Privacy Policy
Effective 22 October 2026. Dropwave SRL is the controller of your personal data on SwipeSparks. We never sell it, and we never use your chats to train AI without asking you first.
1. What we collect, why, and for how long
| Data | Why we use it | Legal basis (GDPR) | Kept for |
|---|---|---|---|
| Email, password (encrypted), date of birth, the name you choose | Run your account, keep SwipeSparks 18+ | Contract; legal obligation | Until you close your account, plus 30 days |
| Age-check result and date | Give access to explicit content | Legal obligation | While your account is open |
| Chats, likes, matches, chosen vibes | Deliver chats and show you personas you may like | Your explicit consent, because this can reveal your sexual preferences | Until you delete the chat or your account |
| Purchases (amounts, dates, transaction IDs) | Billing, refunds, fraud prevention, accounting | Contract; legal obligation | As long as accounting law requires |
| Device, IP address, usage logs | Security, fraud prevention, fixing problems | Legitimate interests | 12 months |
| Reports and moderation decisions | Safety and legal duties | Legal obligation | 3 years after the decision |
| Creators only: identity documents and verification records | Verify identity and age, keep legally required records | Legal obligation; contract | 7 years after the account closes |
Card and wallet details are handled by our payment partners; we never see full card numbers. We receive only the result of age checks, never your ID image.
2. Sensitive data
Your chats and preferences can reveal information about your sex life or sexual orientation. We process them only with the explicit consent you give at signup, which you can withdraw at any time in settings. Withdrawing means we delete your chats and matching preferences, and you will not be able to keep chatting.
3. Who we share data with
We share data only with service providers that work for us under contract:
- Hosting and storage: Yourwebhoster.eu (the Netherlands)
- Age and identity checks: Didit
- Payments: Norpo (card, Apple Pay and Google Pay) and NOWPayments (crypto). For card payments, the licensed provider you use at checkout (for example Stripe, MoonPay or Coinbase) handles your card details and any identity check as an independent controller under its own privacy policy.
- AI replies: our built-in system and Venice.ai (USA). Venice receives the persona's description, the recent messages of that chat and whether you are age-verified, never your email, real name or payment details.
- Photo and video storage and delivery: Bunny.net (Slovenia, EU)
- Emails (sign-up, password resets, notifications): Resend (USA)
- Content safety scanning: Hive (USA)
- Push notifications, if you turn them on: the push service of your browser or phone (for example Google, Apple or Mozilla)
Creators see your chosen name, your messages to their personas and your "Verified 18+" badge, never your email, date of birth or payment details. We disclose data to authorities only when the law requires it.
4. Transfers outside the EU
If a provider processes data outside the European Economic Area, we use the European Commission's standard contractual clauses or another approved safeguard.
5. Your rights
You can ask to access, correct, delete or export your data, restrict or object to how we use it, and withdraw consent. Most of this works from your account settings; for anything else, write to support@swipesparks.com. We reply within one month. You can also complain to your data protection authority, which for us is Romania's National Supervisory Authority for Personal Data Processing (ANSPDCP, dataprotection.ro). You can also complain to the authority where you live.
6. Security
We encrypt data in transit and sensitive data at rest, deliver paid images through short-lived private links, and limit staff access to what each role needs.
7. Cookies
We use only cookies needed to keep you logged in and secure (including a device identifier that helps us spot account abuse), plus one that remembers the language you choose (English or Romanian) for a year. If you open a creator's personal link, a cookie remembers that link for 30 days so the creator is credited if you sign up. The app also stores a few settings on your device, such as whether you have seen the welcome screens. We ask before using any analytics cookies.
8. Changes and contact
We will tell you in the app before material changes take effect. Questions: support@swipesparks.com.
Terms of Service · Creator Agreement · Content and Moderation Policy · Age Verification Policy · Privacy Policy