Privacy Policy

Last updated: 29 March 2026

SuperSwap ("we", "our", "us") is a crew scheduling coordination tool. This Privacy Policy explains how we collect, use, and protect your information when you use our mobile application.

1. Information We Collect

When you create an account, we collect:

• Email address — used for authentication and account recovery
• Staff number — used to identify you within the app
• Role and fleet — used to filter relevant content for you
• Password — stored securely using industry-standard encryption (bcrypt)

2. Information You Create

When you use the app, you may create:

• Flight swap listings (routes, dates, preferences)
• Simulator session swap listings
• Reserve month swap listings
• Swap requests and messages to other users

This content is visible to other authenticated users of the app.

3. How We Use Your Information

• To provide and maintain the SuperSwap service
• To authenticate your identity when you sign in
• To display your listings and swap requests to other users
• To match you with relevant swap opportunities based on your role and fleet

We do not sell, rent, or share your personal information with third parties for marketing purposes.

4. Data Storage and Security

Your data is stored on Supabase, a secure cloud platform. All data transmission is encrypted using HTTPS/TLS. Passwords are hashed and never stored in plain text. Access to data is protected by Row Level Security policies — users can only access data they are authorised to see.

5. Data Retention and Automatic Deletion

We retain your data for as long as your account is active, subject to the following automatic deletion policies:

• Swap listings — automatically deleted 30 days after their expiry date
• Simulator session listings — automatically deleted 30 days after their expiry date
• Reserve month listings — automatically deleted 30 days after their expiry date
• Swap requests — automatically deleted 30 days after being accepted, declined, or cancelled
• Reports — automatically deleted 30 days after being resolved

We do not store expired or completed data beyond 30 days. All deletions are permanent and irreversible.

If you delete your account, all your personal data, listings, swap requests, and session data are permanently deleted from our systems immediately — no 30-day wait.

6. Your Rights

You have the right to:

• Access your personal data (via the My Profile section)
• Correct your information (via Edit Profile in the app)
• Delete your account and all associated data (via Settings → Delete Account)
• Change your password at any time (via Settings → Change Password)

7. Third-Party Services

We use the following third-party services:

• Supabase — authentication and database hosting
• Expo / React Native — app framework

These services have their own privacy policies and data handling practices.

8. Cross-Border Data Transfer

Your data may be processed on servers located outside the United Arab Emirates. We use industry-standard security measures, including HTTPS/TLS encryption and Row Level Security policies, to protect your data during transfer and storage.

9. Children's Privacy

SuperSwap is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of any material changes through the app.

11. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the United Arab Emirates, including Federal Decree-Law No. 45/2021 on Personal Data Protection (PDPL). If you are located in the Dubai International Financial Centre (DIFC) or Abu Dhabi Global Market (ADGM), the respective data protection regulations of those jurisdictions may also apply.

12. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at: nadim@superswapp.com