Swypit ("we", "our", "us") operates the Swypit mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our App.
By using Swypit, you agree to the collection and use of information as described in this policy.
1. Information We Collect
1.1 Account Information
When you create an account, we collect:
- Email address (used for login and verification)
- Name and display name
- Profile photo (optional)
- Phone number (optional)
- Date of birth and gender (optional)
1.2 Vendor Information
If you register as a vendor, we additionally collect:
- Store name, logo, bio, and category
- Business location and operating hours
- Payment details for receiving payouts (bank account or mobile money information)
1.3 Transaction Data
When you make or receive purchases, we collect:
- Order details (products, quantities, amounts, payment method)
- Payment references
- Delivery information
- Wallet balance and transaction history (for vendors)
1.4 User-Generated Content
- Messages sent between buyers and vendors
- Comments and reviews on products
- Product listings, images, and videos (vendors)
- Reports submitted about content or users
1.5 Device and Technical Data
- Device identifier (for trusted device / remember-me functionality)
- Device name, platform, and operating system version
- Push notification token (for sending you notifications)
1.6 Usage Data
- Products you view, like, save, or share
- Vendors you follow
- Interaction timestamps
2. How We Use Your Information
| Purpose | Data Used |
|---|---|
| Account creation and authentication | Email, password, device info |
| Processing orders and payments | Transaction data, payment details |
| Sending verification codes (OTP) | Email address |
| Push notifications | Push token, device info |
| In-app messaging | Messages, media attachments |
| Personalising your feed | Views, likes, follows, saves |
| Vendor payouts | Bank / mobile money details |
| Fraud prevention and security | Device fingerprint, login activity |
| Customer support and dispute resolution | Order data, messages, reports |
3. Third-Party Services
We share data with the following service providers, solely to operate the App:
| Service | Purpose | Data Shared |
|---|---|---|
| Paystack | Payment processing | Email, payment amounts, bank/mobile money details |
| SendGrid | Transactional emails (OTP codes) | Email address |
| Cloudinary | Image and video hosting | Uploaded media files |
| Expo / Firebase | Push notification delivery | Push tokens, notification content |
| Render | Server and database hosting | All stored data (encrypted at rest) |
We do not sell, rent, or share your personal information with third parties for advertising or marketing purposes.
4. Data Retention
- Account data: Retained while your account is active. When you delete your account, your personal data is removed and your public content (e.g. comments) is anonymised.
- Transaction data: Retained for the duration required by applicable financial regulations.
- Messages: Retained while both conversation participants have active accounts.
- Verification codes: Automatically expire after 5 minutes.
5. Data Security
We implement appropriate security measures to protect your data, including:
- Passwords are hashed using bcrypt (never stored in plain text)
- Authentication via JWT tokens with automatic expiry and rotation
- Webhook signature verification for payment events
- Rate limiting on authentication endpoints
- Input validation and sanitisation on all endpoints
- HTTPS encryption for all data in transit
6. Your Rights
You have the right to:
- Access your personal data via your profile and order history
- Update your account information at any time
- Delete your account, which removes your personal data and anonymises your public content
- Opt out of push notifications via your device settings
To exercise these rights, contact us at support@swyp.it.com or use the in-app settings.
7. Children's Privacy
Swypit is not intended for use by anyone under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us so we can delete it.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes through the App or via email. Your continued use of the App after changes constitutes acceptance of the updated policy.
Questions about your data?
Reach our team — we typically respond within 48 hours.
support@swyp.it.com