Swapini — Privacy Policy
Swapini is a private app for sticker-album collectors and traders. We collect the minimum data needed to let you track your collection and trade with people you choose. This page explains what's collected, how it's used, who has access, and how long we keep it.
1. What we collect and why
The table below summarizes each data type, its purpose, and whether it's required or optional:
| Data type | Purpose | Required? |
|---|---|---|
| Email address | Authentication, password recovery, service notifications | Yes |
| Password (hashed) | Secure authentication; we never see or transmit it in plain text | Yes |
| Display name / username | Identification between users; visible to others | No |
| Album inventory (stickers, labels, notes) | Core app functionality; private by default | Yes (core functionality) |
| Photos of physical stickers | Verification during active Trades; visible only to your counterpart | No |
| Trade history and messages | Trade record, reliability score, dispute resolution | Yes (if you use Trades) |
| Ratings | Public reliability score | Yes (if you use Trades) |
| Approximate location (~100 m) | Search for nearby collectors (opt-in) | No — opt-in |
| Social spots (tags) | Matching by shared places (opt-in) | No — opt-in |
| Crash reports / diagnostics | App stability; no advertising identifiers | Yes (automatic) |
About location
The "Nearby" feature is opt-in and uses approximate location (not precise). We round your coordinates to the nearest ~100 m grid on the device before sending them to our servers; your exact GPS never reaches us. You can turn this off anytime in Settings → Privacy → Location. Turning it off removes you from nearby search results; previous location data is retained until you delete your account.
2. How we use it
- Authenticate you and keep your account secure.
- Show you your album, your Trades, and compatible collectors.
- Calculate Trade suggestions, reliability scores, and trade fairness.
- Enforce blocks and reports to protect the community from bad actors.
- Comply with legal obligations or respond to valid legal requests (see section 4).
We do not use your data for advertising, commercial profiling, or to train artificial-intelligence models.
3. Who sees your data
Between users
By default, your inventory and album data are private to you. The following information may be visible to others:
- Display name, reliability score, and total completed Trades are visible to potential Traders.
- Whether you have a sticker (yes/no, never how many) is visible to the Trader the system paired you with.
- Photos of your stickers are visible only to your counterpart in an active Trade.
- Custom sticker names are never shared with other users.
- Trade messages are visible only to the two parties on that Trade.
Service providers (third parties)
We share data with a small set of vendors under data-processing agreements. They only access the data needed for their function:
- Supabase — database, authentication, and image storage (hosted on US-based cloud infrastructure).
- Brevo — sending transactional emails (account confirmation, password reset).
- Vercel — hosting this page and the password-reset page.
- OpenStreetMap Nominatim — place-name search when you tag a social spot. Only the text query is sent; no personal identifiers are attached.
We do not use advertising networks, third-party analytics SDKs, or social-media trackers. We do not sell your data.
4. Legal disclosures
We may disclose your data if required by law or a valid court order, or if we in good faith believe that disclosure is necessary to protect the rights, property, or safety of Swapini, our users, or the public. To the extent permitted by law, we will notify you before disclosing.
5. International data transfers
Our primary providers (Supabase, Vercel) store data on servers located in the United States. By using Swapini from any other country, including the European Union or Mexico, you consent to this transfer. We require our providers to apply protections equivalent to those required in your jurisdiction.
6. Data retention
- Active account data: retained while your account exists.
- Trade history: retained permanently for record integrity; if you delete your account, your name is replaced with "Deleted user" in the counterparty's records.
- Approximate location data: updated as you use the app; deleted when you delete your account.
- Sticker photos: deleted when you remove them or when you delete your account.
- Crash reports: retained for 90 days for diagnostics, then automatically deleted.
- Trade messages: retained while both parties have active accounts; deleted when you delete yours.
7. Children and minors
Swapini is not directed at people under 13 (or the minimum applicable age in your country). We do not knowingly collect personal data from children. If we detect that a user is under 13, we suspend and delete the account immediately. If you are a parent or guardian and believe a child has signed up, contact us at support@swapini.com and we will remove the account without delay.
8. Your rights
Depending on your location, you may have the following rights:
- Access / export: request a copy of your data by emailing us.
- Rectification: profile fields are user-editable in the app; for other data, email us.
- Deletion: we will delete your account and associated data within 30 days of your request. Anonymized Trade records are retained for the counterparty.
- Restriction / objection to processing: you can disable optional features (location, social spots) from Settings.
- Portability: we will provide your data in a machine-readable format on request.
- No sale of personal data: we do not sell your data; you do not need to opt out.
To exercise any of these rights, email support@swapini.com. We respond within 30 days.
9. Security
All connections use TLS. Database access is gated by row-level security policies that restrict each user to their own data. Passwords are hashed by our authentication provider and are never stored or transmitted in plain text. In the event of a security breach affecting your data, we will notify you as required by applicable law.
10. Changes to this policy
If we make material changes, we will update the date at the top and notify you in-app at least 7 days in advance. Continued use of Swapini after that date constitutes acceptance of the changes.
11. Contact
Privacy questions, requests, or concerns: support@swapini.com