Privacy policy

Your email address — the only thing we ask for. No name, no phone number, no date of birth.

A few technical details captured automatically at signup: which page or link you arrived from (e.g. Instagram, a friend's invite), and your IP address — which we hash before it ever touches our database, so we never store it in readable form.

If you were invited, the referral code you arrived with, so we can credit whoever sent you.

One cookie is set no matter what: if you land on a link from a friend (?ref=…), we remember their invite code for 30 days so they get credit when you confirm your email. It's strictly functional — no tracking ID, nothing shared with anyone.

A short-lived cookie is also set for a few minutes during the "confirm your email" step, purely so a bot or email scanner can't confirm your address for you.

Everything else — product analytics and session replay — only loads if you say yes in the cookie banner. Analytics counts page views and which buttons get tapped, keyed to a random ID, never your email. Session replay masks every input, including your email address. You can change your mind any time from "Cookie preferences" in the footer.

Sending you the confirmation link, your live queue position, your personal invite link, and — if you opted in — The Weekly Swipe, our weekly plain-English market read.

Working out the waitlist ranking (queue position moves up when people you invite confirm their email).

Basic abuse prevention: rate-limiting signups and filtering throwaway email addresses, so the list stays real.

We don't sell your data, ever. It's shared only with the vendors that run the waitlist for us, strictly to do that job:

For as long as you're on the waitlist. If Swyva launches and you bring your account into the app, your waitlist email links to your app account. If you ask us to delete your data, we will — see below.

Ask us what we hold on you, correct it, or delete it entirely — email privacy@swyva.com and we'll handle it by hand (there's no self-serve delete button yet, since it's just the two of us).

Opt out of marketing email (The Weekly Swipe) any time — email us, or use the unsubscribe link on the newsletter itself.

Withdraw analytics/replay consent any time from "Cookie preferences" in the footer.

There's no password to steal — we only ever ask for your email. The database has no public access of any kind; every read and write goes through a locked-down server key. IP addresses are hashed, not stored raw. Traffic to and from the site is encrypted (HTTPS).

Swyva isn't directed at, or intended for, anyone under 18.

If what we collect or how we use it changes in any meaningful way, we'll update this page and move the "last updated" date at the top.

Questions, requests, or anything else about your data: privacy@swyva.com.