Privacy Policy

Effective Date: March 19, 2026

1. Introduction

This app is operated by DualForge Labs LLC ("we", "our", or "us"). DualForge Labs LLC operates the Swaps Hub mobile application. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our App.

2. Information We Collect

2.1 Information You Provide

Data	Purpose
Name, email, password	Account creation and authentication
Phone number	Account verification (SMS OTP), fraud prevention, and account recovery
Display name, bio, avatar	Public profile
Street address, city, state, zip	Shipping for exchanges
Item photos and descriptions	Facilitating exchanges across all categories
Swap preferences (categories, sizes, age ranges)	Matching algorithm optimization
Reviews and chat messages	Community trust and communication
Referral activity	Referral program credit tracking

2.2 Information Collected Automatically

Data	Purpose
Device identifier (fingerprint)	Fraud prevention — detecting multi-account abuse
Device location (GPS)	Matching nearby users, suggesting meetup spots
App usage analytics	Improving the service

2.3 AI/LLM Processing

When you request a new item category, we use AI (AWS Bedrock / Claude) to generate form field schemas for that category. The category name and description you provide are sent to the AI service for processing. No personal information is included in these requests. Generated schemas are stored and may be made available to other users after admin review.

2.2 Information Collected Automatically

Data	Purpose
Device location (latitude/longitude)	Matching with nearby families, suggesting meetup spots
Push notification token	Sending notifications about matches and exchanges
Device type and OS version	App compatibility and debugging

2.3 Information from Third Parties

Stripe: Payment processing. We do not store your full credit card number. Stripe provides us with a customer ID, subscription status, and billing events.
Amazon Cognito: Authentication. Manages your login credentials securely.

3. How We Use Your Information

To operate and improve the App.
To match you with nearby families for item exchanges.
To suggest safe, public meetup locations.
To process membership payments.
To send push notifications about matches, exchanges, and account activity.
To enforce our Terms of Service and prevent abuse.
To respond to support requests.

4. How We Share Your Information

With other users: Your display name, avatar, bio, item listings, and reviews are visible to other users. Your exact location is never shared — only your approximate area is used for matching.
With service providers: Stripe (payments), AWS (hosting and storage), OpenStreetMap (meetup spot suggestions). These providers process data on our behalf under contractual obligations.
For legal reasons: We may disclose information if required by law, court order, or to protect the rights and safety of Swaps Hub or its users.

We do not sell your personal information to third parties.

5. Location Data

We collect your location to match you with nearby families and suggest meetup spots.
Your precise coordinates (lat/lng) are stored securely and never exposed to other users.
Public item listings display only an approximate area, not your exact location.
You may revoke location permissions at any time through your device settings, but this will affect matching functionality.

6. Children's Privacy

Swaps Hub is intended for use by adults (18+) who exchange items on behalf of their families. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

7. Data Retention

Account data is retained while your account is active.
After account deletion, we retain anonymized exchange records for up to 12 months for dispute resolution.
Payment records are retained as required by tax and financial regulations.
Chat messages are deleted 90 days after the associated exchange is completed.

8. Data Security

All data is transmitted over HTTPS/TLS.
Passwords are managed by Amazon Cognito with industry-standard hashing.
Images are stored in private S3 buckets and served via CloudFront CDN.
API access requires authenticated tokens with automatic expiration.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal data we hold about you.
Correct inaccurate information.
Delete your account and associated data.
Export your data in a portable format.
Opt out of push notifications via device settings or in-app preferences.

To exercise these rights, contact us at support@dualforgelabs.com.

10. California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell personal information.

11. Notification Preferences

You can manage push notification preferences within the App under Profile → Notification Preferences. You may also disable notifications entirely through your device settings.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via in-app notification. The "Effective Date" at the top reflects the latest revision.

13. Contact Us

For privacy-related questions or requests:

Email: support@dualforgelabs.com