Privacy Policy
Last updated: 28 October 2026
Swap is a marketplace for bartering things you no longer need. This document explains what we collect, why we collect it, who else sees it, and how to remove your account.
Who we are
Swap is operated by FORMA SOFT LTD, registered at 128 City Road, London, EC1V 2NX, United Kingdom (company number 17385313). We are the data controller for the information described below.
Questions, requests, or complaints: support@swapyourgoods.com.
What we collect
- Account identifiers — the email address linked to your Apple or
Google sign-in. Apple-relay emails (
@privaterelay.appleid.com) are stored as-is but never displayed. - Profile — the display name and avatar your sign-in provider returns, plus any bio you write. You can leave these blank.
- Items you list — title, category, description, photos, attributes, and what you are looking to swap for. Items are visible to other signed-in users after photo moderation.
- Messages and proposals — kept in our database for the lifetime of the conversation. End-to-end encryption is not used; we may inspect messages to enforce our community guidelines.
- Shipping details — when you choose to swap by post, the name, postal address and phone number you enter for the parcel, and the pickup point you choose if you don't want it delivered to your door. The person sending you a parcel sees these delivery details on the label they print. While you type an address, what you've typed so far is sent to Google Places (through our server) to suggest matching addresses. When you look for a pickup point, the postcode or the map area you're viewing is sent to Sendcloud to list the points nearby.
- Shipping payments — for each parcel you pay for, the price you were shown, whether it was paid or refunded, and Stripe's reference for the payment. We never see or store your card details.
- Subscriptions and boosts — which plan or boost you bought, when, and when it renews or ends, as confirmed by Apple or Google through RevenueCat. We never see your payment details.
- Swap coins — your coin balance, the coins held for deals in progress, your credit limit, and a record of every coin movement (amount, the deal it belongs to and when it happened). Other users don't see your balance.
- Device tokens — used to send push notifications. Removed when you sign out or uninstall.
- App and device information — the app version and build, whether you use iOS or Android, your device's language and Region setting (a setting you choose, not your location), and when you last opened the app. We use it to tell you when an update is required, to keep older versions working safely, and to understand which countries Swap is used in. Deleted with your account.
- Crash reports — if the app crashes or hits a serious error, it sends an anonymous report: the error and where in the app it happened, your device model, operating system and app version. Crash reports are not linked to your account and are kept by Firebase Crashlytics for 90 days.
- Reports and blocks — when you report something we store the reason, any details you add, and a reference to the reported listing, profile or message, so we can review it and act on it. The reported user is never told who reported them. Resolved reports are kept for up to 12 months to handle repeat abuse and legal requests. Blocks are kept until you unblock or delete your account.
- Security counters — short-lived counts of recent actions (for example messages sent per minute) used to stop spam and abuse. Deleted automatically after two days.
Automated processing of your photos
When you list an item, the photos you upload are sent to Google's Gemini API so the app can suggest a category, attributes and a value estimate for you. Photos are also sent to a moderation provider to check for illegal or adult content before other users can see them.
This is automated processing only — no human at Swap reviews your photos as part of it, and it does not make any decision with a legal or similarly significant effect on you. If you would rather not have a photo processed this way, do not upload it: you can fill in listing details manually instead.
What we don't collect
- We do not collect your location. The app does not request location permission, the feed is global, not distance-based, and the pickup map shows the area you choose, not where you are.
- We don't run analytics or advertising SDKs. The only diagnostics we collect are the anonymous crash reports described above.
- We don't sell your data, and we don't share it with advertisers.
Who else processes your data
We use a small number of providers to run the service. They process data on our instructions only:
- Supabase — database, authentication and photo storage, hosted in the European Union (West EU, Ireland).
- Google (Gemini API) — automated item detection from listing photos, as described above.
- Google Firebase — delivery of push notifications (Cloud Messaging) and anonymous crash reports (Crashlytics).
- Google Maps Platform — the map you use to choose a pickup point, and address suggestions (Places). While the map is on screen, Google also collects technical data about it (such as a device identifier, performance and crash data) under Google's own privacy policy (policies.google.com/privacy).
- Stripe — payment processing when you pay for shipping.
- Sendcloud and its carriers — when you swap by post, your name, address and phone number are passed to the carrier so the parcel can be delivered.
- Apple and Google — when you buy a subscription or a boost, the purchase is processed by the app store, not by us. We receive confirmation that a purchase happened, not your payment details.
- RevenueCat — keeps track of your subscription and boost purchases for us, under your Swap account ID.
Deleting your account
In the app: go to Settings → Delete account. Deletion is immediate and permanent.
By email: if you can't get into the app, write to support@swapyourgoods.com from the email address linked to your account and ask us to delete it. We may ask you to confirm the request, and we complete it within 30 days.
What is deleted straight away:
- your profile, bio, avatar and storefront;
- your listings and their photos, and your saved items;
- your chats — the whole conversation is removed for both people, so the other person loses it too;
- your proposals, swap history and reviews (those you wrote and those written about you);
- your shipping addresses and parcel records, settings, interests, blocks, subscription and boost records, and push notification tokens.
What is kept, and for how long:
- Reports you made or that were made about you stay for up to 12 months, as described above, but are no longer linked to your account.
- Coin records — your coin balance is written off and your open holds are released, but the record of past coin movements is kept so that coin totals across Swap stay correct. It is no longer linked to a profile.
- Payment records for shipping are held by Stripe, and purchase records for subscriptions and boosts by Apple or Google, under their own legal and tax obligations — not by us. RevenueCat keeps the purchase history under an account ID that no longer matches any Swap profile.
- Backups of our database roll over automatically; deleted data is gone from them within 30 days.
Your rights
If you are in the EU/EEA or the UK, you have the right to access, correct, export, or erase your personal data, to object to or restrict processing, and to complain to your local data protection authority. Most of this is available directly in the app; for anything else, write to us and we will respond within one month.
Children
Swap is only for adults: you must be 18 or over to use it. We do not knowingly create accounts for anyone under 18, and if we learn that an account belongs to someone under 18 we delete it.
Changes
We will update this page when material changes happen. The "Last updated" timestamp at the top of the page is the source of truth.