Privacy Policy

Effective date: September 22, 2026 · Data controller: NSLabs AB, Kasinogatan 1, 211 44 Malmö, Sweden

The short version

• We collect two things: an anonymous account identifier and your device's push token.
• We never ask for or store your name or email address.
• There are no analytics SDKs, no advertising SDKs, and no third-party trackers in the app.
• We never sell or share your data with third parties.
• You can delete your account and everything tied to it, in-app, at any time.

What we collect

SwiftPoke collects exactly two pieces of information, and only if you sign in:

• Sign in with Apple subject identifier. This is an opaque, per-app string Apple generates to identify your account. It is not your name or email. SwiftPoke never requests or stores either. It's used purely as your account key.
• APNs device token. The identifier Apple's push service uses to deliver notifications to your device. It's what lets SwiftPoke tell your phone "this just restocked." It's deleted when you sign out or delete your account.

Both of these are linked to your account. Browsing the restock feed doesn't require signing in, and browsing itself collects neither of the above.

What we don't do

• No analytics SDKs.
• No advertising SDKs.
• No third-party trackers of any kind.
• Your data is never used for tracking, and never sold or shared with third parties.

Why we collect it

We use your account identifier and device token only to run the service you signed up for: matching restocks against your saved filter tags and sending you a push notification when one hits. Under GDPR, our lawful basis is performance of a contract (delivering the alert service you asked for) and, for the underlying reliability of that service, our legitimate interest in keeping it running correctly.

Apple's role

Sign in with Apple and push notifications are Apple platform services that SwiftPoke relies on to work. Apple's own privacy policy governs how Apple itself handles your Apple ID during sign-in and message delivery, separately from this policy.

Data retention

Your account identifier and device token are kept for as long as your account exists. Your device token is removed immediately when you sign out or delete your account.

Deleting your account

You can delete your account at any time from Settings → Delete Account inside the app. This permanently deletes your account, your saved filter tags, and every device registered to it. It can't be undone.

Your rights (GDPR)

SwiftPoke is operated from Sweden, so GDPR applies. You have the right to:

• Access the data we hold about you.
• Rectification of inaccurate data.
• Erasure of your data. You can do this yourself in-app, or ask us to.
• Portability: get a copy of your data in a portable format.

To exercise any of these rights, email swiftpoke@nslabs.se.

Contact

Questions about this policy or your data: swiftpoke@nslabs.se.