Privacy Policy

The data controller is the publisher of the Swippey application, reachable at: contact@swippey.app.

Swippey separates data into two categories:

• On-device data only: your photos and videos from the iOS photo library. No photo, video, or thumbnail is ever transmitted to our servers or any third party. All processing — sorting, deletion, and trash restoration — happens exclusively on your iPhone or iPad.
• Anonymous usage analytics: anonymized events collected via Google Analytics 4 (GA4, property ID: G-ZT67V3FPML) — app launches, key interactions, crashes. IP addresses are truncated by Google before storage. No advertising identifier is collected without your explicit consent.
• Purchase data: subscriptions and in-app purchases are managed by RevenueCat and Apple. Swippey never receives your payment details. RevenueCat may process an anonymous user identifier and purchase history to validate and restore subscriptions.

• Providing the photo-sorting service (100% on-device).
• Measuring app performance and detecting technical errors (GA4).
• Managing subscriptions and purchase restoration (RevenueCat / Apple).
• Responding to support requests.

• Performance of a contract (Art. 6.1.b GDPR): on-device photo processing, subscription management.
• Legitimate interests (Art. 6.1.f GDPR): anonymized analytics to improve service quality.
• Consent (Art. 6.1.a GDPR): analytics collection, requested via Apple's App Tracking Transparency (ATT) prompt at first launch.

California residents (CCPA/CPRA): Swippey does not sell or share personal information as defined under California law. You have the right to know, delete, and opt out of any sharing of your personal data. Contact us at contact@swippey.app to exercise these rights.

• Deleted photos: kept in Swippey's trash for 30 days, then permanently deleted from your device. You can empty the trash manually at any time.
• GA4 data: retained for 14 months at Google, per GA4's default policy.
• RevenueCat data: retained per RevenueCat's privacy policy (revenuecat.com/privacy), generally for the duration of the active subscription plus any applicable legal period.
• Support emails: retained for 3 years from ticket closure.

Under GDPR, you have the following rights:

• Access: obtain a copy of data held about you.
• Rectification: correct inaccurate data.
• Erasure: request deletion of your data.
• Objection and restriction: object to or restrict certain processing.
• Portability: receive your data in a structured format.
• Withdraw consent: disable tracking at any time via iOS Settings → Privacy → Tracking, or in Settings → Swippey.

To exercise these rights: contact@swippey.app. You may also lodge a complaint with your national supervisory authority.

Swippey uses Google Analytics 4 with IP anonymization enabled. No third-party cookies are placed on your device. The iOS advertising identifier (IDFA) is only collected with your explicit consent via the ATT prompt. Without consent, all usage data remains fully aggregated and non-identifiable.

Google Analytics is subject to Google's Privacy Policy: policies.google.com/privacy.

For any questions about this policy: contact@swippey.app. We are committed to responding within 30 days.