Privacy Policy

Last updated: March 12, 2026 · v1

1. Data Controller

2. Introduction

SeekSwap SRL ("we," "us," "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share your information when you use the SeekSwap mobile application.

We process your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR"), the Romanian Law no. 190/2018 implementing the GDPR, and other applicable data protection legislation.

3. Data We Collect

3.1 Data You Provide

• Account Information: Full name, email address, profile photo (optional).
• Item Listings: Titles, descriptions, photos, categories, condition, location.
• Messages: Content of messages exchanged with other Users.
• Swap Confirmation Photos: Photos uploaded to confirm receipt of Items.
• Reviews: Ratings and comments for other Users.
• Reports: Information when reporting a User or flagging content.

3.2 Data Collected Automatically

• Device Information: Device type, OS, app version, device identifiers.
• Usage Data: Features used, pages viewed, search queries.
• Log Data: IP address, access times, error logs.

3.3 Data We Do NOT Collect

SeekSwap does not collect: financial or payment information, government-issued IDs, biometric data, or precise GPS location (only user-provided city/region).

4. Legal Basis for Processing

• Contract Performance (Art. 6(1)(b)): Processing account data, listings, messages, and swap data to provide the service.
• Legitimate Interests (Art. 6(1)(f)): Usage data and device info to improve the platform and prevent fraud.
• Consent (Art. 6(1)(a)): Optional marketing communications. Withdrawable at any time.
• Legal Obligation (Art. 6(1)(c)): Compliance with applicable laws.

5. How We Use Your Data

• Provide, operate, and maintain the platform.
• Facilitate communication and enable Swaps.
• Display your listings to other Users.
• Send service notifications (swap proposals, messages, confirmations).
• Prevent fraud and Terms violations.
• Improve and personalize your experience.
• Generate anonymized analytics.
• Comply with legal obligations.

6. Data Sharing

6.1 With Other Users

Your display name, profile photo, item listings, reviews, and messages are visible to other Users. Swap confirmation photos are visible only to the two participants.

6.2 With Service Providers

• Supabase (Supabase Inc.): Cloud database, authentication, and file storage. Data stored within the EU.
• Expo / React Native: Application framework. No personal data transmitted in production.

All providers are bound by GDPR-compliant data processing agreements.

6.3 Legal Requirements

We may disclose data if required by law, court order, or to protect rights and safety.

6.4 What We Never Do

We never sell your data. We never share data with advertisers. We never use data for automated decision-making with legal effects.

7. Data Retention

• Active accounts: Data retained while account is active.
• Deleted accounts: Personal data deleted within 30 days. Anonymized swap data may be retained. See our Account Deletion page for details.
• Messages: Retained 12 months after swap completion, then deleted.
• Log data: Retained 90 days for security.
• Legal holds: Data may be retained longer if required by law.

8. Your Rights Under GDPR

• Right of Access (Art. 15): Request a copy of your personal data.
• Right to Rectification (Art. 16): Correct inaccurate data.
• Right to Erasure (Art. 17): Request deletion ("right to be forgotten").
• Right to Restriction (Art. 18): Limit processing of your data.
• Right to Data Portability (Art. 20): Receive data in machine-readable format.
• Right to Object (Art. 21): Object to legitimate interest processing.
• Right to Withdraw Consent (Art. 7(3)): Withdraw consent at any time.

Contact privacy@seekswap.com to exercise your rights. We respond within 30 days. You may also lodge a complaint with the Romanian ANSPDCP.

9. Data Security

• Encryption in transit (TLS/SSL) and at rest.
• Secure authentication with hashed passwords.
• Row-level security on all database tables.
• Regular security assessments.
• Access controls limiting employee access.

No method of electronic storage is 100% secure. We cannot guarantee absolute security.

10. International Transfers

Data is primarily stored within the EU. If transferred outside EU/EEA, we ensure safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission.

11. Children's Privacy

SeekSwap is not intended for individuals under 18. We do not knowingly collect data from children. If discovered, such data will be immediately deleted.

12. Changes to This Policy

We may update this policy. Material changes will be notified through the app or email.

13. Contact Us