Privacy Policy

Your account. Your email address, and the handle, display name, profile photo, bio and Instagram handle you choose to add. If you sign in with Apple or Google (where offered), we receive the email address and account identifier that service shares with us.

Using Swish as a guest. If you use Swish without an account, we don't create one for you: the shows you log are saved only on your phone, and so are the usage events described below. When you create an account or sign in, your shows move into that account and those events are attached to it. Searches, look-ups and crash reports work the same way for guests (see “Companies that help run Swish”).

The shows you log. Artist, tour, date, venue and city, status (went, going, want to go), ratings, your written review and private notes, ticket and merch costs, seat, tags, who you went with, setlists, lineups, and your “what to bring” checklist.

Photos you add. Only the photos you choose to add to a show (and any checklist pictures or profile photo you add) are uploaded. Your phone re-saves each photo before uploading it, which leaves out the location and camera details stored inside the original file.

Social activity. Who you follow, cheers and comments you leave, direct messages you send, people you block, and content you report.

How the app is used. The app records simple usage events, such as “app opened” or “import finished”, tied to your account. These events never contain what you typed (no artist names, reviews or notes) and are deleted automatically after about 90 days.

Crash and freeze reports. See “Companies that help run Swish” below.

Your photo library. The import never uploads your photos. To find shows in them, the app sends the date and a rounded location of likely concert evenings to our server, which doesn't keep them, and their location to Apple Maps. If you mark an evening “Not a show”, we save its date to your account; when you add a show, its artist, venue and date also join a shared list of shows with nothing that identifies you.

Face ID (used to hide your spending stats), your home-screen widgets, lock-screen show updates, and calendar entries you add are all handled on your phone. Swish does not track your device's location and does not ask for location permission.

Find friends from your contacts (only when this feature is offered, and only if you say yes): your address book is never uploaded. Your phone turns each phone number and email into a scrambled code and sends only those codes to our server to look for matches. If you choose to let friends find you, we store a scrambled code of your own phone number or email.

Your account, shows and photos are stored with Supabase, our database and file-storage provider, on servers in the United States (us-east-1). Photos are kept in private storage and are only shown through short-lived links to people allowed to see that show.

Only you, always: your email address, private notes, ticket and merch costs, seat, tags, who you went with, setlists, checklists, and any show you set to Private.

People who follow you: any Swish user can follow you, and new shows are shared with followers by default. Followers can see each shared show's artist, tour, date, venue, city, status, rating, your short review on it, and the photos you added. You can make any show Private, and you can block anyone; blocking hides your shows from them and theirs from you.

Anyone, including on the web: your profile (handle, display name, profile photo, bio, Instagram handle) and any review you publish as public. Other Swish users can also see how many followers, follows and shows you have. Publishing a review is always your choice, and you pick whether to include your seat, price range and rating. Public reviews and profiles can be opened as links on swishconcerts.com.

Messages are visible to the people in that conversation.

We don't sell your data, and we don't share it for ads.

• Supabase stores your account, shows and photos, and runs our server code.
• Sentry receives a report when the app crashes or freezes: the technical details of the error, your iPhone model and iOS version, the app version, which screen you were on, and a log of recent app activity. Reports are not tied to your name, email or account. Screenshots are never included in the App Store app.
• Show and music look-ups. When you search for an artist or venue, the app sends what you typed to MusicBrainz, a free music database. To fill in setlists, upcoming and past shows, and artist and venue pictures, our server sends artist names, venue names, cities, dates or a venue's map position to setlist.fm, Ticketmaster, MusicBrainz, Spotify, Wikidata and Wikipedia. Our server sends these without your name, email or account. Pictures are then loaded from those services' public image hosts.
• Apple provides Maps (venue look-ups, maps of your shows), and Sign in with Apple and Apple Music where offered.
• Email. Sign-in and password-reset emails are sent through our email providers. If you email us, your message reaches our support inbox, and our replies are sent through Resend. When you report content, a summary of the report (the handles involved, the reported text and your reason) is emailed to us through Resend so we can review it.
• Vercel hosts swishconcerts.com.

• No ads, and no tracking across other apps or websites.
• No selling of your personal data.
• No outside analytics company — usage events stay in our own database.
• No AI training on your content. Your shows, reviews, photos and notes are never used to train AI models, and none of them are sent to an AI service. If that ever changes, we'll ask you first.

You can report content or block another user. Reported content is reviewed and may be removed, and accounts may be suspended for abuse.

We keep your account and everything in it until you delete it. Usage events are deleted after about 90 days. Crash and freeze reports are kept by Sentry for up to 90 days.

In the app, open Settings. “Export your data” saves a copy of every show you've logged. “Delete account” permanently deletes your account straight away: your photos and other uploaded pictures are erased from storage, and your login, profile, shows, reviews, comments, cheers, follows, messages and usage events are all erased with it. This can't be undone. Copies may remain in our database provider's backups for a short time until those backups expire. Crash reports are not tied to your account, so they expire on their own.

You can also email support@swishconcerts.com to ask for a copy of your data or to have it deleted.

Swish is not meant for children under 13, and we don't knowingly collect data from them. If you think a child has made an account, email us and we'll delete it.

If this policy changes in a meaningful way, we'll update the date at the top of this page.

Questions about this policy or your data: support@swishconcerts.com.