The short version. Swipexy reads your photo library so you can sort and delete media. All analysis (duplicates, scene descriptions, swipe decisions) happens on your device. The app has no account system and no servers of its own. The only data that leaves your phone is anonymous usage and performance telemetry collected by Google Firebase, and purchase information handled by Apple. We never sell your data and never upload your photos or videos.
1. Who we are
Swipexy (the "App") is published by atvrd ("we", "us", "our"). We are the data controller for the personal data described in this policy. Questions and requests can be sent to support@atvrd.dev.
This policy applies to the iOS version of Swipexy distributed through the Apple App Store and to this website.
2. Data that stays on your device
The App asks for the following iOS permissions. Everything accessed through them is processed locally and is never transmitted to us or to any third party by the App.
| Permission | Why we ask |
|---|---|
| Photos (read) | To show your photos and videos, group them into piles, detect duplicates and let you swipe to keep or delete. You can grant access to all photos or only selected ones. |
| Photos (add) | To save an item back to your library, for example when you move something out of Secret Folder. |
| Camera and microphone | Only when you choose to capture a photo or record a video directly into Secret Folder. |
| Face ID / Touch ID | To unlock Secret Folder. Biometric data is handled entirely by iOS; the App only receives a yes-or-no result. |
Duplicate detection. The App computes compact fingerprints (perceptual and byte hashes) of your photos to find near-identical items. These fingerprints are stored in a cache inside the App's own container on your device so later scans are faster. They cannot be turned back into images.
Scene descriptions. Short captions such as "a dog on a beach" are produced by Apple's Vision framework and, where available, Apple Intelligence on-device models. No image data is sent to Apple or to us for this feature.
Secret Folder. Items you move into Secret Folder are copied into the App's private storage on your device and excluded from iCloud and iTunes backups. Your PIN is never stored in plain text: only a salted hash is kept in the iOS Keychain. If you delete the App, Secret Folder contents are permanently deleted with it, and we cannot recover them.
Settings and preferences. Language, haptics, onboarding state and similar preferences are stored locally on your device.
3. Data that leaves your device
We use two services from third parties. Neither receives your photos, videos, file names, captions or Secret Folder contents.
Google Firebase Analytics and Firebase Performance Monitoring (Google LLC). These SDKs automatically collect:
- App events such as first open, session start, screen views and in-app purchase events;
- Technical information: device model, iOS version, App version, language, time zone, approximate region derived from IP address (the IP address itself is not stored by Firebase Analytics);
- A random app-instance identifier and the Apple identifier for vendors (IDFV) used to count installs and sessions;
- Performance data such as app start time, screen rendering and the duration of network requests made by the SDK itself.
This data is pseudonymous: we cannot use it to identify you by name, email or phone number, and we do not attempt to. We use it to understand which features are used, to find crashes and slow screens, and to improve the App. Google processes this data on our behalf under Google's Firebase privacy and security terms.
Apple StoreKit (Apple Inc.). Subscriptions are purchased through your Apple ID. Apple processes your payment and shares with the App only the subscription status and transaction identifiers it needs to unlock premium features. We never see your payment card, billing address or Apple ID password. Apple's handling of purchase data is described in Apple's Privacy Policy.
What we do not do. The App does not use the advertising identifier (IDFA), does not show ads, does not track you across other companies' apps or websites, and does not ask for App Tracking Transparency permission because there is nothing to track.
4. Data you send us
If you email us, we receive your email address and whatever you include in the message. We use it only to reply and to fix the problem you reported, and we keep the correspondence for as long as needed to do so.
5. Legal bases (EEA, UK and Switzerland)
- Performance of a contract (Art. 6(1)(b) GDPR): providing the App and premium subscriptions you purchase.
- Legitimate interests (Art. 6(1)(f) GDPR): pseudonymous analytics and performance monitoring to keep the App working well and to decide what to improve. You can object at any time (see section 8).
- Consent (Art. 6(1)(a) GDPR): iOS permissions such as Photos, Camera and Face ID, which you can withdraw in Settings at any time.
6. Retention
- Photo data, fingerprints, Secret Folder items and preferences remain on your device until you delete them or uninstall the App.
- Firebase Analytics event data is retained for up to 14 months; identifier-level data is retained for up to 14 months from the last activity. Aggregated reports may be kept longer.
- Purchase records are retained by Apple according to Apple's policies.
- Support emails are kept for up to 2 years after the last message.
7. Sharing and international transfers
We share data only with the processors named in section 3 (Google and Apple), with professional advisers when required, or when the law obliges us to. We do not sell personal data and do not share it for cross-context behavioural advertising.
Google and Apple may process data in the United States and other countries. Where required, transfers from the EEA, UK or Switzerland rely on the EU-US Data Privacy Framework and Standard Contractual Clauses.
8. Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict or object to the processing of your personal data, to data portability, and to lodge a complaint with a supervisory authority. Residents of California and certain other US states have similar rights, including the right to know and to delete. We do not discriminate against you for exercising them.
Because the analytics data we hold is pseudonymous and not linked to your identity, the most effective way to stop it is to uninstall the App. To exercise any other right, email support@atvrd.dev; we answer within 30 days.
You control the App's access to your photos, camera, microphone and Face ID in iOS Settings → Privacy & Security. Turning a permission off may limit some features.
9. Deleting media
When you confirm a deletion, the App asks iOS to delete the item and iOS shows its own confirmation. Deleted items move to the Photos app's Recently Deleted album for about 30 days before iOS removes them permanently. Review your choices before confirming; we cannot restore media you have deleted.
10. Security
Your media never leaves your device, which removes most risk by design. The App relies on iOS sandboxing, the Keychain for PIN hashes, biometric authentication for Secret Folder, and encrypted connections (TLS) for the telemetry described above. No method of storage is completely secure, so keep iOS up to date and use a device passcode.
11. Children
The App is not directed at children under 13 (or the higher minimum age in your country) and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, contact us and we will delete it.
12. Changes to this policy
We may update this policy when the App or the law changes. The effective date at the top will be updated, and material changes will be highlighted in the App. The current version is always available at swipexy.atvrd.dev/privacy.
13. Contact
atvrd · support@atvrd.dev