Swipe to Discover is built by Norellix Studio. This page explains, in plain English, what information the app collects, why it collects it, and what we will and will not do with it. If anything here is unclear, email us at norellixstudio@swipetodiscover.com and we'll explain.
The short version
- We collect the minimum we need to make the app work: your email (if you sign in), your location (only when you're using the app, or in the background only if you explicitly opt in), and the places you save, skip, or visit.
- We don't sell your personal information. We don't share it with data brokers. We don't run profiling for any third party.
- We show ads using Google AdMob unless you have a premium subscription. AdMob uses an anonymous device advertising ID; you can reset or disable it in your phone's settings at any time.
- You can delete your account and all of your data from inside the app at any time. We'll do it within 7 days.
1. Who we are
Norellix Studio is a small independent developer based in New Jersey, United States. We are the "data controller" for any personal information described in this policy. You can reach us at norellixstudio@swipetodiscover.com.
2. What we collect, why, and how long we keep it
| What | Why | How long |
|---|---|---|
| Email address (only if you sign in) | To identify your account and let you sync saved places across devices. | Until you delete your account. |
| Approximate and precise location while the app is open | To show you nearby places in the Discover feed. | Used in real time. Not stored on our servers. We never log your raw coordinates. |
| Background location (only if you turn on "Nearby saved places" in Settings) | To send a single local notification when you walk within ~350 meters of a place you saved. | Processed on-device only. Not transmitted to us at all. |
| Places you save, skip, visit, and your personal notes | To remember your preferences, power the swipe feed, and let you find your saved spots later. | Until you delete the item, the account, or the app. |
| Anonymous usage events (e.g., "feed opened," "place saved") | To understand which features people use and prioritize improvements. | Up to 24 months, then deleted or aggregated. |
| Device advertising ID + ad interaction data (free users only) | To show ads through Google AdMob. AdMob, not us, handles the advertising ID. | Controlled by AdMob's retention rules. You can reset the ID in iOS or Android settings any time. |
| Push notification token | Required by Apple and Google to deliver notifications to your phone. | Rotated by the OS. Deleted when you uninstall the app or revoke notification permission. |
| Crash and error reports | To find bugs. Reports do not include your saved places, location, or email. | Up to 12 months. |
3. What we do NOT collect
- We do not access your contacts, calendar, photos (beyond ones you explicitly attach), microphone, or health data.
- We do not collect your name, phone number, address, gender, date of birth, or financial information.
- We do not run web tracking, cookies, or cross-site tracking inside the app.
- We do not log your raw GPS coordinates on our servers.
4. How location is used
There are two location permissions: "While Using" and "Always."
"While Using" permission is requested the first time you open the Discover tab. Your location is sent to the app's backend only as a request parameter (e.g., "find places within 5 miles of these coordinates"), used to return a list of nearby places, and then discarded. We do not keep a log of your coordinates.
"Always" permission is requested only after you explicitly turn on "Nearby saved places (background)" in Settings. It powers iOS/Android geofencing: your operating system watches up to 20 of your saved places and wakes the app for a fraction of a second when you cross into one of those ~350-meter radii. The app then schedules a single local notification. Your location never leaves your device for this feature. There is a 12-hour cooldown per place. You can revoke "Always" permission at any time in your phone's Settings; this immediately stops all geofencing.
5. Third-party services we use
- Google Places API — supplies the place data (names, addresses, photos, hours, reviews). When you search or view a place, your query and approximate location are sent to Google. Google's terms apply: policies.google.com/privacy.
- Google AdMob — shows ads to free users. AdMob may collect your device advertising ID and ad interaction data. You can opt out of personalized ads on iOS via Settings → Privacy & Security → Tracking, and on Android via Settings → Google → Ads. AdMob policy: support.google.com/admob/answer/6128543.
- RevenueCat — processes premium subscription state. Receives an anonymous user identifier and your subscription status. Does not receive your email or location. Policy: revenuecat.com/privacy.
- Apple Push Notification Service / Google Firebase Cloud Messaging — required to deliver push notifications. Receives only an anonymous push token and the notification payload.
- Replit — hosts our backend and database in the United States. Policy: replit.com/site/privacy.
We do not share your data with any third party other than the ones above, and only for the purposes listed.
6. Where your data is stored
The app's database is hosted in the United States. If you live outside the United States, your information will be transferred there. By using the app you consent to this transfer. We use industry-standard encryption in transit (TLS) and at rest.
7. Your rights
Regardless of where you live, you can:
- See your data. Email us and we'll send you everything we have on you within 30 days.
- Correct it. Most of it you can edit directly in the app.
- Delete it. Open the "You" tab → Account → Delete account inside the app. Everything goes within 7 days. If you can't reach the app, email us from the address you signed up with.
- Take it with you. Email us for an export of your saved places and notes in JSON.
- Opt out of ads tracking. Reset or disable your advertising ID in iOS or Android settings. Free users will still see ads; they just won't be personalized.
- Opt out of push notifications. Toggle them off in the app's Settings or in your phone's Settings.
If you live in California (CCPA/CPRA), the European Economic Area, the UK (UK GDPR), or another jurisdiction with a data-protection law, you have additional statutory rights. You can exercise all of them by emailing us at norellixstudio@swipetodiscover.com. We will never charge you a fee or deny service for exercising a privacy right.
8. Children
The app is rated 17+ and is not directed at children under 13. We do not knowingly collect information from children under 13. If you believe a child has signed up, email us and we'll delete the account.
9. Security
We use TLS for all data in transit and encrypt the database at rest. We hash account passwords with industry-standard algorithms. No system is perfectly secure; if we ever have a breach involving your personal information, we will notify you by email and through the app within 72 hours of confirming it.
10. Changes to this policy
We may update this policy as the app changes. The "Effective" date at the top will always reflect the latest version. If we make a material change (for example, a new third-party service that receives personal data) we will notify you in the app before the change takes effect.
11. How to contact us
Norellix StudioEmail: norellixstudio@swipetodiscover.com