Last updated: 11 April 2026

This Privacy Policy explains how Print Swap collects and uses personal data when you use the Print Swap app and website (together, the "Service").

Who is responsible for your data

Controller: Print Swap Ltd

Contact: hello@print-swap.com

Registered office: 24A Islington Green, London N1 8DU

If you have questions about this policy or want to exercise your rights, contact us using the details above.

What information we collect

A. Information you provide

Account information

• Name (optional), username, email address, password (stored securely via authentication provider)
• Profile details: bio, city and country (if you provide them), artist information

Artwork and content

• Images and files you upload
• Artwork titles, captions, edition details, print preferences, specifications

Shipping and delivery information

• Name, postal address, and contact details needed for printing and delivery

Support, contact, and reports

• Information you submit through in-app contact, support, or report flows (including swap-related messages sent via those channels)
• Attachments, screenshots, and any other details you choose to provide

B. Information we collect automatically

Usage data

• How you use the Service: screens viewed, actions taken, features used
• This helps us operate the app, understand usage patterns, and improve reliability

Device and system information

• Device model, operating system version, app version
• Device identifiers (for security, debugging, and authentication)
• Crash logs and diagnostics to help us maintain stability and security
• IP address

Push notification tokens

• If you enable notifications, we store a device token so we can send them

C. Payment information

We do not store your full card details. Payments are processed by Stripe, a secure third-party payment processor.

We receive limited payment-related information from Stripe:

• Payment status (pending, completed, failed)
• Transaction IDs for reconciliation and dispute handling
• Last 4 digits of card and card brand (if Stripe provides it)
• Payment amount and currency

This information lets us operate the Service, handle refunds, and prevent fraud. Stripe explains its role as a payment processor in its own privacy documentation.

How we use your information

We use your data for these purposes:

Providing the Service

• Create and manage your account
• Display your profile and artwork to other users
• Enable you to browse, save, request, and accept swaps
• Coordinate print production and shipping logistics
• Manage fulfilment with our Print Partner

Processing payments and preventing fraud

• Process and confirm payments
• Handle refunds and disputes
• Detect and prevent fraudulent or unauthorised activity
• Comply with payment processor requirements

Moderation and community protection

• Review reports of copyright infringement, harassment, or prohibited content
• Enforce our terms and policies
• Remove content and suspend accounts where necessary
• Keep audit logs of moderation decisions

Providing support

• Respond to your questions and requests
• Troubleshoot issues and provide technical support
• Improve reliability and user experience

Improving and securing the app

• Monitor app performance and stability
• Identify and fix bugs
• Maintain security, backups, and service integrity
• Prevent abuse and unauthorised access

Service communications

• Send account verification messages
• Notify you of security alerts
• Provide transactional updates (e.g., swap status, delivery updates)
• If you opt in, send product updates and occasional announcements

Our lawful basis for processing (UK GDPR)

Under UK GDPR, we rely on the following lawful bases:

Contract

• Processing is necessary to provide the Service you've requested: your account, uploads, swaps, fulfilment, and support

Legitimate interests

• We have a legitimate interest in:
  • Keeping the Service safe and preventing fraud
  • Moderating prohibited content and enforcing our rules
  • Improving reliability, performance, and user experience
  • Understanding usage patterns to make the Service better
• These interests are balanced against your rights and privacy expectations

Legal obligation

• We must comply with tax, accounting, and other legal requirements
• We may share data with authorities where required by law

Consent

• Where you've given consent: e.g., push notifications, optional marketing communications
• You can withdraw consent at any time (e.g., by disabling notifications in your device settings)

Who we share your information with

We share personal data only where necessary to operate Print Swap and provide the Service:

Payment processing

• Stripe — securely processes payments, handles fraud detection, and manages transaction data

Platform infrastructure and hosting

• Google/Firebase — provides authentication, database hosting, file storage, and app infrastructure (run on Google Cloud)
• Algolia — where search features are enabled, provides search and discovery to help users find artwork and other users

Print fulfilment

• The Print Space — our Print Partner, produces and ships prints using your delivery details and order specifications
• We share only the information necessary for production and delivery

Content moderation and safety

• OpenAI — assists with content moderation (explicit content detection) and metadata generation (tags, structured information)
• Moderation uses automated tools for initial screening and triage; human oversight applies where decisions materially affect accounts or content visibility
• See our Compliance page for more details about our moderation approach

Email and communications

• Postmark — sends transactional emails (verification, support responses, etc.)

Professional advisers

• Accountants, lawyers, and insurers — where necessary for legal, tax, or business purposes

Authorities and law enforcement

• Regulators, law enforcement, or courts — where required by law or necessary to protect rights, safety, or the integrity of the Service

Note: We do not sell your personal data.

Artwork processing and automated tools

When you upload artwork, we may process it using automated systems for:

• Technical preparation for printing and fulfilment
• Content moderation and safety review (detecting explicit content)
• Metadata generation (tags, structured information to help other users discover your work)
• Fulfilment coordination

These automated systems, including AI-assisted tools, assist with initial screening, triage, and obvious cases. Human oversight applies where decisions materially affect accounts or content visibility.

For more information about how moderation works, see our Compliance page.

How long we keep your information

We keep personal data only for as long as necessary to provide the Service and for legitimate business or legal reasons.

Typical retention:

• Account and profile data: Kept while your account is active
• Artwork and content: Kept while you choose to keep it live; deleted from active display and systems when you remove it (backups may persist briefly)
• Transaction and fulfilment records: Kept for accounting, dispute resolution, fraud prevention, and legal compliance for the period required by law and reasonable business practice
• Support tickets and reports: Kept as needed to resolve issues, enforce rules, and maintain audit trails
• Device tokens and push notification settings: Kept until you disable notifications
• Crash logs and diagnostics: Kept briefly for debugging; older logs are deleted automatically

Account deletion

You can delete your account at any time from Settings in the app.

When you do:

• We delete or anonymise personal data associated with your account
• Your authentication record is removed
• Your profile information is disconnected or anonymised
• Push notification tokens are deleted
• Your profile stops appearing in the Service

Important: Some information may be retained where we are legally required to keep it (tax, accounting, regulatory) or for limited backup, fraud prevention, dispute resolution, or security purposes.

Under Apple's rules, apps that support account creation must also support in-app account deletion.

Your rights

Under UK data protection law, you may have rights to:

• Access — request a copy of the personal data we hold about you
• Correct — ask us to fix inaccurate or incomplete data
• Delete — request deletion of your data (subject to legal/business exceptions)
• Restrict — ask us to limit how we use your data in certain circumstances
• Object — object to certain processing (e.g., marketing)
• Portability — request your data in a portable format
• Withdraw consent — if we're processing based on your consent (e.g., push notifications, marketing emails), you can withdraw it at any time

The availability of these rights depends on the circumstances and our lawful basis for processing.

To exercise your rights, contact us at hello@print-swap.com. Please clearly state which right you're exercising and provide relevant details so we can help you.

For push notifications: You can withdraw consent by disabling notifications in your device settings or app settings.

International data transfers

Some of our service providers (e.g., Google/Firebase, OpenAI, Stripe) may process data outside the UK.

When data is transferred internationally, we use appropriate safeguards to help protect it, including:

• Contractual protections (e.g., Standard Contractual Clauses)
• Adequacy decisions where applicable
• Other mechanisms recognised under UK GDPR

You can request more information about these safeguards by contacting us.

Cookies, analytics, and similar technologies

Our website and services may use cookies and similar technologies to:

• Understand how you use the Service
• Improve performance and reliability
• Support security and fraud detection
• Remember your preferences

Where the law requires a cookie banner or specific controls on the website, we will provide them. The app may use similar technologies as described above.

Security

We use appropriate technical and organisational measures to protect your personal data:

• Encryption of data in transit (HTTPS)
• Access controls and authentication
• Regular security monitoring
• Secure backups

No system is perfectly secure, but we design for safety and minimise exposure where we can.

Age and eligibility

Print Swap is intended for users aged 18 and over. We do not knowingly collect personal data from anyone under 18.

If you believe someone under 18 has provided personal data to us, please contact us at hello@print-swap.com and we will take appropriate steps to delete it.

Changes to this policy

We may update this policy as the Service evolves and as our practices change.

• We will update the "Last updated" date at the top of this page
• Where we make material changes, we will notify you in the app or by email
• Your continued use of the Service after changes become effective means you accept the updated policy

Questions and complaints

Questions about this policy?
Contact us at hello@print-swap.com

Not happy with how we handle your data?

1. Contact us first — we'll try to resolve it
2. If we can't resolve it, you have the right to complain to the UK regulator, the Information Commissioner's Office (ICO)
   • Website: ico.org.uk
   • The ICO explains your rights and how to complain