Privacy Policy

1. What data do we collect?

We only collect data that you provide voluntarily or that arises technically when using the app.

Data you provide

• Profile photos (if uploaded)
• Date of birth and gender
• Preferences (age range sought, search radius, smoking status)
• Place of residence – depending on your input, from city/region down to street and house number
• Answers to the AI-guided onboarding interview
• Chat messages within the app between matched users

Sensitive data

The AI interview may indirectly allow inferences about personal characteristics (e.g. emotional processing, relationship wishes). This data is used solely to create your compatibility profile and is processed only with your explicit consent (Art. 9(2)(a) GDPR).

Automatically collected data

• Push notification token (for notifications)
• Device information (operating system, app version) for support and troubleshooting
• Log and usage data (timestamps, error reports) to ensure operation

Location data

For the nearby search we use the place of residence you enter yourself. Its precision depends on your input – from city or region down to street and house number. There is no continuous GPS tracking in the background; only the location you entered is recorded.

Provision of your data

Providing this data is neither legally nor contractually required. However, some data is necessary to use swaipr (e.g. profile data for matching). Without it we cannot provide the service or certain features. You will not suffer any other disadvantages.

2. How do we process your data?

We process your personal data for the following purposes: account creation and authentication; the matching algorithm; the chat function; the AI interview (Dating Readiness Index); push notifications; service improvement; security and abuse prevention; and legal obligations.

3. On what legal bases do we rely?

• Consent – Art. 6(1)(a) GDPR: processing of interview data and sensitive profile data; push notifications. You can withdraw consent at any time.
• Performance of a contract – Art. 6(1)(b) GDPR: providing the core app features: matching, chat, profile display and authentication.
• Legitimate interest – Art. 6(1)(f) GDPR: improving the matching algorithm, abuse prevention, technical stability and security.
• Legal obligation – Art. 6(1)(c) GDPR: fulfilling legal duties, e.g. official requests or safeguarding legal claims.

4. When and with whom do we share your data?

We share your data only with selected processors who provide technical services for us and are contractually bound (data processing agreements under Art. 28 GDPR) to protect it and act only on our instructions: cloud infrastructure and storage (Supabase), AI processing (Anthropic), push notifications (Expo / Google FCM) and location search (Google Places API).

When you have a match, your profile (photos, age, location, compatibility score) is shown to the other person. Chat messages are visible only to the respective conversation partners. In the event of a merger, sale or acquisition, your data may be transferred to the new owner; you will be informed in good time. We may disclose data where legally required.

5. Third-party services

Anthropic Claude API (Anthropic, PBC, San Francisco, USA) – for the onboarding interview, matching and empathetic chat support. Conversation content is transferred to servers in the USA on the basis of the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR). Supabase (Supabase Inc.) hosts our backend; data is stored in the EU (eu-central-1). Google Places API (Google Ireland Limited) for location search; no full GPS coordinates are shared. Push notifications via Expo and Google Firebase Cloud Messaging (a device-specific push token is processed).

6. International data transfers

Some processors are located outside the EU. Using the Anthropic Claude API requires transferring data to the USA, based on the European Commission's Standard Contractual Clauses (Art. 46(2)(c) GDPR). Supabase stores all data within the EU (Frankfurt). Google Ireland Limited acts as the EU contracting party for Google Places.

7. How long do we store your data?

• Active account: profile data, photos and interview results are stored for the duration of your account use.
• After account deletion: all personal data is deleted within 30 days, unless statutory retention obligations apply.
• Chat messages: automatically deleted 90 days after a match is dissolved.
• Technical logs: automatically deleted after 30 days at the latest.

8. How do we protect your data?

We use appropriate technical and organisational measures: encrypted transmission (TLS/HTTPS), Row Level Security at database level (Supabase), access restrictions and regular security reviews. No electronic transmission over the internet can be guaranteed 100% secure; use the service at your own risk and preferably in secure network environments.

9. Do we collect data from minors?

No. swaipr is exclusively for people aged 18 and over. We do not knowingly collect data from anyone under 18. If we learn that an account was created by a minor, we will deactivate it immediately and delete the associated data. Please report such cases to datenschutz@swaipr.de.

10. Your data protection rights

As a person in the EEA you have extensive rights: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), portability (Art. 20), objection (Art. 21) and withdrawal of consent (Art. 7(3)).

Complaint to a supervisory authority

11. Updates to this policy

We update this policy as needed to keep it current and compliant. The latest version is available at swaipr.de/datenschutz. We will inform you via the app of any material changes.

12. Contact

13. Data processing when visiting this website

Sections 1–12 concern the swaipr app. In addition, we inform you about processing when visiting this website (swaipr.de).

Hosting

The servers are located in Germany. Legal basis is our legitimate interest in a secure and efficient website (Art. 6(1)(f) GDPR).

Server log files

When the website is accessed, information is automatically recorded in server log files: IP address, date and time, the page/file requested, data volume, browser type and version, operating system and referrer URL. This serves smooth and secure operation (Art. 6(1)(f) GDPR) and is deleted or anonymised after 7 days at the latest.

Fonts

This website uses only locally hosted fonts. No connection to third-party servers (e.g. Google Fonts) is made and no data – in particular no IP addresses – is transferred to third parties.

Cookies and analytics

This website sets no tracking, marketing or analytics cookies and embeds no reach or advertising services. Only technically necessary data is processed.

Contact and reporting forms

The forms on this website do not transmit data to our server. On submit, your email app opens with a pre-filled message that you send yourself. Handling of your request then takes place by email on the basis of Art. 6(1)(b) or (f) GDPR.

14. Automated decision-making and profiling

swaipr uses automated methods to create suitable suggestions, which constitutes profiling within the meaning of Art. 4(4) GDPR: the AI interview and Dating Readiness Index derive a personality and compatibility profile, and the matching algorithm computes compatibility scores and sorts suggestions. This serves solely to show you suitable suggestions. There is no automated decision in an individual case producing legal or similarly significant effects within the meaning of Art. 22(1) GDPR – you alone decide whom to contact. The legal basis is your explicit consent (Art. 6(1)(a) in conjunction with Art. 9(2)(a) GDPR) and performance of the contract (Art. 6(1)(b) GDPR). You can withdraw your consent at any time.

15. Waitlist / interested parties

On this website you can join a waitlist to be informed about the launch of swaipr and tester access.

• Data processed: your email address and, if provided, your first name. To document your consent, we also store the date/time and IP address of the sign-up and the confirmation.
• Purpose: sending the confirmation email (double opt-in) and information about the launch and early access.
• Legal basis: your consent (Art. 6(1)(a) GDPR); logging of consent is based on our legitimate interest in demonstrability (Art. 6(1)(f) GDPR).
• Double opt-in: after sign-up you receive an email with a confirmation link. Only after clicking it do we add you to the waitlist.
• Retention: until you withdraw your consent, at the latest until the launch is complete. Unconfirmed sign-ups are deleted promptly.
• Withdrawal / unsubscribe: at any time with one click via the unsubscribe link in our emails, or informally at datenschutz@swaipr.de.

The data is stored solely on our server (hosting: ALL-INKL.COM, Germany) and is not shared with third parties.

---

As of: September 2026 · swaipr UG · datenschutz@swaipr.de