Swapsease Privacy Policy

1. Introduction

Swapsease ("we", "us", or "our") operates the Swapsease iOS application and the website at swapsease.app. This Privacy Policy explains what personal data we collect, how we use it, who we share it with, how long we retain it, and what rights you have over your data.

This Privacy Policy explains how we process personal data when you use Swapsease.

2. Operator and Data Controller

Swapsease is currently operated by an individual based in Switzerland under the brand name JL Intelligence. This individual acts as the data controller for all personal data processed through the Swapsease app and website. The service may later be transitioned to a registered Swiss company (GmbH), at which point this policy will be updated accordingly.

As data controller, we are responsible for determining the purposes and means of processing your personal data in accordance with the Swiss Federal Act on Data Protection (nFADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

Contact: jl@jl-intelligence.com

3. Information we collect

Account and authentication data

• Email address and name provided when you create an account or sign in through Apple Sign In or Google Sign In.
• Authentication tokens and session identifiers managed by AWS Cognito, our identity provider.
• Profile information you choose to add, such as a display name, profile photo, and short bio.

Home listing data

• Photos, descriptions, amenities, rules, and availability windows you publish as part of a home listing.
• Location data at the city or neighbourhood level used to power destination-based discovery.

Usage and interaction data

• Swipe decisions (interest expressed on other listings).
• Matches formed when mutual interest is detected.
• In-app chat messages exchanged between matched users.
• Post-swap ratings and written reviews you submit.

Subscription and purchase data

• Subscription status and entitlement information provided by Apple and managed through RevenueCat, our subscription management platform.
• We do not receive full payment card details. Billing is handled entirely by Apple through your Apple ID.

Technical data

• Device type, operating system version, and app version collected to support debugging and compatibility.
• Crash reports and performance data used to monitor service reliability.

We do not use third-party advertising or tracking SDKs. No behavioural advertising data is collected or shared.

4. How we use your information

• Authentication and account management: to create and maintain your account via AWS Cognito.
• Matching and discovery: to show your listing to other users and to surface listings relevant to your search criteria.
• Messaging: to enable in-app chat between matched users.
• Ratings and trust: to display post-swap ratings associated with user profiles.
• Subscription access: to verify entitlements and unlock premium features through RevenueCat.
• Support: to respond to your requests, investigate reported issues, and resolve disputes.
• Safety: to detect and act on prohibited content, abuse, or violations of our Terms of Service.
• Analytics and improvement: to understand how the app is used and to guide product decisions, using aggregated or anonymised data where possible.

5. Third-party services

We share personal data with the following service providers only to the extent necessary to operate the service. We do not sell your personal data to third parties, and we do not share it with advertisers.

• AWS (Amazon Web Services): our core infrastructure provider. Account and authentication data is managed in AWS Cognito. User-generated content, listing data, messages, ratings, and matches are stored in Amazon DynamoDB. The application backend is hosted on AWS Amplify. AWS may process data in the United States and other regions; see section 8 (International data transfers) below.
• Apple: authentication via Apple Sign In, and subscription billing and management through the App Store. Apple's privacy practices are governed by Apple's own privacy policy.
• Google: authentication via Google Sign In for users who choose that option. Google's privacy practices are governed by Google's own privacy policy.
• RevenueCat: subscription and entitlement management. RevenueCat receives subscription status signals and a user identifier to determine which features are available to each account.

6. Data retention

We retain your account and listing data for as long as your account is active or as needed to provide the service.

When you request account deletion, your personal data — including your Cognito account, profile, listings, matches, chat messages, and ratings — is deleted or anonymised unless retention is required for legal obligations, safety purposes, or the resolution of active disputes.

7. Your rights and choices

Depending on your location, you may have the following rights regarding your personal data:

• Access: request a copy or summary of the personal data we hold about you.
• Correction: update inaccurate or incomplete data. Most profile and listing information can be updated directly in the app.
• Deletion: request deletion of your account and associated data. See our Account Deletion page for instructions.
• Portability: request a copy of your data in a structured, machine-readable format where technically feasible.
• Objection or restriction: object to or ask us to restrict processing of your data in certain circumstances.
• Withdraw consent: where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, email jl@jl-intelligence.com. We will respond within 30 days. You also have the right to lodge a complaint with a supervisory authority in your country or, in Switzerland, with the Federal Data Protection and Information Commissioner (FDPIC).

8. Legal basis for processing (EEA and Switzerland)

Where the GDPR or Swiss nFADP applies, we process personal data on the following legal bases:

• Performance of a contract: processing necessary to provide the core Swapsease service — account creation, listing management, matching, messaging, and ratings.
• Legitimate interests: processing for safety and abuse prevention, service reliability monitoring, fraud detection, and product improvement, where those interests are not overridden by your rights and freedoms.
• Legal obligation: processing necessary to comply with applicable laws, regulations, or enforceable government requests.
• Consent: where we rely on consent for a specific processing activity, we will ask for it explicitly. You may withdraw consent at any time by contacting us.

9. International data transfers

Swapsease is operated from Switzerland, but your data may be processed in countries other than your own, including the United States, where our primary infrastructure provider (Amazon Web Services) operates data centres.

Where personal data is transferred outside Switzerland or the EEA to countries that do not offer an equivalent level of data protection, we rely on appropriate safeguards such as the Standard Contractual Clauses approved by the European Commission, or equivalent measures recognised under Swiss law, to ensure your data remains protected.

10. Children

Swapsease is not directed at children under the age of 13 (or the applicable minimum age in your jurisdiction). We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us at jl@jl-intelligence.com and we will delete it promptly.

11. Security

We use industry-standard practices to protect your data, including access controls, encrypted data transmission (TLS), and authentication managed by AWS Cognito. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

12. Changes to this policy

We may update this Privacy Policy as Swapsease evolves. Material changes will be communicated via an in-app notice or an updated effective date above. Continued use of the app after changes are posted constitutes acceptance of the revised policy.

13. Contact

For privacy requests, data subject rights requests, or any questions about this policy, contact us at jl@jl-intelligence.com.