Swip Deals
Privacy Policy
This Privacy Policy explains how Metrix Cyber Establishment (“Swip Deals”, “we”, “us”) collects, uses, shares, and protects your personal data when you use the Swip Deals mobile app and website (the “Service”). We are committed to the Saudi Personal Data Protection Law (PDPL) and its regulations. If you do not agree with this policy, please do not use the Service.
1.Who we are
- Data controller: Metrix Cyber Establishment
- Unified National Number: 7054335810
- Address: National Address JDBC8367, Jeddah, Kingdom of Saudi Arabia
- Contact for privacy requests: [email protected]
2.The data we collect
We only collect what we need to show you nearby deals and run your account.
a. Account & identity
- Phone number — to create your account and sign you in with a one-time code. We store it as a one-way cryptographic hash, not in plain text.
- Email address — if you choose email sign-in, and for essential service messages.
b. Location
- Approximate and precise location — used, with your permission, to show offers near you and (if you turn it on) to send “deal nearby” alerts while you’re out. You can turn location off at any time in Profile or your device settings.
c. Your activity in the app
- Your chosen interests/categories, offers you view, save (favorite), follow, or claim, searches you run, and reviews you write. Reviews are shown to others as from a “Verified visitor” — your name and contact details are never shown publicly with a review.
d. Device & technical data
- A notification (push) token so we can send you alerts you asked for.
- A random, anonymous device identifier used only to avoid double-counting how many people an offer reached. It is not linked to your identity.
- Standard technical data such as app version, device model, and OS version.
e. Diagnostics & analytics
- Crash reports and performance data (via Google Firebase Crashlytics) to find and fix bugs.
- Aggregated usage analytics (via Google Firebase Analytics) — which screens and features are used — to improve the app. Analytics is associated only with a hashed identifier, not your name or phone number.
We do not collect your contacts, photos, calendar, or files. We do not sell your data.
3.How we use your data
- Provide the Service — show nearby and relevant offers, let you save/claim deals, and manage your account.
- Notifications — send the push alerts you opted into (new matching deals, nearby deals, expiring claims).
- Improve & secure the Service — fix crashes, understand feature usage, prevent fraud and abuse, and keep the Service reliable.
- Comply with the law — meet our legal and regulatory obligations.
Legal bases (PDPL): your consent (e.g., location, push notifications, profiling for personalised deals — each of which you can withdraw), performance of the service you request, our legitimate interests in a secure, working product, and compliance with law.
4.Who we share it with
We share personal data only with service providers who process it on our behalf under contract, and only as needed to run the Service. These include:
- Google Firebase (Google LLC) — push notifications (FCM), crash reporting, and analytics.
- Our cloud hosting, database, and storage providers (application hosting, managed database, and file storage/CDN).
- An SMS/email provider — to deliver your one-time sign-in codes.
We may also disclose data if required by law or to protect rights, safety, and security. We do not sell your personal data and do not share it with third parties for their own advertising.
5.International transfers
Some of our providers process data on servers outside the Kingdom of Saudi Arabia. Where that happens, we rely on appropriate safeguards and the conditions for transfer permitted under the PDPL.
6.How long we keep it
We keep your personal data for as long as your account is active and as needed to provide the Service. When you delete your account, we delete or irreversibly anonymise your personal data, except where we must retain certain records to comply with the law. Aggregated or anonymised data that cannot identify you may be kept.
7.Security
We protect your data with measures including encryption in transit (TLS/HTTPS), hashing of phone numbers, least-privilege access controls, and secure, access-controlled infrastructure. No method of transmission or storage is 100% secure, but we work to protect your data.
8.Your rights
Under the PDPL you have the right to:
- Access the personal data we hold about you,
- Correct inaccurate data,
- Delete your data (“right to be forgotten”),
- Withdraw consent at any time (e.g., for location, push, or personalised deals),
- Object to / restrict certain processing, and
- Request a copy of your data.
How to exercise them:
- Delete your account and data directly in the app: Profile → Delete account (permanent; this erases your account and associated data). See /delete-account.
- Turn off location or notifications in Profile or your device settings at any time.
- Or contact us at [email protected] and we will respond within the period required by law.
9.Children
The Service is not directed to children under the age of 18 and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.
10.Changes to this policy
We may update this policy from time to time. We will post the new version here and update the “Last updated” date; significant changes will be notified in the app.
11.Contact us
Email: [email protected]
Address: National Address JDBC8367, Jeddah, Kingdom of Saudi Arabia
Unified National Number: 7054335810
If you are not satisfied with our response, you may lodge a complaint with the Saudi Data & Artificial Intelligence Authority (SDAIA), the PDPL supervisory authority.