Privacy Policy
Last updated: 2026-05-18
This policy explains what data SwipeUp Messenger collects, how we use it, and the controls you have over it.
1. Encryption
Messages in one-to-one (direct) chats are end-to-end encrypted on your device with keys that never leave it; our servers can't read them. Messages in groups, branches, withdrawal and app chats are not end-to-end encrypted: they travel over an encrypted (TLS) connection and are stored on our servers in readable form so every member of the chat, on any device, can see them.
2. What we collect
- Account data: username, display name, optional avatar, your public key. Created when an admin onboards your account.
- Message metadata: who sent a message, to which conversation, and when. For direct chats we store only the ciphertext that nobody but the recipient can decrypt.
- Group, branch and app chat content: the text of messages sent in these chats, stored so members can read them.
- Presence: whether your account is currently online and a last-seen timestamp. Both are toggleable in Settings → Privacy.
- Push tokens: Firebase Cloud Messaging tokens for your devices, so we can ring you for calls and notify you of new messages.
- Operational logs: standard server-side logs (IP, request path, response code) kept for debugging and abuse prevention. Pruned on a rolling basis.
3. What we don't collect
- The plaintext of your direct (one-to-one) messages.
- Your contacts list. We never read or upload your phone's address book.
- Advertising identifiers. The app contains no third-party ad SDKs or trackers.
4. How we use the data
- Routing your messages to the right recipient(s).
- Delivering notifications.
- Keeping the service running, secure, and abuse-free.
- Honouring legal requests where we're required to respond.
5. Your controls
- Privacy toggles: Settings → Privacy lets you hide last-seen, read receipts, and online status from other users.
- Mute/archive: Per-conversation controls in chat info.
- Delete account: Settings → Account → Delete account permanently removes your account, messages, and any groups you created.
6. Sharing
We don't sell your data. We disclose data only when required by valid legal process or to protect the safety of our users.
7. Children
SwipeUp isn't directed at users under 13 (or the local age of digital consent). If you believe an under-age account exists, contact us so we can remove it.
8. Contact
Questions, complaints, or data-access requests: support@swipeupchat.xyz.
Note: This is a starter document, not a substitute for legal advice. Please have a qualified lawyer review and adapt it for your jurisdiction (GDPR, DPDPA, CCPA, etc.) before launch.