Last updated April 2026
Swappr is the data controller for your personal data. Contact: hello@swappr.store.
We collect your email, username, device push token, listings data, and transaction history. We collect device identifiers for fraud prevention.
Account, listings, orders and messaging data — processed to perform our contract with you. Transaction and payment records — retained to meet legal and tax obligations. Analytics — processed only with your consent, which you can withdraw anytime in Settings. Fraud prevention — our legitimate interest in keeping the marketplace safe.
Stripe (payment processing), Supabase (database and file storage), Railway (hosting), Resend (transactional email), Expo/EAS (push notification delivery), PostHog (analytics — only if you consent). Each processes data solely to provide their service to us.
We share necessary transaction data with other parties in a transaction (e.g. shipping address to seller). We do not sell personal data to third parties.
Account data is kept until you request deletion. Transaction and payment records are retained for 7 years after the transaction to meet legal obligations, in anonymized form once your account is deleted. Server logs are kept for 90 days.
Your data is processed on servers in the United States (Railway, Supabase) under standard contractual clauses and equivalent safeguards.
You have the right to access, rectify, erase, and receive a portable copy of your data, and to withdraw consent at any time. Delete your account in Settings, or contact hello@swappr.store to exercise any right. You may also lodge a complaint with your local data protection authority.
Sellers set their own return policies, but if you buy as an EU consumer your statutory rights — including the 14-day right of withdrawal where it applies — are unaffected.
With your permission, we send push notifications for offers, messages, and order updates. You can disable these in Settings at any time.
We use industry-standard encryption and access controls. No method is 100% secure; use Swappr at your own risk.
The mobile app does not use browser cookies. We use local storage for session persistence only.
Swappr is not intended for users under 18. We do not knowingly collect data from minors.
We may update this policy. Continued use after changes constitutes acceptance.
Privacy questions: hello@swappr.store