Privacy Policy (GDPR)

Last updated: February 2026

Last updated: 2026-02-15

1. Data We Collect

We collect: email address, display name, location (city level), item listings, messages, swap history, and usage analytics. We do NOT collect exact GPS coordinates unless explicitly enabled by the user.

2. Purpose of Processing

Your data is used to: provide the swap matching service, moderate content for safety, send notifications about your swaps, and improve the platform experience. We do not sell your data to third parties.

4. Data Sharing

We share data with: Supabase (database hosting, EU region), Cloudinary (image hosting), HuggingFace (AI content analysis, server-side only). Your profile information is visible to other users based on your visibility settings.

5. Cookies

We use essential cookies for authentication and session management. Optional analytics cookies help us understand usage patterns. You can manage cookie preferences at any time via the cookie consent banner.

6. Your Rights (GDPR)

You have the right to: access your data (available in your profile), correct inaccurate data, delete your account and all associated data, export your data, withdraw consent, and lodge a complaint with your national data protection authority.

7. Data Retention

Account data is retained while your account is active. Upon deletion, all personal data is removed within 30 days. Anonymized swap statistics may be retained for platform analytics.

8. Contact

Data controller: Swaply. For GDPR requests, contact privacy@swaply.app. DPO contact: dpo@swaply.app.