Privacy policy

SwipeKind is run by SwipeKind C.I.C., a Community Interest Company registered in England and Wales, company number 17550118. Our registered office is 46 Towpath Crescent, Woking, England, GU21 5RR. We are the data controller for the personal data described here.

Before SwipeKind C.I.C. was registered on 29 October 2026, waitlist sign-ups and early app accounts were looked after by Quantum 3 Studio Limited (company 16199926) on SwipeKind's behalf. That data has now passed to SwipeKind C.I.C., which is responsible for it from that date.

To ask about your data, or to use any of your rights, email info@swipekind.com.

• Your account: your email address, first name, and whether you're asking for help, helping, or both.
• Where you are: your postcode district (the first half of your postcode, like GU21) and the town it's in. We never ask for your full address.
• Your bill: the file you upload and its details: supplier, type, amount, due date and your customer account number. Bill files often show your name and address, which is why only our team sees them.
• Your supplier's bank details: the payee name, sort code and account number we pay the bill to.
• Your note and photo: if you choose to add them to your bill.
• ID check results: once ID checks start, we'll keep the result (passed or not) from our ID check provider. We don't keep copies of your ID documents.
• Payment records: when a bill is covered or paid by the Kindness Fund: the amount, the fee, the date and the payment references.
• Emails we send you: which emails we sent and when, so we don't send the same one twice.
• Device and usage data: which pages are opened, rough location from your country, browser and device type, and how bills on the board are viewed and passed. We don't use advertising cookies or trackers.

• To run your account and the service you asked for (checking bills, putting them on the board, paying suppliers, sending you updates about your bill). Lawful basis: our contract with you.
• To prevent fraud and keep people safe (checking bills by hand, ID checks, reports, banning misuse). Lawful basis: our legitimate interests in keeping SwipeKind honest and safe, and, for ID checks, our legal obligations.
• To keep financial records. Lawful basis: legal obligation (UK accounting and tax rules).
• To understand how SwipeKind is used and make it better (usage counts, how the board performs). Lawful basis: our legitimate interests. We look at these as totals, not to watch individuals.

Bills can say something about your circumstances. We only use that to run SwipeKind and never to market anything to you, and we don't sell personal data to anyone.

Helpers see your first name, your town, the type of bill, the amount, the due date, the supplier's name, and your note and photo if you added them and we approved them. They see a copy of your bill with your private details covered up.

Helpers never see your surname, your address, your email, your account number, your supplier's bank details or your original bill. We never tell you who covered your bill, and we never tell anyone who passed on it.

One exception: when a helper pays your bill, your account number with your supplier is used as the payment reference, so the supplier can match the payment to your account. That reference will appear on the helper's bank statement. It's never shown in the SwipeKind app.

We use a small number of trusted companies to run SwipeKind. They only use your data to provide their service to us.

• Supabase: our database, sign-in and file storage, hosted in London.
• Vercel: hosts the app and website.
• Resend: sends our emails.
• postcodes.io: turns a postcode district into a town and rough location. We only send it the postcode district.
• Coming soon: Stripe (card payments for our fee, and ID checks) and our pay by bank provider (sends the bill payment from a helper's bank straight to the supplier). We'll update this policy when they go live.

Some of these companies may handle data outside the UK. When they do, they protect it with the safeguards UK law requires, such as the UK International Data Transfer Agreement.

• Bill files (the original and the covered up copy) and photos: deleted 12 months after the bill is closed or paid.
• Payment and Kindness Fund records: kept for 6 years, because the law says we must keep accounts.
• Your account: until you delete it. If you delete your account, we delete your profile and personal data straight away and keep only anonymised payment records.
• Usage data: kept for up to 12 months.

You can ask us to:

• give you a copy of the personal data we hold about you (access),
• correct anything that's wrong (correction),
• delete your data (deletion). You can delete your account yourself in Settings,
• stop using your data for something, where we rely on our legitimate interests (objection).

Email info@swipekind.com and we'll reply within one month. We may need to check it's really you first. Some data we have to keep by law, such as payment records, and we'll tell you if that applies.

If you're unhappy with how we've handled your data, please tell us first at info@swipekind.com so we can put it right. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

If we change this policy in a way that matters, we'll email you before it takes effect. The date at the top shows when it last changed.