Privacy Policy
Last updated: February 5, 2026
Introduction
Welcome to SwipeCoach.ai. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our service in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
Data Controller
The data controller responsible for your personal data is:
SwipeCoach.ai
Contact us using our contact form
If you have any questions about how we handle your personal data or wish to exercise your rights under GDPR, please use our contact form and select "Privacy Request (GDPR)" as the category.
Legal Basis for Processing
Under GDPR, we process your personal data based on the following legal grounds:
- Consent: You have given explicit consent for us to process your personal data for specific purposes (account creation, analysis services)
- Contract: Processing is necessary for the performance of our service agreement with you
- Legitimate Interests: We have legitimate interests in improving our services, provided these do not override your fundamental rights
- Legal Obligation: We may process data to comply with legal requirements
You have the right to withdraw your consent at any time. This will not affect the lawfulness of any processing carried out before you withdraw your consent.
Information We Collect
Account Information
When you create an account, we collect:
- Email address
- Name (if provided through OAuth)
- Profile picture (if provided through OAuth)
Usage Data
When you use our service, we collect:
- Dating profile screenshots you upload for analysis
- AI-generated analysis results
- Timestamps of your activities
- Device and browser information
How We Use Your Information
We use your information to:
- Provide and improve our dating profile analysis service
- Store your analysis history for your reference
- Authenticate your account and maintain security
- Send you important service updates and notifications
- Analyze usage patterns to improve our service
Data Storage and Security
We take data security seriously and implement multiple safeguards to protect your data:
- Your uploaded images are compressed (typically 70-90% size reduction) and stored securely in our encrypted database to provide your analysis history feature
- Original full-resolution images are only used during analysis and are immediately discarded after processing
- Compressed images and analysis results (text feedback) are saved to enable you to review past analyses in your dashboard
- All stored data is encrypted using industry-standard encryption both in transit and at rest
- We use secure authentication methods (OAuth 2.0 and magic links)
- Access to your data is restricted to authorized personnel only
- When you delete your account, all images and analysis data are permanently removed from our database within 30 days
Third-Party Services
We use the following third-party services to operate our platform:
- Anthropic (Claude AI): Processes your images using AI to generate analysis feedback
- Stripe: Handles all payment processing and manages payment transactions securely
- Google OAuth: Provides secure authentication for account login
- Resend: Sends authentication emails and analysis result emails
- Vercel: Hosts our application infrastructure
- Supabase: Provides our secure PostgreSQL database hosting
- Sentry: Monitors application errors and performance to improve service reliability
These services have their own privacy policies and data handling practices. We carefully select service providers that maintain high security and privacy standards.
Your GDPR Rights
Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:
1. Right of Access (Article 15)
You can request a copy of all personal data we hold about you. Use our Privacy Settings to download your data in JSON format.
2. Right to Rectification (Article 16)
You can request correction of inaccurate or incomplete personal data using our contact form.
3. Right to Erasure / "Right to be Forgotten" (Article 17)
You can request deletion of your personal data. Visit Privacy Settings to permanently delete your account and all associated data.
4. Right to Data Portability (Article 20)
You can receive your personal data in a structured, machine-readable format. Use the export feature in Privacy Settings.
5. Right to Restrict Processing (Article 18)
You can request that we limit how we use your personal data in certain circumstances. Contact us for assistance.
6. Right to Object (Article 21)
You can object to processing based on legitimate interests or for direct marketing purposes.
7. Right to Withdraw Consent (Article 7)
You can withdraw consent at any time where processing is based on consent. This will not affect the lawfulness of processing before withdrawal.
8. Right to Lodge a Complaint
You have the right to lodge a complaint with your local data protection authority if you believe we have not handled your data appropriately.
To exercise any of these rights, visit your Privacy Settings or use our contact form. We will respond to your request within 30 days as required by GDPR.
Data Retention
We retain your data for as long as your account is active to provide you with access to your analysis history and account features. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or compliance purposes.
Retention Periods by Data Type:
- Account Data: Retained while account is active, deleted within 30 days of account deletion
- Analysis Data (text results): Retained while account is active, deleted with account deletion
- Uploaded Images (compressed): Stored in compressed format to enable analysis history viewing; deleted within 30 days of account deletion
- Authentication Logs: Retained for 90 days for security purposes
- Payment Records: Retained for 7 years to comply with financial regulations and tax requirements
- Original Full-Resolution Images: Immediately discarded after analysis is complete; never permanently stored
Why we store compressed images: We store compressed versions of your uploaded images to provide the analysis history feature in your dashboard. This allows you to review your past analyses alongside the images that were analyzed. You can permanently delete all your data, including images, at any time from your Privacy Settings.
International Data Transfers
Your personal data may be transferred to and processed in countries other than your country of residence, including the United States where our service providers are located. These countries may have data protection laws that differ from your country.
When we transfer personal data from the European Economic Area (EEA) to other countries, we ensure appropriate safeguards are in place:
- Our service providers comply with the EU-U.S. Data Privacy Framework or use Standard Contractual Clauses approved by the European Commission
- Anthropic (Claude AI) processes data in accordance with their data protection obligations
- Vercel maintains SOC 2 Type II compliance and implements appropriate security measures
By using our service, you acknowledge and consent to the transfer of your data to these locations for the purposes described in this Privacy Policy.
Children's Privacy
Our service is not intended for users under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
Changes to This Policy
We may update this privacy policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date.
Contact Us
If you have any questions about this Privacy Policy or our data practices, please use our contact form and select "Privacy Request (GDPR)" or "General Inquiry" as the category.
We typically respond to all inquiries within 1-2 business days.