Privacy Policy

Who we are

SwipeWise helps you track credit-card rewards and choose the best card for each purchase. This policy explains what data we collect, why, and the choices you have. It is written to align with India’s Digital Personal Data Protection Act, 2023 (DPDP Act).

What we collect

We only collect what the app needs to work. See the categories below.

• Account & identity: Name; Email address or mobile number; Password (stored encrypted, never in plain text); Profile photo (optional)
• Card details you add: Card issuer & product (e.g. HDFC Regalia); Last 4 digits, name on card, expiry — optional, only as labels; Credit limit & billing/statement date
• Transactions: Entries you add manually (merchant, amount, date, category); Transactions parsed from statement PDFs you choose to upload
• Usage & device data: Pages viewed and features used; Device, browser and approximate region; Core Web Vitals and page performance; Diagnostic/crash logs
• Data we derive: Spending analytics; Reward valuations; Card recommendations

How we use your data

• Provide reward tracking, spend analytics and card recommendations
• Create, secure and support your account
• Improve and debug the product
• Detect and prevent fraud or misuse
• Send service messages you have asked for

Google account data

This section applies only when you choose "Continue with Google". Google authentication is handled by Google and Supabase; using email or mobile sign-in does not give SwipeWise access to Google account data. SwipeWise use and transfer of Google user data adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• Access: We request only your basic Google profile name and email address. We do not request access to Gmail, Google Drive, Calendar, Contacts, payment data or your Google password.
• Use: We use your name and email only to create your SwipeWise account, sign you in, identify your account and help keep it secure.
• Storage: We store your name, email address and an internal account identifier while your SwipeWise account is active. Authentication records are handled by Google and Supabase and are protected through access controls.
• Sharing: We do not sell Google account data or share it with advertisers. It is shared only with Google, Supabase and the service processors listed in this policy when needed to authenticate, host, secure or operate SwipeWise.
• Deletion and control: You can revoke SwipeWise access from your Google Account permissions at any time, which stops future Google sign-in access. Revoking access does not by itself delete data already provided to SwipeWise. To delete it, close your SwipeWise account or email privacy@swipewise.in; we remove personal data within 30 days unless law requires longer retention.

Analytics and marketing choices

PostHog, Microsoft Clarity and Vercel Analytics are treated as essential product analytics and remain active to measure reliability, usage and performance. Marketing and other non-essential processing are combined into one optional preference, are off by default, and can be changed from Data & Consent or Security Settings. SwipeWise does not currently use a marketing provider.

What we do NOT do

• We never ask for your full card number, CVV or PIN
• We do not sell your personal data
• We do not share your data with advertisers
• We do not connect to your bank accounts or move money

Who we share it with

We share data only with processors that help us run the service, under contract, and only as needed:

• Supabase — Authentication and encrypted database hosting
• PostHog — Essential product analytics, diagnostics and Web Vitals
• Microsoft Clarity — Essential product-usage analytics
• Vercel — Application hosting and essential operational web analytics
• Google — Only if you choose "Continue with Google" sign-in

Data retention

We keep your data while your account is active. When you delete your account we remove your personal data within 30 days, except where the law requires us to keep certain records longer.

Your rights

Under the DPDP Act you can:

• Access the personal data we hold about you
• Correct or update inaccurate data
• Delete your data / close your account
• Withdraw consent at any time (this may limit some features)
• Raise a grievance with our Grievance Officer

Security

We use reasonable technical and organizational safeguards to protect your data, including encryption in transit and access controls. No system is perfectly secure, so we also rely on you to keep your password confidential.

Children

SwipeWise is intended for users 18 and older and is not directed at children.

Changes to this policy

We may update this policy as the product evolves. We will update the date at the top and, for significant changes, notify you in the app.

Contact us

Questions or requests about your data: privacy@swipewise.in. Grievance Officer, SwipeWise — privacy@swipewise.in.