Privacy Policy

Effective date: October 2, 2026 · Last updated: October 9, 2026

This policy explains what SwapRound LLC ("SwapRound," "we") collects when you use the SwapRound app and swapround.app, why, who we share it with, how long we keep it, and the choices you have. It applies to members, website visitors, waitlist sign-ups, and anyone who contacts us.

1. What we collect

Information you give us

• Account details: first and last name, email address, mobile phone number, password (stored in encrypted form), date of birth (used only to confirm you are 18 or older), ZIP code, and the area you belong to. You may also add a profile photo and a short bio.
• Sign-in with Google or Apple: if you use one, we receive your name and email address from that provider.
• Identity verification (optional): a photo of a government-issued ID. We do not ask for a selfie and we do not use facial recognition. See Section 5 for how quickly we delete it.
• Listings: photos, title, description, category, condition, size, age range, brand, and price.
• Messages: in-app messages between you and other members.
• Reviews and reports: ratings and reviews you leave, and reports you make about listings, messages, or members.
• Return requests and disputes: your description, photos, and anything else you send us about a trade.
• Support requests: what you send us when you contact support.
• Payment and payout details: handled by Stripe (and, for Android subscriptions, Google Play). We do not receive or store your full card number or bank account number. We receive payment confirmations, the card brand and last four digits, and payout status.
• Agreement records: which version of each policy you accepted, when, and how.

Information we collect automatically

• device type, operating system, app version, and IP address;
• approximate location derived from your IP address or ZIP code;
• how you use the app, such as screens viewed, searches, listings viewed, and offers made;
• crash reports and diagnostic logs; and
• push notification tokens, if you allow notifications.

Information from others

• verification and fraud signals from Stripe and our phone verification provider;
• reports about you from other members; and
• the name and email from Google or Apple if you sign in with them.

2. How we use it

We use personal information to:

• create and run your account and confirm you are 18 or older;
• show you listings in your area;
• process offers, payment holds, charges, fees, refunds, returns, and payouts;
• run Neighbor Points, Round+, and referrals;
• review listings before they go live, check them against published recall data, and screen images;
• fill in listing details from your photos when you use the listing assistant;
• scan messages automatically to block phone numbers, emails, and links, and to flag abusive language;
• verify identity when you choose to, and prevent fraud and abuse;
• provide support and handle disputes and return requests;
• send you account and trade messages, and marketing messages if you choose to receive them;
• keep members safe and enforce our rules;
• understand how the app is used so we can improve it; and
• meet legal obligations, including tax reporting and responding to lawful requests.

3. Who we share it with

Other members. Other members see your display name (first name and last initial), profile photo, area, badges, ratings, reviews, and listings. Your details are hidden from a buyer until you accept their offer. After an offer is accepted, the other member sees what they need to complete the handoff, and you can message each other.

Service providers that work for us, each limited to what they need:

• Stripe (payments, payouts, identity and risk checks);
• Google Play (Android subscriptions);
• Supabase (hosting and database);
• Twilio (text messages and phone verification);
• SendGrid (email);
• Google Cloud Vision (image screening and the listing assistant);
• Expo and Firebase Cloud Messaging (push notifications);
• Amplitude (app usage analytics);
• Sentry (crash reporting);
• Cloudflare (website hosting and security);
• Google and Apple (if you sign in with them).

Legal and safety. Law enforcement, regulators, or others where the law requires it, or where we believe disclosure is needed to prevent harm, fraud, or a breach of our rules.

Business transfers. A buyer or successor as part of a merger, financing, or sale of assets, subject to this policy.

4. What we do not do

• We do not sell your personal information.
• We do not use it for targeted advertising.
• We do not share or sell precise location data.
• We do not share mobile information with third parties or affiliates for marketing or promotional purposes. All the categories of sharing described in this policy exclude text-messaging opt-in data and consent; this information will not be shared with any third parties. (Our text-message provider, Twilio, processes your number only to deliver our messages.)
• We do not use your personal information to train large language models, and our contracts do not allow our service providers to do so.

4A. Text messages

We use your mobile number to send you one-time verification codes and, if you choose, text updates about your trades. We do not send marketing texts. Message frequency varies with your activity, and message and data rates may apply. Reply HELP for help or STOP to stop texts at any time. We keep a record of when you agreed to receive texts and when you opted out, so we can honor your choice. Full program terms are in Section 14 of our Terms of Service.

5. How long we keep it

• ID photos: deleted as soon as our team makes a verification decision. We keep only the result, the date, and who reviewed it.
• Account information: while your account is open. When you delete your account, we delete or de-identify it within 30 days, except as listed below.
• Trade and payment records: 7 years after the trade, for tax, accounting, chargeback, and legal purposes, even after your account is deleted.
• Agreement records (which policies you accepted and when): for as long as we might need to show what you agreed to, even after your account is deleted.
• Messages: 90 days after the related trade ends, or longer if connected to a dispute, return request, report, or investigation.
• Safety reports and enforcement records: 3 years, or longer if needed for an ongoing matter.
• Listing photos: deleted when you delete the listing or your account, except copies kept in backups for up to 30 days.

6. Your choices and rights

You can review and edit your profile, change notification settings, block other members, and delete your account in Settings. Deleting your account removes your profile and listings, cancels open offers and your Round+ membership, and forfeits your Neighbor Points.

Connecticut residents, and residents of other states with similar laws, can ask us to:

• confirm whether we process their personal information, and access it;
• correct it;
• delete it;
• get a portable copy; and
• opt out of any sale, targeted advertising, or profiling that produces legal or similarly significant effects. We do none of these today.

We will not treat you differently for using these rights.

To make a request, use Settings → Request my data or email admin@swapround.app. We will verify your identity before acting and respond within 45 days. If we decline your request, you can appeal by replying to our decision. We will answer the appeal within 60 days and tell you how to contact the Connecticut Attorney General if you still disagree.

7. Children

SwapRound is for adults. Accounts are limited to people 18 and older, and the Services are not directed to children. We do not knowingly collect personal information from children. Please do not include a child's face, full name, birth date, or school in a listing photo or description. If we learn a child has created an account, we will close it and delete the information.

8. Security

We use access controls, encryption in transit, and limited administrative access. ID photos can be seen only by the team members who review them. No system is perfectly secure. If you believe your account has been compromised, contact admin@swapround.app right away. If a data breach affects you, we will notify you as the law requires.

9. Where we process data

We process data in the United States. SwapRound is intended for U.S. residents only.

10. Stripe

When you provide information for payments or payouts, Stripe receives it and handles it under the Stripe Privacy Policy. Stripe may obtain information from credit agencies to verify your identity.

11. Changes to this policy

We will post updates here with a new effective date. For material changes, we will tell you in the app or by email before they take effect.

12. Contact

SwapRound LLC, 304 Main Ave - 453, Norwalk, CT 06851 · admin@swapround.app