Swappd Privacy Policy

1. Introduction

Swappd ("Swappd," "the App," "we," "our," or "us") is an iOS application that lets you visualize aftermarket car modifications — such as wheels, bumpers, and spoilers — on a vehicle using augmented reality (AR), and browse, save, and follow parts.

Swappd is operated by Oleksandr Gribov.

This Privacy Policy explains what information the App collects, why we collect it, how it is used, and the choices and rights you have. This is a disclosure of our data practices.

Swappd has no user accounts. There is no sign-up, no email/password, and no social login. When you first launch the App, an anonymous identifier is generated automatically so the App can function. As a result, we do not know who you are, and the information we hold is not tied to a real-world identity.

If you have questions about this Privacy Policy, you can contact us at:

2. Summary of What We Collect

In short, Swappd collects:

• An anonymous identifier (a Firebase Authentication user ID) generated on first launch.
• First-party usage analytics about how the App is used, along with basic device and app details.
• Crash diagnostics to help us fix bugs.
• Your in-app activity (items and builds you save, AR try-ons, price-alert subscriptions, waitlist requests, and votes), stored against your anonymous identifier.
• A push notification token, if you enable notifications.
• Featured Builds submissions you choose to send us (a photo of your car, car details, and an optional Instagram handle).

We do not collect your email, name, phone number, precise/GPS location, payment information, biometrics, or microphone/audio. See Section 12.

3. Information We Collect and Why

Anonymous Identifier

When you first open Swappd, the App automatically creates an anonymous user ID through Firebase Authentication. This identifier:

• is randomly generated and does not identify you personally
• lets the App work and lets your saved activity be stored and retrieved without an account
• is used to associate your in-app activity (such as saved items and votes) with your device.

Because this identifier is anonymous and there is no account, we generally cannot connect it to you as an individual.

Usage Analytics (First-Party Only)

We use Firebase Analytics to measure how our own App is used so we can improve it. This is first-party analytics only — we use it to understand usage of Swappd itself.

We do not use the Identifier for Advertisers (IDFA) or any advertising identifier.

We do not perform cross-app or cross-company tracking, and we do not track you across other companies' apps or websites.

We do not sell your data or share it with data brokers, and we do not use it for third-party advertising.

Analytics events describe interactions with the App, which may include: screens viewed, items viewed and saved, builds saved, AR sessions started, taps on buying/retailer links, votes cast, tutorials completed or skipped, and similar in-app actions.

Alongside these events, Firebase Analytics collects basic technical information:

• device model
• iOS version
• app version
• a country code derived from your App Store storefront region. This is the country associated with your App Store account — it is not GPS or device location.

Google's Firebase privacy information is available at: https://firebase.google.com/support/privacy

Crash Diagnostics

We use Firebase Crashlytics, which automatically collects crash reports when the App encounters an error. Crash reports may include device type, operating system version, app version, and technical stack traces. This helps us identify and fix bugs.

Your In-App Activity (Saved Data)

The App stores your activity in Firebase Cloud Firestore, keyed to your anonymous identifier, so it can be saved and retrieved within the App. This includes:

• items you view and save
• builds you save
• AR try-on events
• price-notification subscriptions for specific retailer listings
• product waitlist requests
• your votes in community polls (see Section 8).

Push Notification Token

If you enable notifications, the App collects a Firebase Cloud Messaging (FCM) push token associated with your device. We use this token to send the notifications you opt into — for example, price-drop alerts and product notifications. Notifications are optional and permission-gated; you can manage or revoke notification permission at any time in your device settings, and you can subscribe to or unsubscribe from individual listing price alerts in the App. See Section 6.

Featured Builds Submissions

If you choose to submit a "Featured Build," you provide a photo of your car, the car's year, make, and model, and optionally an Instagram handle. Photos are stored in Firebase Cloud Storage. The public nature of approved submissions and the optional handle are explained in Section 5.

4. Camera and Photos

Camera

Swappd uses your device camera to power the AR feature ("place virtual mods on your car").

Camera frames are processed entirely on your device using on-device machine learning (Apple CoreML).

Camera images and video are never uploaded to our servers.

We do not store photographs or video of your car captured during an AR session (this is separate from Featured Builds submissions you deliberately send us — see Section 5).

On-device processing is a deliberate privacy choice: the live camera feed stays on your device.

Photo Library (Write-Only)

The App's access to your Photos is write-only. When you choose to save an AR screenshot, the App writes that image to your Photo Library. The App does not read, browse, or upload your existing photo library.

5. Featured Builds — Public Content and the Optional Instagram Handle

The Featured Builds feature lets you submit your build to be shown to other users.

Submissions are moderated (approved, rejected, or later removed).

If your submission is approved, it is displayed publicly within the App, including the photo of your car, the car details (year/make/model), and — only if you chose to provide it — your Instagram handle.

Providing an Instagram handle is entirely optional. If you include one, understand that it will be shown publicly alongside your approved submission and may allow others to find your Instagram profile.

Requesting removal. You can request removal of a submission through the in-app deletion-request path. Once we process the request, the submission will no longer be displayed publicly in the App. To request removal you can also contact us at alex@swappd.app. Note that cached copies (for example, on a device that previously loaded the image) may persist for a period outside our control.

Other users can report or flag Featured Builds they believe are inappropriate, which helps us moderate content. The content rules governing submissions are set out in our Terms of Service.

6. Push Notifications

Notifications are optional and require your permission. With notifications enabled, you can subscribe to price alerts for specific retailer listings and to product notifications, and you can unsubscribe from these at any time. You can also turn off notifications entirely in your device settings, which revokes the permission.

7. Affiliate and Retailer Links

The App links out to third-party retailers. These links may include UTM/affiliate parameters (including the relevant item ID), and we may earn a commission when you make a purchase through them. These links are provided for your convenience. We do not control and are not responsible for third-party retailers' websites, content, products, pricing, or privacy practices; their own terms and privacy policies apply once you leave the App. See our Terms of Service for the full affiliate disclosure.

8. Community Voting

Swappd runs weekly community polls. When you vote, we store your vote keyed to your anonymous identifier (so, for example, the same device is not counted twice). Votes are not tied to a real-world identity.

9. How We Use Information

We use the information described above to:

• operate, maintain, and provide the App and its features
• save and retrieve your in-app activity
• measure and improve performance, stability, and feature usage (first-party analytics)
• diagnose and fix crashes and bugs
• send notifications you have opted into
• display approved Featured Builds and moderate submitted content.

We do not sell or rent your data, and we do not use it for cross-app advertising.

10. Third-Party Services and Processors

Google Firebase (Processor)

Swappd relies on Google Firebase as its backend service provider, which processes data on our behalf. The Firebase services we use are:

• Firebase Authentication (anonymous)
• Firebase Cloud Firestore (saved activity)
• Firebase Cloud Storage (Featured Builds photos)
• Firebase Analytics (first-party usage analytics)
• Firebase Crashlytics (crash diagnostics)
• Firebase Cloud Messaging (push notifications).

Google processes this information in accordance with Google's Privacy Policy: https://policies.google.com/privacy

Other Third Parties

Image loading (SDWebImage). The App uses SDWebImage to load and locally cache images on your device. This caching happens on-device and does not send your data to a third party.

Instagram sharing. Sharing to Instagram is user-initiated. When you share, only the image you chose to share is sent to Instagram; no additional metadata is attached by Swappd. Instagram's own terms and privacy policy govern what happens after you share.

Apple StoreKit. Swappd has no in-app purchases. StoreKit is used only to read your App Store storefront country (see Section 3).

11. International Data Transfers

Swappd is available worldwide, and the data described in this Policy is processed and stored on Google Cloud / Firebase infrastructure, which may be located in countries other than the one you live in, including the United States. Where data is transferred internationally, Google provides safeguards for such transfers as described in Google's Privacy Policy and data processing terms. By using the App, you understand that your information may be processed in these locations.

12. What We Do Not Collect

Swappd does not collect:

• email address
• name
• phone number
• precise or GPS location
• payment or financial information
• biometric information; or
• microphone/audio.

The only country-level signal we receive is the storefront country code described in Section 3, which is not device location.

13. Data Retention

We keep information only as long as needed for the purposes described in this Policy.

Anonymous identifier and saved activity (saved items and builds, AR try-on events, price-notification subscriptions, waitlist requests, and votes in Firestore): retained while you continue to use the App, with no fixed expiry, and deleted when you request deletion or when the data is no longer needed to operate the App.

Featured Builds photos and details (Cloud Storage / Firestore): retained while the submission remains in the App, and removed after a valid removal request is processed. Rejected submissions are retained for no longer than 90 days after the moderation decision.

Push notification token: retained while notifications are enabled and refreshed by the device; removed or allowed to expire after notifications are disabled.

Analytics data (Firebase Analytics): retained for up to 14 months in line with our configured Firebase retention setting (subject to Google's default and maximum retention windows).

Crash diagnostics (Crashlytics): retained for approximately 90 days, in line with Firebase's standard retention period.

Where retention is governed by Google/Firebase defaults, those periods apply in addition to the windows above.

14. Your Privacy Rights

Because Swappd uses an anonymous identifier and has no user accounts, we typically cannot link the data we hold to you as an identifiable person, and we may be unable to locate data tied to a specific individual without information that identifies the relevant device or submission.

Depending on where you live, you may have rights regarding your personal data, which can include the right to access, correct, delete, or restrict processing of your data, the right to object to certain processing, and the right to data portability.

Featured Builds. You can request removal of a submission through the in-app deletion-request path or by contacting alex@swappd.app.

Other data. To make a privacy request, contact us at alex@swappd.app. To help us locate the relevant data, you may need to provide information identifying your device or the specific content. We will respond consistent with applicable law.

California (CCPA/CPRA). We do not sell or share your personal information for cross-context behavioral advertising, and we do not use advertising identifiers. California residents have the right to know, delete, and correct personal information and the right not to be discriminated against for exercising these rights, subject to the limitations above for anonymous data.

EU/UK (GDPR / ePrivacy). If you are in the European Economic Area or the United Kingdom, you may have stronger rights under the GDPR and ePrivacy rules, including the rights listed above and the right to lodge a complaint with your local supervisory authority. Our legal basis for processing is generally our legitimate interest in operating and improving the App, and your consent where required (for example, for optional notifications).

This note is provided for awareness; it does not change how the App functions.

15. Children's Privacy

Swappd is a general-audience app intended for users 13 years of age or older. It is not directed to children under 13, and we do not target, market to, or knowingly collect personal information (including the anonymous identifier described in Section 3) from children under 13.

If you are under 13, please do not use the App or submit any content. If you are a parent or guardian and believe a child under 13 has used the App or provided personal information, please contact us and we will take reasonable steps to delete the relevant information.

Where stronger protections apply to minors under local law (for example, the GDPR's digital-consent age, which ranges from 13 to 16 depending on the country), those protections apply to the extent required.

16. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will post the updated policy with a new "Last updated" date. Your continued use of the App after an update constitutes acceptance of the revised Policy.

17. Contact

Questions or requests regarding this Privacy Policy: