Privacy Policy
Last updated: June 2026
Who we are
SwipeSage is an AI-powered credit card advisor built for Indian users, available as a free Android app on Google Play. We help you find the credit card that pays you back the most based on your actual spending — not generic comparison tables. SwipeSage is not affiliated with any bank or card issuer.
This policy covers both this website (swipesage.in) and the SwipeSage mobile app.
What we collect and why
We collect only what we need to serve you.
In the SwipeSage app
When you create an account and use the app, we collect:- Profile you provide — name, phone, city, address, income, monthly spend, credit score, employment type, company, spending categories, cards you already hold, and your financial goals.
- Account & sign-in — email, your Google sign-in ID, and a device push token (FCM) for notifications.
- Your conversations with the AI Sage.
- Usage events — how you interact with the app, so we can improve it.
- Crash reports (via Sentry) — to diagnose and fix bugs.
- Consent records — what you agreed to, and when.
Product updates (newsletter)
If you subscribe to product updates on this website, we collect:- Your email address
- The date and time of submission
- The page source (e.g., marketing site)
Contact form submissions
If you reach out via our contact form, we collect:- Your name
- Your email address
- The message you send us
What we do NOT collect
- We do not collect your credit card numbers, CVV, or PIN
- We do not collect your Aadhaar, PAN, or bank account numbers
- We never sell your personal data to anyone
- We are not paid by banks to rank their cards above others
How we store your data
Your data is stored securely in Google Firebase (Firestore), a cloud database hosted on Google Cloud infrastructure with servers in the Asia region. Firebase encrypts data in transit (TLS) and at rest.
Google acts as a data processor on our behalf. Their privacy practices are governed by the Google Cloud Data Processing Addendum.
To generate the AI Sage’s replies, your chat messages are processed by OpenAI, which acts as our processor — working strictly on our behalf under contract. This is not “sharing” your data with a third party: OpenAI may not use it for their own purposes, and we never sell or share your personal data with anyone.
Analytics & cookies
On this website we use Google Analytics 4 to understand how visitors find and use the site, so we can improve it. We keep it light:
- It is configured cookie-light — it does not store Google Analytics cookies on your device, and advertising and cross-device signals are turned off.
- We honour your browser’s Do-Not-Track setting — if it is on, no analytics loads at all.
- We may also use the Meta Pixel to measure whether our posts and ads bring people to the site (it would set cookies; it is currently off).
We use analytics only in aggregate — never to identify you personally. This website shows no third-party ads, and the SwipeSage app is ad-free. You can additionally opt out with the Google Analytics opt-out add-on.
How long we keep your data
In the app:
- Profile & account data: kept while your account is active. Deleting your account triggers a full cascading wipe (see Delete your account).
- Analytics events: 90 days.
- Notification log: 30 days.
- Resolved grievances: 365 days.
- Data-export files: 2 days, then auto-deleted.
- Audit log & consent records: at least 1 year, append-only (required for legal compliance).
On this website:
- Newsletter emails: until you unsubscribe.
- Contact submissions: 12 months after your query is resolved, then deleted.
Your rights
You have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete your account and data at any time — instantly in the app, or via our account deletion page
- Withdraw consent at any time
- Nominate someone to act on your behalf, as provided under the DPDP Act
To exercise any of these rights, email us at hello@swipesage.in with the subject "Privacy Request". We will respond within 7 business days.
Third-party links
When you apply for a card recommended by SwipeSage, you are redirected to the issuing bank's website. We are not responsible for the privacy practices of those websites. We encourage you to read their privacy policies before submitting any application.
Changes to this policy
We may update this policy as the product evolves. When we make material changes, we will update the "Last updated" date above. Continued use of SwipeSage after changes constitutes acceptance of the updated policy.
Governing law
This Privacy Policy is governed by the laws of India, including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (DPDP Act). Any disputes shall be subject to the jurisdiction of courts in Mumbai, Maharashtra.
Contact us
Questions about this policy? Reach us at hello@swipesage.in or use our contact form.