Privacy Policy

This policy explains how Orkazoo LTD ("we", "us") handles your information when you use Swell+.

Who we are

Swell+ is operated by Orkazoo LTD, London, United Kingdom. For any privacy question, contact privacy@swell.plus.

What this policy covers

This policy applies to the Swell+ mobile app (published at plus.swell.app) and the Swell+ website (swell-plus-landing.lovable.app and swell.plus).

Data we collect

• Account data — your email address and a hashed password when you create an account, or your Google email address when you sign in with Google.
• Petition record — the titles, platforms, URLs, and dates of petitions you log. This is stored locally on your device and, if you have an account, on our servers so it syncs across your devices.
• Gmail data — if you use the Scan Gmail feature, we access your Gmail solely to search for petition confirmation emails. We read relevant emails in-flight, extract the petition title and platform, and immediately discard the email content. We never store your Gmail credentials or the contents of your emails.
• Usage data — standard server logs (IP address and request timestamps), retained for 30 days.

How we use data

• To provide Swell+ and sync your petition record across your devices.
• To parse petition confirmation emails when you ask us to.
• To authenticate your account and keep it secure.

Data we do not collect

We do not sell your data, show advertising, or share your data with third parties except where required by law.

Google OAuth

When you use Sign in with Google or Scan Gmail, we request only the minimum scopes needed. Gmail access (gmail.readonly) is used solely on your explicit request to find petition confirmation emails, and only for as long as needed to complete the scan.

Your rights

Under the UK GDPR and GDPR you have the right to access, rectify, erase, port, and restrict the use of your personal data, and to object to processing. To exercise any of these, email privacy@swell.plus. You can also complain to the UK Information Commissioner's Office at ico.org.uk.

Data retention

Account data is held until you delete your account. Petition records held locally stay on your device until you remove them or uninstall Swell+. Server-side records are deleted on request.

Children

Swell+ is not directed at children under 13. We do not knowingly collect personal data from children.

Contact

privacy@swell.plus
Orkazoo LTD, London, United Kingdom