Privacy Policy

Swapset · Last updated 31 August 2026

The short version: we hold as little about you as we can get away with, and none of it is sold, shared or used for anything but running the app.

What we collect

A 6-character code that identifies you, an optional name of up to 12 characters if you set one, and — if you subscribe — your tracked collections and your photos. That is the whole list. No email is required to use the app, there is no analytics or tracking in the free version, and the code is random: it says nothing about you.

If you don't subscribe

Nothing leaves your phone. Your collections and photos are stored on the device and are never uploaded, which also means we cannot recover them if the phone is lost, reset or replaced. This is deliberate, and it is the honest reason the subscription costs anything.

If you subscribe

Your collections are stored as a list of item numbers and how many of each you have — a few kilobytes. Your photos are stored in your own account. Photos are never shown to another person: when you compare with a friend, both sides of the screen are drawn with your photos, and theirs never leave their account.

What friends can see

Someone who has your code can add you, and that puts your code and name in their list. They see nothing else. A collection becomes visible to friends only when you turn sharing on for that specific collection, and even then they see which items you have spare — never your photos, and never how many of anything you have beyond "one to spare".

Deleting your data

Email us and we'll delete everything held for your account — collections, photos and your directory entry — within 30 days. If you've never subscribed there is nothing on our side to delete; removing the app removes the lot.

Kids Mode, for parents

Kids Mode is a setting on a single device — turn it on for a child's tablet and leave a parent's phone as it is. Turning it on or off both require answering a simple multiplication question first, so a young child can't switch it by themselves.

With Kids Mode on, the app never contacts our servers at all. It doesn't create an account, it doesn't generate the 6-character code described above, and it never signs the device in — none of that happens until Kids Mode is turned off. Tracking, photos, collections and celebrations all keep working normally; what disappears is everything social: friends, the device's code, sharing, comparing, spare alerts and reporting, and the option to subscribe.

In short: while Kids Mode is on, we collect nothing at all from that device, and nothing leaves it.

Who else handles this data

Subscriber data — collections, photos, the code directory — is stored using Google Firebase (Cloud Firestore and Cloud Storage), Google's backend platform. Google processes this data on our behalf, under its own security and confidentiality commitments, and does not use it for its own purposes. We don't use any advertising or analytics SDKs, so no data is collected or shared for advertising, and none is sold.

Your rights

Wherever you are, you can ask us at any time to see what we hold about your account, correct it, or delete it — see "Deleting your data" above. If you're in the UK or EU, this also covers your rights under the GDPR: access, rectification, erasure, restriction of processing, data portability, and objection to processing. We process subscriber data to run the service you've signed up for (contract) and to answer support requests (legitimate interest); nothing is processed for marketing. If you're unhappy with how we've handled a request, you can complain to your local data protection authority.

Changes to this policy

If this policy changes, the updated version will be published at this same address with a new "last updated" date above.

Getting in touch

For any question about this policy, or to request deletion of your data, contact cassiolemos.app@outlook.com.au.