• Lemon Squeezy: not yet connected, but will be once paid plans launch. When it is, Lemon Squeezy processes your payment directly; Swig never sees or stores your card details. This section will be updated the day that goes live, but we'd rather tell you now than surprise you later.

Nobody on this list is an advertiser, and nobody buys or sells lists of Swig users. If that ever changed, this policy would change first, visibly, not quietly.

How long we keep it

• Everything you log is kept for as long as your account exists, so your history stays useful.
• Camera/label photos are never retained. They're discarded immediately after reading.
• Venue menu text auto-deletes after 7 days.
• Deleting your account removes everything (every drink, every favourite, every preference) immediately and permanently, across every table in our database. This isn't a soft delete or a 30-day grace period: once confirmed, it's gone. We built account deletion this way deliberately, including a type-to-confirm step, specifically so it's a considered action rather than an accidental one.

Your rights

You can see, change, or clear almost everything covered above yourself, anytime, from your Profile page. No request form, no waiting on us. For anything you can't self-serve, email hello@swig.beer and we'll sort it directly.

If you're in the EU, the UK, or California, local law gives you additional, more formally defined rights (access, correction, deletion, portability, and others). Swig honours these the same way for everyone, everywhere, rather than running a separate track by region. Email us and we'll action it.

Security

Data is encrypted in transit (HTTPS everywhere), and access to your rows is enforced at the database level, not just in the app's interface. That means even a bug in Swig's own code can't easily leak one user's data to another. No system is perfectly unbreakable, but this is built with that goal, not bolted on after the fact.

Age requirement

Swig is for adults of legal drinking age in their own country: 18 or older, or your local legal drinking age if it's higher. By creating an account, you're confirming that's true.

Changes to this policy

If this policy changes in any way that matters, such as a new third party or a new use of your data, the date at the top will update. Where the change is significant, we'll let you know directly rather than leaving it to be noticed.

Contact

Questions, requests, or anything unclear: hello@swig.beer.