Privacy Policy (GDPR)
Last updated: February 2026
1. Data We Collect
We collect: email address, display name, location (city level), item listings, messages, swap history, and usage analytics. We do NOT collect exact GPS coordinates unless explicitly enabled by the user.
2. Purpose of Processing
Your data is used to: provide the swap matching service, moderate content for safety, send notifications about your swaps, and improve the platform experience. We do not sell your data to third parties.
3. Legal Basis
Processing is based on: your consent (account creation, cookie acceptance), contract performance (swap facilitation), and legitimate interest (platform security, fraud prevention).
6. Your Rights (GDPR)
You have the right to: access your data (available in your profile), correct inaccurate data, delete your account and all associated data, export your data, withdraw consent, and lodge a complaint with your national data protection authority.
7. Data Retention
Account data is retained while your account is active. Upon deletion, all personal data is removed within 30 days. Anonymized swap statistics may be retained for platform analytics.
8. Contact
Data controller: Swaply. For GDPR requests, contact privacy@swaply.app. DPO contact: dpo@swaply.app.