Section 1
Introduction
SwapMate (Pty) Ltd ("SwapMate", "we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application.
We comply with the Protection of Personal Information Act (POPIA) of South Africa and other applicable data protection laws. SwapMate acts as the responsible party for the processing of your personal information.
Section 2
Information We Collect
Personal Information
- Name and contact details (email, phone number)
- Profile information, biography, and photos
- Location data (with your explicit consent)
- Payment information (processed securely by Paystack)
- Communication preferences and consent records
Usage Information
- App usage patterns, feature interactions, and preferences
- Device information and identifiers
- Log data and analytics
- Interaction with other users (messages, swaps, favourites)
- Gamification data (badges, leaderboard rankings, swap counts)
Company Information (B2B Accounts)
- Company name, description, and contact details
- Team member roles and permissions
- Company audit trail and activity logs
- Company items and analytics data
Section 3
How We Use Your Information
- To provide and maintain our services
- To process transactions, swaps, and boost purchases
- To communicate with you about your account
- To improve our app and develop new features
- To personalise your experience
- To calculate and display gamification metrics (badges, leaderboards)
- To generate and validate exchange codes during physical swap handovers
- To facilitate location-based item discovery
- To ensure safety and prevent fraud
- To comply with legal obligations under POPIA and other laws
Section 4
Location Services
SwapMate uses location data to enable features such as nearby item discovery, distance calculations, and location-based search. Location access requires your explicit consent and can be revoked at any time through your device settings.
- Location data is used solely for platform functionality
- We do not track your location in the background
- Approximate location (city/suburb level) may be displayed on your listings
- You may use the app without location services (with reduced functionality)
Section 5
Exchange Code Data
When a swap meeting is confirmed, SwapMate generates unique exchange codes for both parties to verify the physical handover. The following applies to this data:
- Exchange codes are stored on the swap record and are only visible to the two parties involved
- Codes are generated at meeting confirmation and are invalidated once the swap is completed
- Code verification timestamps are retained as part of the swap audit trail
- We do not share exchange code data with any third parties
Section 7
International Data Transfers
SwapMate uses Google Firebase to store and process your personal information. Firebase infrastructure operates on servers located in the United States (us-central1 region). This means your personal information is transferred to and stored outside of South Africa.
In accordance with Section 72 of POPIA, by registering for and using SwapMate you consent to this cross-border transfer of your personal information.
We ensure appropriate safeguards are in place through Google LLC's standard contractual clauses and data processing agreements, which provide protections equivalent to those required under POPIA.
- Data is stored in Google Firebase (us-central1, United States)
- Google LLC is bound by standard contractual clauses for international transfers
- Payment data is processed by Paystack, whose servers are located in Nigeria and South Africa
- You may withdraw consent at any time by deleting your account via Settings
Section 8
Your Rights Under POPIA
As a data subject under POPIA, you have the right to:
- Access your personal information
- Correct inaccurate information
- Request deletion of your data
- Object to processing of your data
- Withdraw consent at any time
- Data portability (export your data)
- Lodge a complaint with the Information Regulator
You can exercise these rights at any time through the Settings screen in the app, or by contacting our Information Officer at privacy@swapmate.co.za.
Section 9
Consent Management
SwapMate records your consent for data processing activities. You may manage your consent preferences in Settings, including:
- Location tracking consent
- Marketing communication preferences
- Analytics and usage tracking
Withdrawing consent for essential processing may limit your ability to use certain features of the app.
Section 10
Data Security
We implement appropriate technical and organisational measures to protect your personal information, including:
- Encryption of data in transit and at rest
- Secure authentication via Firebase Authentication
- Firestore security rules restricting data access
- Rate limiting to prevent abuse
- Regular security assessments
- Access controls and monitoring
Section 11
Data Retention
We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law.
- Active accounts: data retained while account is active
- Deleted accounts: data removed within 30 days (grace period for cancellation)
- Transaction records: retained for 5 years as required by tax law
- Audit logs: retained for 2 years for security purposes
Section 12
Children's Privacy
Our services are not intended for children under 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately and we will take steps to delete the information.
Section 13
Third-Party Services
Our app integrates with the following third-party services:
- Firebase (authentication, database, storage — servers in the United States)
- Paystack (payment processing)
- WhatsApp (optional contact feature for premium users)
- Expo (push notifications and app delivery)
Each of these services has its own privacy policy. We encourage you to review their policies.
Section 14
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via in-app notification and update the "Last updated" date. Continued use of the app after changes constitutes acceptance.
Section 15
Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us: