Introduction

Welcome to Swap Skill: Swap your Skill ("we," "our," or "us"). We are deeply committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains in detail how we collect, use, disclose, and safeguard your information when you use our mobile application and related services (collectively, the "Service").

By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy.

Information We Collect

Personal Information — We collect information that identifies, relates to, or could reasonably be linked with you:

• Account Information: Name, email address, phone number, date of birth, profile photo.
• Profile Information: Skills you teach/learn, experience level, biography, location (city/country).
• Authentication Data: Encrypted passwords, authentication tokens.
• Identity Verification: Government-issued ID, professional certifications (collected solely for the purpose of verifying user identity and professional claims, enhancing trust within the community). This data is securely processed and stored, and not publicly displayed.

Usage Information

• Session Data: Video call duration, chat messages.
• Session Recordings: With your explicit consent, we may record video calls for your personal review and progress tracking. These recordings are securely stored and accessible only by session participants.
• Matching Activity: Swipe history, match preferences, compatibility scores.
• Learning Progress: Completed sessions, earned tokens, skill badges, achievements.
• App Usage: Features used, time spent, navigation patterns, crash reports, and performance data.

Technical Information

• Device Information: Device type, operating system, unique device identifiers, language settings.
• Network Information: IP address, connection type, and coarse location data (derived from IP address or network information, not precise GPS).
• Camera/Microphone: Access to your device's camera and microphone (with your explicit permission) is required for video calls and uploading profile photos.

Financial Information

• Token Transactions: Token earnings, spending history, balance.
• Payment Information: Payment method details (e.g., credit card numbers, bank account information) are processed directly by secure third-party payment providers (e.g., Stripe, Google Play Billing). We do not store your full payment card details on our servers.

How We Use Your Information

Core Service Functions

• Matching Algorithm: To create compatible matches based on your declared skills, preferences, and compatibility.
• Profile Display: To display your profile information to other users for matching purposes.
• Session Management: To facilitate video calls, scheduling, and progress tracking between matched users.
• Communication: To enable real-time messaging between matched users within the app.
• Token Economy: To track your token earnings, spending, and manage rewards within the Service.

Service Improvement

• Analytics: To understand app usage patterns, identify popular features, and improve overall user experience. We use Google Analytics for Firebase for this purpose, which processes data in an aggregated and pseudonymized manner.
• Personalization: To customize recommendations, content, and the overall app experience based on your preferences and usage.
• Quality Assurance: To monitor session quality, troubleshoot technical issues, and enhance user satisfaction.
• Security: To detect and prevent fraud, abuse, and unauthorized access.

Communication

• Service Updates: To notify you about app updates, new features, and important policy changes.
• Session Reminders: To send timely notifications about upcoming sessions.
• Marketing: To send you promotional content about our Service or related offerings, only with your explicit consent. You can opt-out of these communications at any time through your app settings.

Information Sharing and Disclosure

With Other Users

• Profile Information: Your skills, biography, photos, ratings, and badges are shared with other users as part of the matching process and on your public profile.
• Session Data: During video calls and chat interactions, information and content you share are visible to the other participant(s).
• Public Achievements: Skill badges and achievements may be publicly displayed if enabled in your privacy settings.

With Service Providers

We engage trusted third-party service providers to perform functions on our behalf. We share only the minimum necessary information with them, and they are contractually obligated to protect your data. These include:

• Cloud Storage & Computing: Firebase and Google Cloud Platform for secure data storage, hosting, and backend processing.
• Video Services: Agora.io for real-time video call infrastructure.
• Payment Processing: Stripe, Google Play Billing for securely handling token transactions. We do not store your full payment details.
• Analytics: Google Analytics for Firebase for anonymous usage analytics to improve service quality.
• Identity Verification: A third-party identity verification service (e.g., Persona, Onfido) may be used when you choose to verify your identity.

Legal Requirements — We may disclose your information if required by law, court order, or government request, or when we believe such disclosure is necessary to protect our rights, property, or safety, or the rights, property, or safety of others.

Business Transfers — In the event of a merger, acquisition, reorganization, or sale of all or a portion of our assets, your information may be transferred to the new entity. We will notify you of any such transfer and any changes to this Privacy Policy.

Data Security

Security Measures — We implement robust security measures to protect your information from unauthorized access, alteration, disclosure, or destruction:

• Encryption: All data transmission between your device and our servers is encrypted using industry-standard protocols (e.g., TLS/SSL). Sensitive data at rest is also encrypted.
• Authentication: Multi-factor authentication (MFA) is available for enhanced account protection.
• Access Controls: Employee access to personal data is strictly limited on a need-to-know basis, and all access is logged and monitored.
• Regular Audits: We conduct regular security assessments, vulnerability testing, and penetration testing to identify and address potential weaknesses.

Session Recordings

• Consent Required: Session recordings only occur with explicit consent from all participants in the video call.
• Secure Storage: Recordings are stored in encrypted cloud storage.
• Automatic Deletion: Recordings are automatically deleted after 30 days.
• Access Control: Only the participants of a recorded session can access their recordings within the app. Limited administrative access may be granted under strict protocols for technical support or to investigate reported policy violations, always with appropriate safeguards and logging.
• Download Options: Users can download their recordings before the automatic deletion period.

Your Privacy Rights

You have significant rights regarding your personal data. To exercise any of these rights, please contact us using the information provided in the "Contact Information" section.

• Account Management: You can edit or delete most of your profile information at any time through the app settings.
• Visibility Settings: You can control what information is visible to other users through your in-app privacy settings.
• Account Deletion: You can permanently delete your account and associated data directly from the app.

Data Rights (GDPR/CCPA Compliance)

• Access: Request a copy of all personal data we hold about you.
• Correction: Request that we update or correct any inaccurate or incomplete information we hold about you.
• Deletion (Right to be Forgotten): Request the deletion of your personal data, subject to certain legal obligations.
• Data Portability: Receive your data in a structured, commonly used, and machine-readable format.
• Objection/Restriction: Object to the processing of your personal data or request restriction of its processing.
• Withdraw Consent: Where we rely on your consent, you have the right to withdraw that consent at any time.

Communication Preferences

• Notifications: Control which types of push notifications you receive through your device and app settings.
• Marketing: Opt-out of promotional email communications by following the unsubscribe link in the emails or through your app settings.
• Session Reminders: Customize your reminder preferences for upcoming sessions.

Children's Privacy & Safety

Our Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that a child under 18 has provided us with personal information, we will take immediate steps to delete such information from our records.

International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States, where our servers and some service providers are located. We ensure that appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or reliance on the recipient's Privacy Shield Framework certification (if applicable).

Data Retention

Retention Periods

• Active Accounts: Data associated with active accounts is retained for the duration of the account's activity.
• Inactive Accounts: Data from inactive accounts (no login for a prolonged period) will be deleted after 2 years of inactivity, subject to legal obligations.
• Session Recordings: Automatically deleted after 30 days.
• Legal Requirements: Some data may be retained longer if required by law.

Deletion Process — When you delete your account: your profile and public-facing data are permanently removed; match history and chat messages are anonymized or deleted; session recordings are immediately deleted. Certain data may be retained for legal obligations, dispute resolution, or enforcement of agreements.

Cookies and Tracking

We use cookies and similar tracking technologies (e.g., pixels, web beacons) to: remember preferences, analyze app usage, provide personalized content, and ensure security. We use Google Analytics for Firebase which may utilize cookies or similar identifiers. You can control cookie preferences through your device or browser settings.

Third-Party Services

Our app integrates with third-party services, each with its own privacy policy. We encourage you to review their policies:

• Google Services: Firebase Authentication, Cloud Firestore, Cloud Storage, Google Analytics for Firebase — refer to Google's Privacy Policy.
• Video Platforms: Agora.io

Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of any material changes by posting the new policy in the app, sending an email, or displaying a prominent notice. Your continued use after changes become effective constitutes your acceptance.

Contact Information

If you have any questions about this Privacy Policy, our privacy practices, or wish to exercise your privacy rights, please contact us:

Email: support@skilllswap.com

For EU Users: You have the right to lodge a complaint with your local data protection authority.

For California Users: California residents have additional rights under the CCPA. Contact us for more information.

Consent

By using Swap Skill: Swap your Skill, you consent to the collection, use, and sharing of your information as described in this Privacy Policy.