Last updated: 16 March 2026

This Privacy Policy explains how Print Swap ("we", "us") collects and uses personal data when you use the Print Swap app and related services (together, the "Service").

1) Who is responsible for your data (Controller)

Controller: Print Swap

Contact: support@print-swap.com

Address: 24A Islington Green, London N1 8DU

If you have questions or want to exercise your rights, contact us using the details above.

2) The data we collect

A. Data you provide

• Account data: name (optional), username, email address, password (stored securely), and profile details you choose to add (bio, location).
• Artwork and content: images you upload, titles/captions, edition details, print preferences, and any messages or notes you send through the app.
• Addresses: shipping address details you provide (for printing and delivery).
• Support and reports: information you submit when contacting support or reporting content/users (including any attachments or screenshots you choose to provide).

B. Data we collect automatically

• Usage data: basic information about how you use the Service (e.g., screens viewed, actions taken) to operate and improve the app.
• Device and log data: device model, operating system version, app version, identifiers needed for security and debugging, and crash logs.
• Push notification tokens: if you enable notifications, we store a device token to send notifications.

C. Payment data

We do not store your full card details. Payments are processed by Stripe, who handles card data securely. We receive limited payment-related information (e.g., payment status, last 4 digits/brand may be shown depending on your implementation, and transaction IDs) so we can run the Service and handle disputes/refunds. Stripe explains its roles as controller/processor depending on the activity in its privacy materials.

3) How we use your data (purposes)

We use your data to:

1. Provide the Service — create and manage your account; display your profile and artwork; let you browse, save, and (when enabled) request/accept swaps; manage printing and shipping logistics.
2. Process payments and prevent fraud — take payments, confirm payment status, handle refunds; detect and prevent fraudulent or unauthorised activity.
3. Moderate and protect the community — review reports of copyright infringement, harassment, or other prohibited behaviour; enforce rules and remove content/accounts where needed; keep audit logs of moderation actions.
4. Provide support — respond to questions, troubleshoot issues, and improve reliability.
5. Improve and secure the app — monitor performance and crashes; maintain security, backups, and service integrity.
6. Send service messages — account verification, security alerts, transactional notifications (e.g., swap updates, delivery updates); optional product updates if you opt in (if you add marketing email later).

4) Our lawful bases (UK GDPR)

We rely on the following lawful bases under the UK GDPR (as described by the ICO):

• Contract: processing is necessary to provide the Service you request (account, uploads, swap flow, fulfilment, support).
• Legitimate interests: to keep the Service safe, prevent fraud, moderate content, and improve reliability—balanced against your rights.
• Legal obligation: where we must comply with law (e.g., tax/accounting, responding to lawful requests).
• Consent: where required (e.g., push notifications; any optional marketing communications if added).

5) Who we share data with

We share personal data only where needed to operate Print Swap, including with:

• Stripe for payment processing, fraud prevention, and related transaction services.
• Firebase and Google Cloud for authentication, database hosting, file storage, and core app infrastructure.
• Algolia for search and discovery features, where enabled.
• Firebase Crashlytics and Firebase Analytics for crash reporting, diagnostics, and app performance monitoring, where enabled.
• Print and fulfilment partners, such as The Print Space, to produce and ship prints using the delivery and fulfilment information required for the order.
• Professional advisers, such as accountants, lawyers, and insurers, where necessary.
• Regulators, law enforcement, or courts where required by law or where necessary to protect rights, safety, or the integrity of the Service.

We do not sell your personal data.

6) International transfers

Some of our service providers may process data outside the UK. When data is transferred internationally, we use appropriate safeguards (for example, contractual protections) to help keep it protected.

7) How long we keep your data (retention)

We keep data for as long as needed to provide the Service and for legitimate business/legal reasons.

Typical retention approach:

• Account and profile data: kept while your account is active.
• Artwork/content: kept while you choose to keep it on the Service; if you delete content, we remove it from active display and delete/decouple it from systems within a reasonable period (backups may persist briefly).
• Transaction and fulfilment records: kept for accounting, dispute resolution, and fraud prevention for the period required by law and sensible business practice.
• Support tickets and reports: kept as needed to resolve issues, enforce rules, and maintain audit trails.

Account deletion

You can delete your account at any time from Settings in the app. When you do, we delete or anonymise personal data associated with your account in line with our systems and legal obligations. This includes removing your authentication record, disconnecting or anonymising profile information, removing push notification tokens, and stopping your profile from appearing in the Service. Some information may be retained where we are legally required to keep it, or for limited backup, fraud prevention, accounting, dispute, or security purposes. Apple requires apps that support account creation to also support in-app account deletion.

8) Your rights

Under UK data protection law, you may have rights to access, correct, delete, restrict, object to, or transfer certain personal data, depending on the circumstances and our lawful basis for processing it. Where we rely on consent, you can withdraw that consent at any time. This will not affect processing already carried out before withdrawal. For push notifications, you can withdraw consent by disabling notifications in your device or app settings. To exercise your other rights, contact us at support@print-swap.com.

9) Complaints

If you're unhappy with how we handle your data, contact us first and we'll try to resolve it. You also have the right to complain to the UK regulator, the Information Commissioner's Office (ICO). The ICO explains these rights and transparency requirements.

10) Security

We use appropriate technical and organisational measures to protect personal data (e.g., encryption in transit, access controls, monitoring). No system is perfectly secure, but we design for safety and minimise exposure where we can.

11) Children

Print Swap is not intended for children. If you believe a child has provided personal data to us, contact us and we will take appropriate steps.

12) Changes to this policy

We may update this policy as the Service evolves. We'll update the "Last updated" date and, where appropriate, notify you in the app.