Swipy Privacy Policy
Effective Date: August 14, 2026
This Privacy Policy explains how Bern Software, as the operator of Swipy (“Swipy,” “we,” “us,” or “our”), collects, uses, shares, stores, and protects personal information when you use Swipy.
This Policy applies to the Swipy website, mobile applications, APIs, and related services.
1. Information We Collect
Account and profile information
We may collect:
- Username.
- Display name.
- Email address.
- Password hash.
- Age confirmation.
- Country and language.
- Music preferences.
- Biography and profile image.
- Verification and premium status.
- Privacy and notification settings.
We do not store your password in plain text.
User Content and social activity
We collect information you create or generate through Swipy, including:
- Posts and captions.
- Spotify links.
- Comments and replies.
- Likes and reposts.
- Followers and followed accounts.
- Followed hashtags.
- Reports and blocks.
- Live-room or social-feature activity.
- Content timestamps and interaction counts.
Recommendation activity
To personalize and rank your feed, we may process:
- Post impressions.
- Opens and plays.
- Viewing duration signals.
- Skips.
- “Not interested” actions.
- Follow and interaction history.
- Artist and author affinity.
- Engagement from accounts you follow.
These signals are used for content ordering and music discovery.
Device and technical information
We may collect:
- IP address.
- Request and security logs.
- Browser or application information.
- Device and session identifiers.
- Operating system and language.
- Authentication tokens.
- Push-notification tokens when notifications are enabled.
Purchase information
For paid features, we may receive:
- Subscription product.
- Premium entitlement.
- Transaction status.
- Renewal or expiration status.
- Store-related identifiers.
Purchases may be handled through Apple, Google, or RevenueCat.
Swipy does not receive or store your complete payment-card number.
Communications
We collect information included in:
- Support requests.
- Privacy requests.
- Legal notices.
- Reports and appeals.
- Messages submitted through Contact Us.
2. How We Use Information
We use information to:
- Create and manage accounts.
- Authenticate and secure sessions.
- Verify email addresses.
- Display profiles and User Content.
- Operate posts, comments, likes, reposts, follows, and hashtags.
- Personalize feeds and music recommendations.
- Provide account and privacy settings.
- Send service communications.
- Send optional push notifications.
- Process and restore premium entitlements.
- Prevent fraud, spam, and abuse.
- Apply security and rate-limiting controls.
- Investigate reports.
- Enforce our Terms of Use.
- Maintain and improve performance.
- Diagnose errors and technical problems.
- Comply with legal obligations.
- Establish, exercise, or defend legal claims.
3. Legal Bases
Where applicable law requires a legal basis, we process information based on:
- Performance of our contract with you.
- Our legitimate interests in operating, improving, and protecting Swipy.
- Your consent for optional features where required.
- Compliance with legal obligations.
- Protection of users, Swipy, and third parties.
You may withdraw consent at any time. Withdrawal does not affect processing already performed, but certain features may stop working.
4. Spotify Links and Embeds
Users may submit public Spotify track, album, playlist, or episode links.
Swipy validates these links and uses Spotify’s public oEmbed service to display titles, artwork, and playback frames.
For this process, Swipy does not request or store:
- Your Spotify password.
- A Spotify OAuth access token.
- Your saved-track library.
- Your private Spotify listening history.
When you interact with an embedded Spotify player or open Spotify, Spotify may independently collect information under its own privacy policy.
5. How Information Is Shared
We do not sell personal information.
Public and social features
Profile information, posts, comments, and interaction counts may be visible to other users based on your privacy settings and the nature of the feature.
Service providers
We may use providers for:
- Hosting.
- Database infrastructure.
- Media and file storage.
- Email delivery.
- Security and rate limiting.
- Push notifications.
- Subscription management.
- Customer support.
- Monitoring and technical operations.
These providers process information on our behalf and are expected to protect it appropriately.
Platform partners
Relevant information may be processed by:
- Spotify for embeds and outbound links.
- Firebase for mobile notifications.
- RevenueCat for subscription entitlements.
- Apple and Google for mobile purchases.
Legal and safety reasons
We may disclose information when reasonably necessary to:
- Comply with applicable law.
- Respond to valid legal requests.
- Protect users or other people.
- Investigate fraud or abuse.
- Enforce our agreements.
- Protect Swipy’s legal rights.
Business changes
Information may be transferred as part of a merger, acquisition, financing, reorganization, or sale of assets, subject to appropriate protections.
With your consent
We may share information when you direct us to or give clear consent.
6. Cookies and Device Storage
The Swipy web application uses essential secure cookies for authentication and may use local browser storage for preferences.
The mobile application may store:
- Session credentials in device Keychain or secure storage.
- Session information in local storage as a compatibility fallback.
- Language preferences.
- Onboarding status.
- A notification device identifier.
- Other application preferences.
We do not currently use these technologies for third-party targeted advertising.
7. Push Notifications
If you enable notifications, Swipy may store a device notification token and use Firebase to deliver notifications.
You can disable notifications through Swipy settings or your device settings.
Disabling notifications does not affect essential messages displayed inside the application.
8. Subscriptions and Payments
Mobile subscriptions may be processed through Apple App Store, Google Play, and RevenueCat.
These providers independently process payment and transaction information under their own privacy policies.
Swipy may receive entitlement and subscription-status information to activate premium features but does not receive your complete payment-card details.
9. Data Retention
We retain personal information while your account remains active and for as long as reasonably necessary to:
- Provide the Service.
- Protect account security.
- Prevent fraud and abuse.
- Resolve disputes.
- Enforce agreements.
- Meet legal obligations.
Retention periods may differ depending on the type of information and the reason it is processed.
10. Account Deletion
You may request account deletion through available Swipy account settings or Contact Us.
When an account is deleted:
- The account is removed from normal use.
- Related content is removed from public visibility.
- Active sessions may be invalidated.
- Notification tokens may be removed or disabled.
Limited records may remain temporarily in:
- Security and anti-abuse systems.
- Transaction records.
- Legal archives.
- Technical backups.
These records will be deleted, isolated, or de-identified according to applicable retention requirements.
Deleting your Swipy account does not:
- Delete your Spotify account.
- Automatically cancel an Apple or Google subscription.
11. Your Rights and Choices
Depending on applicable law, you may have the right to:
- Access your personal information.
- Correct inaccurate information.
- Request deletion.
- Restrict certain processing.
- Object to certain processing.
- Receive a portable copy of eligible information.
- Withdraw consent.
- Complain to a data-protection authority.
You can also:
- Update your profile.
- Change privacy and mention settings.
- Block users.
- Disable push notifications.
- Use “not interested” to influence recommendations.
- Unfollow accounts and hashtags.
- Submit privacy requests through Contact Us.
We may need to verify your identity before completing a request.
12. International Data Transfers
Swipy and its providers may process information in Türkiye and other countries where they operate.
Privacy laws in these countries may differ from those in your country.
Where required, we use contractual or legal safeguards designed to protect information transferred internationally.
13. Security
We use administrative, technical, and organizational measures designed to protect information, including:
- Password hashing.
- Encrypted data transmission.
- Secure session mechanisms.
- Scoped infrastructure access.
- Input validation.
- Rate limiting.
- Abuse and security controls.
No online service can guarantee absolute security.
You should use a unique password and contact us immediately if you believe your account has been compromised.
14. Children’s Privacy
Swipy is not directed to children under 13.
We do not knowingly collect personal information from children under 13.
If you believe a child has created an account in violation of this rule, contact us so we can investigate and take appropriate action.
Higher minimum ages or parental-consent requirements may apply in certain countries.
15. Automated Recommendations
Swipy uses preferences and interaction signals to rank music and community posts.
These systems affect content ordering but are not used to make decisions that produce legal or similarly significant effects.
You can influence recommendations by:
- Following or unfollowing accounts.
- Liking or reposting content.
- Skipping content.
- Selecting “not interested.”
- Changing your music preferences.
16. Changes to This Privacy Policy
We may update this Privacy Policy when our Service, providers, or legal obligations change.
We will update the effective date and provide additional notice when required.
You should review this Policy periodically.
17. Contact Us
For privacy questions, data requests, or account-deletion assistance, contact us at:
https://bernsoftware.com/contact
See also our Swipy Terms of Use.