Privacy Policy

Last updated: July 2026

This policy explains what data the SwapKeep app and this website (swapkeep.app) collect, why, who it's shared with, and the choices and rights you have. "I" / "me" refers to Taras Chyhryn, an independent developer based in Ukraine, who is the data controller for SwapKeep. You can reach me anytime at hello@swapkeep.app.

The short version

• Your account is anonymous by default; an email is optional and only used to recover your account.
• Anonymous analytics and crash reporting are on by default to help me improve the app — you can turn them off anytime in Settings.
• I never sell your data and don't use it for advertising.
• You can delete everything at any time, and request a copy of your data.

Information I collect

Information you provide

• Account — when you finish setup, an anonymous account is created automatically. You may optionally add an email address so you can recover your account; it's used only for sign-in (a one-time code) and account recovery.
• Your content — the items you track, their schedules, when you swap them, custom items, and any notes.
• Home details — optional answers (pets, hard water, kids, humidity, and similar) used only to tune replacement timing for you.
• Household — if you share a household, your tracked items are visible to the members you invite, and theirs to you.
• Support — if you email me, I receive your message and address so I can reply.

Information collected automatically

• Usage & analytics — anonymous events about how the app is used (for example, screens viewed and actions taken), keyed to a random account ID rather than your name or email, via PostHog. On by default; you can turn it off anytime in Settings.
• Crash & diagnostics — crash reports and error details (including device state at the time) so I can fix bugs, via Sentry. On by default; you can turn it off anytime in Settings.
• Technical data — device model, operating-system version, app version, language, time zone, and approximate IP-based region may be collected automatically by the tools above.
• Purchase status — whether you have an active Premium purchase, via Apple and RevenueCat. I never see your card or payment details.

Stored on your device

Some data — like your cached items and your notification schedule — lives on your device to make the app fast and to send reminders, and isn't sent to me.

How I use your information

• To provide the service — sync your items, send reminders, and enable household sharing.
• To support you when you ask for help.
• To understand and improve how SwapKeep works, and to fix bugs.
• To keep the service secure and prevent abuse.
• To meet legal obligations where they apply.

I do not use your data for advertising, and I don't build advertising profiles.

Legal bases (EEA / UK)

If you're in the European Economic Area or the UK, I rely on these legal bases:

• Contract — to provide the app you're asking to use.
• Legitimate interests — to keep the service secure and to improve it, including anonymous analytics and crash reporting (why that's fair is spelled out just below).
• Consent — for website analytics cookies where the law requires prior opt-in (see "The website" below); you can withdraw it by declining or clearing cookies.
• Legal obligation — where the law requires it.

Why legitimate interests covers analytics: the data is keyed to a random anonymous ID (not your name or email), it's never used for advertising or profiling, and you have a one-tap way to object — turn it off in Settings, effective immediately.

Who I share it with

I don't sell your data. I share it only with a small set of trusted service providers (processors) who handle it on my behalf, under contract, and only to provide their service:

• Supabase — hosting, database, and authentication. (privacy)
• PostHog — anonymous product analytics. (privacy)
• Sentry — crash and error reporting. (privacy)
• RevenueCat — subscription status. (privacy)
• Apple — processes all payments through the App Store. (privacy)
• Resend — delivers sign-in and account-recovery email codes (processes your email address only when an email is sent). (privacy)
• Google Analytics (Google LLC) — aggregate website traffic measurement on swapkeep.app. (privacy)

I may also disclose data if required by law, or to protect the rights, safety, and security of users and the service.

International data transfers

These providers may process data in the United States and the European Union, and I operate from Ukraine — so your information may be transferred outside your country. Where that happens, I rely on appropriate safeguards: Google is certified under the EU–U.S. Data Privacy Framework, and my providers commit to Standard Contractual Clauses in their data-processing agreements. The same safeguards apply when data is accessed from Ukraine.

How long I keep it

I keep your account and content for as long as your account exists. When you delete your account, your data is removed from the live database promptly and purged from backups within 30 days. Anonymous analytics may be retained for up to 24 months. Support emails are kept as long as needed to help you. Waitlist emails are kept until launch communications wrap up, or until you ask me to remove you — whichever comes first.

Your rights

Depending on where you live, you may have the right to:

• access the data I hold about you, and get a copy;
• correct inaccurate data;
• delete your data ("right to be forgotten");
• restrict or object to certain processing;
• object to analytics and crash reporting at any time by turning them off in Settings; and
• port your data to another service.

You can delete everything yourself from Settings → Account → Delete account, or email me and I'll help. I aim to respond within 30 days. If you're in the EEA/UK, you also have the right to complain to your local data-protection authority.

California (CCPA/CPRA): I do not sell or "share" your personal information, and you won't be discriminated against for exercising your rights. You can request to know what's collected and to delete it using the same options above.

Your analytics & tracking choices

In the app, analytics and crash reporting are on by default; you can turn them off anytime in Settings and the switch takes effect immediately. SwapKeep does not track you across other apps or websites, so it doesn't ask for App Tracking Transparency permission.

The website

swapkeep.app uses Google Analytics to understand aggregate traffic (such as page views and rough geographic region), plus standard server logs. Google Analytics sets first-party cookies and collects a truncated/abbreviated IP for this; I do not use Google Advertising features or share this data for advertising, and I don't combine it with your app account.

One of the two cases below applies, depending on where you browse from:

If you're in the EEA, UK, or Switzerland: Google Analytics is loaded only after you accept it in the cookie banner — decline and no analytics cookies are set.

Everywhere else (including the US): Google Analytics runs by default when the page loads. You can opt out by blocking or deleting cookies in your browser, or with the Google Analytics Opt-out Browser Add-on.

Cookies & local storage this site uses:

• _ga, _ga_* — Google Analytics cookies that distinguish visitors and sessions; kept for up to 2 years. Set only per the rules above.
• sk-ga-consent — a local-storage entry that remembers your own accept/decline choice in the cookie banner, so you aren't asked again; kept until you clear site data. Strictly necessary, contains no personal data.

Launch waitlist: if you join, I store the email you submit to let you know when SwapKeep launches and to send occasional product updates afterwards. Every such email includes a way to unsubscribe, and you can ask me to remove you anytime at hello@swapkeep.app.

Children

SwapKeep is not directed at children under 13 (or under 16 in the EEA), and I don't knowingly collect their data. If you believe a child has provided data, email me and I'll delete it.

Security

Data is encrypted in transit (HTTPS/TLS), access to the database is restricted by row-level security so you only reach your own data, and access to systems is limited. No method of storage or transmission is 100% secure, so I can't guarantee absolute security — but I work to protect your data.

Changes to this policy

If I update this policy, I'll change the date above, and I'll highlight significant changes in the app.

Contact

Questions, or want to exercise a right? hello@swapkeep.app