SwipeRight ("we", "us", "our") is a product operated in India. This policy explains how we collect, use, and protect your personal data in accordance with India's Digital Personal Data Protection Act 2023 (DPDP Act) and the Information Technology Act 2000.
1. Data We Collect
- Account data: Your name and email address, collected at signup.
- Card data: Credit card names, points balances, annual fees, renewal dates, and spending records you manually enter into the app.
- AI conversation data: Messages you send to the Match AI advisor. These are processed in real-time and not stored after your session.
- Usage data: Standard server logs (IP address, browser type) retained for up to 30 days for security purposes.
2. How We Use Your Data
- To provide card tracking, rewards optimisation, and AI advisory features.
- To send transactional emails (password reset, account confirmation).
- To improve the accuracy of card data and AI recommendations.
- We do not sell, rent, or share your personal data with third parties for marketing.
3. Third-Party Services
We use the following sub-processors to deliver the service:
Supabase (EU/AWS)Database & authentication
Google (Gemini) (USA)AI recommendations
Vercel (USA)Application hosting
Resend (USA)Transactional email
4. Data Retention
Your data is retained for as long as your account is active. On account deletion, all personal data is permanently deleted within 30 days. You may request immediate deletion by emailing us.
5. Your Rights (DPDP Act 2023)
- Right to access: Request a copy of your personal data.
- Right to correction: Update incorrect data in your Profile settings.
- Right to erasure: Delete your account and all associated data from Profile → Delete Account.
- Right to grievance redressal: File a complaint with our Grievance Officer (see Section 8).
- Right to nominate: Nominate a representative to exercise your rights in case of death or incapacity.
6. Cookies
We use only essential session cookies required for authentication. We do not use advertising, tracking, or analytics cookies.
7. Data Security
All data is encrypted in transit (TLS) and at rest. Access is restricted to authenticated users only via Row Level Security policies. We do not store credit card numbers — only the last 4 digits you optionally enter.
8. Grievance Officer
Name: SwipeRight Support
Email: help@getswiperight.in
Response time: Within 30 days of receiving a complaint.
9. Changes to This Policy
We may update this policy. Material changes will be notified via email. Continued use of SwipeRight after changes constitutes acceptance of the updated policy.