Privacy Policy
Effective Date: March 19, 2026 · Last Updated: September 26, 2026
1. Introduction
This app is operated by DualForge Labs LLC ("we", "our", or "us"). DualForge Labs LLC operates the Swaps Hub mobile application. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our App.
2. Information We Collect
2.1 Information You Provide
| Data | Purpose |
|---|
| Name, email, password | Account creation and authentication |
| Display name, bio, avatar | Public profile |
| Street address, city, state, zip | Shipping for exchanges |
| Item photos and descriptions | Facilitating exchanges across all categories |
| Swap preferences (categories, sizes, age ranges) | Matching algorithm optimization |
| Reviews and chat messages | Community trust and communication |
| Referral activity | Referral program credit tracking |
2.2 Information Collected Automatically
| Data | Purpose |
|---|
| Device location (GPS latitude/longitude) | Matching nearby users and suggesting meetup spots |
| Push notification token | Sending notifications about matches and exchanges |
2.3 AI/LLM Processing
When you request a new item category, we use AI (AWS Bedrock / Claude) to generate form field schemas for that category. The category name and description you provide are sent to the AI service for processing. No personal information is included in these requests. Generated schemas are stored and may be made available to other users after admin review.
2.4 Information from Third Parties
- Stripe: Payment processing. We do not store your full credit card number. Stripe provides us with a customer ID, subscription status, and billing events.
- Amazon Cognito: Authentication. Manages your login credentials securely.
3. How We Use Your Information
- To operate and improve the App.
- To match you with nearby members for item exchanges.
- To suggest safe, public meetup locations.
- To process membership payments.
- To send push notifications about matches, exchanges, and account activity.
- To enforce our Terms of Service and prevent abuse.
- To respond to support requests.
4. How We Share Your Information
- With other users: Your display name, avatar, bio, item listings, and reviews are visible to other users. For matching and browsing, only your approximate area is used — never your exact location. If you and a matched member choose shipping, your name and shipping address are shared with each other (they appear on the prepaid shipping label) and with the carrier so the box can be delivered.
- With service providers: Stripe (payment processing), Amazon Web Services including Amazon Cognito (hosting, storage, and authentication), EasyPost and the carriers it uses — USPS, UPS, and FedEx — (generating prepaid shipping labels and delivering packages), Expo (push notifications), and OpenStreetMap (meetup spot suggestions). These providers process data on our behalf or as needed to provide their service.
- For legal reasons: We may disclose information if required by law, court order, or to protect the rights and safety of Swaps Hub or its users.
We do not sell your personal information to third parties.
5. Location Data
- We collect your location to match you with nearby members and suggest meetup spots.
- Your precise coordinates (lat/lng) are stored securely and never exposed to other users.
- Public item listings display only an approximate area, not your exact location.
- You may revoke location permissions at any time through your device settings, but this will affect matching functionality.
6. Children's Privacy
Swaps Hub is intended for use by adults (18+). We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
7. Data Retention
- We retain your account data while your account is active.
- When you delete your account, we delete your personal data, except where we must retain certain records to comply with legal, tax, or fraud-prevention obligations.
- Payment records held by our payment processor (Stripe) are retained as required by applicable tax and financial regulations.
8. Data Security
- All data is transmitted over HTTPS/TLS.
- Passwords are managed by Amazon Cognito with industry-standard hashing.
- Images are stored in private S3 buckets and served via CloudFront CDN.
- API access requires authenticated tokens with automatic expiration.
9. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you.
- Correct inaccurate information.
- Delete your account and associated data.
- Export your data in a portable format.
- Opt out of push notifications via device settings or in-app preferences.
To exercise these rights, contact us at support@dualforgelabs.com.
10. California Residents (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell personal information.
11. Notification Preferences
You can manage push notification preferences within the App under Profile → Notification Preferences. You may also disable notifications entirely through your device settings.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via in-app notification. The "Effective Date" at the top reflects the latest revision.
13. Contact Us
For privacy-related questions or requests: