Privacy Policy
Last updated: 2026-05-18
This policy explains what data SwipeUp Messenger collects, how we use it, and the controls you have over it.
1. End-to-end encryption
The messages, media, and voice notes you send are encrypted on your device with keys that never leave it. Our servers can't read your message content. Backups of your conversation history live only on the devices you've signed in on; we don't store decryptable copies.
2. What we collect
- Account data: username, display name, optional avatar, your public key. Created when an admin onboards your account.
- Message metadata: who sent a message, to which conversation, and when. We do not store the message content — only the ciphertext that nobody but the recipient can decrypt.
- Presence: whether your account is currently online and a last-seen timestamp. Both are toggleable in Settings → Privacy.
- Push tokens: Firebase Cloud Messaging tokens for your devices, so we can ring you for calls and notify you of new messages.
- Operational logs: standard server-side logs (IP, request path, response code) kept for debugging and abuse prevention. Pruned on a rolling basis.
3. What we don't collect
- The plaintext of your messages, media, or voice notes.
- Your contacts list. We never read or upload your phone's address book.
- Advertising identifiers. The app contains no third-party ad SDKs or trackers.
4. How we use the data
- Routing your encrypted messages to the right recipient(s).
- Delivering notifications.
- Keeping the service running, secure, and abuse-free.
- Honouring legal requests where we're required to respond.
5. Your controls
- Privacy toggles: Settings → Privacy lets you hide last-seen, read receipts, and online status from other users.
- Mute/archive: Per-conversation controls in chat info.
- Delete account: Settings → Account → Delete account permanently removes your account, messages, and any groups you created.
6. Sharing
We don't sell your data. We disclose data only when required by valid legal process or to protect the safety of our users.
7. Children
SwipeUp isn't directed at users under 13 (or the local age of digital consent). If you believe an under-age account exists, contact us so we can remove it.
8. Contact
Questions, complaints, or data-access requests: support@swipeupchat.xyz.
Note: This is a starter document, not a substitute for legal advice. Please have a qualified lawyer review and adapt it for your jurisdiction (GDPR, DPDPA, CCPA, etc.) before launch.