Privacy policy

Last updated: 19 April 2026

IN PLAIN WORDS

swapd is a private two-person photo app. We only collect what we need to make it work. Your photos and messages are between you and the one person you’re swapping with — nobody at swapd browses them. We don’t sell your data, we don’t run ads, and we don’t use your content to train AI. You can delete anything at any time.

If you’re under 18, there’s a shorter version of this page at getswapd.com/privacy/simple that explains the same things without the legal bits.

What we collect

Account info. Your email address, display name, date of birth, and (if you choose) a profile photo. Used to sign you in, check you’re old enough, and show your partner who you are.
swap content. Photos, captions, voice notes, and reactions you share in a swap. Stored so your partner can see them after the reveal.
Device tokens. A push-notification token from your device. Used to notify you when there’s something to see in the app.
Basic logs. API request timestamps and anonymised error reports, kept for 30 days to debug issues.

What we don’t collect

No third-party trackers or advertising SDKs.
No analytics that follow you across the internet.
No location data — swapd doesn’t ask for your location.
No access to your camera roll beyond photos you pick.
No contacts, no address book, no friend graph.

Who can see what

Your photos and messages are between you and your partner. Nobody at swapd browses them.

The only exception: if you report a problem and specifically attach something for us to look at, we’ll look at that specific thing to resolve it. We don’t use it for anything else and we delete it when the issue is resolved.

Who processes your data

We use a small number of service providers to run swapd. Each one only receives the minimum data it needs to do its job. None of them sell your data or use it for advertising.

Clerk (United States) — sign-in, account management, and sending sign-in emails.
Microsoft Azure (United Kingdom / EU region) — our database and the storage for your photos.
Expo Push (United States) — delivering push notifications to your device.

If we add a new processor we’ll update this list before the change takes effect.

Your rights

See what we have. On the You tab, tap “Download my data” and we’ll prepare a ZIP of everything — your photos, your answers, your account info — and email it to you within seven days.
Delete your account. On the You tab, tap “Delete my account”. We ask once to confirm, then your profile and all your swaps are removed. Your partner is told the swap has been closed; their copy is removed with yours.
Remove a single photo. On a revealed swap, tap the photo, then “Ask them to take it down.” If the other person agrees, it’s gone from both sides for good. You can always remove a photo you sent yourself instantly.
Correct your info. Edit your display name and profile picture on the You tab. Email us to correct your date of birth.
Object or complain. Email us and we’ll deal with it. If you’re not happy with how we’ve dealt with it, you can complain to the UK Information Commissioner’s Office at ico.org.uk.

How long we keep things

Account data. For as long as your account exists. Deleted within 30 days of account deletion.
swap content. For as long as the swap exists. Deleted within 7 days of the swap being deleted.
Logs. 30 days, then automatically purged.

Children and young people

swapd is for people aged 13 and up. We collect date of birth at sign-up to check, and we take extra care with data for anyone under 18:

Privacy settings are already at their strongest by default.
We don’t use profiling, behavioural tracking, or “nudges” designed to make young people share more.
We don’t show ads to anyone.
There’s a short, plainer version of this policy at getswapd.com/privacy/simple.

We follow the UK Age-Appropriate Design Code (also called the Children’s Code). If you’re a parent or guardian and want to know how we handle your child’s data, or want us to delete their account, email safety@getswapd.com.

Legal basis for processing (UK GDPR)

We process your data on the following bases:

Contract. For account data and swap content we’d need to deliver the service you signed up for.
Legitimate interests. For anonymised logs and security monitoring, weighed against your rights and found proportionate.
Consent. For push notifications (you can turn them off in system settings at any time).

Changes to this policy

If we change anything material, we’ll update the date at the top, bump the version, and ask you to re-accept in-app before the change takes effect.

Contact

General: hello@getswapd.com
Child safety: safety@getswapd.com

swapd is operated from the United Kingdom. Our ICO registration will be added here once approved.