Goswappix Privacy Policy
Applies to the website goswappix.app and the Goswappix apps for iPhone and Android.
1. In short
- Goswappix is a board of requests. People find counter-routes and hand money to each other, in their own cities. Money does not pass through us: we have no wallets, balances or deposits.
- To sign in you only need a phone number. We do not ask for your passport name or documents. You may add an email address if you wish.
- Your number is not shown to other members. Others see your nickname, rating, reviews and, if you allow it, your city.
- Data is stored on servers in the European Union. Sign-in codes are delivered by Telegram and Twilio.
- You can download your data and delete your account under "My data".
- The service is only for people aged 18 or older.
2. Who we are
Data controller: Goswappix. The operating company is being registered in France; its name, address and registration number will appear here once it is registered.
Questions about data: support@goswappix.app.
A separate data protection officer has not been appointed yet. We handle all data questions at this address.
3. What data we process and why
The "Basis" column says why we are allowed to process the data: contract — needed for the service to work under the Terms of Use; legitimate interest — the safety of the platform and protection of members; consent — you ticked it yourself; law — the law requires it.
| Data | Why | Basis | How long we keep it |
|---|---|---|---|
| Phone number | Sign-in, one account per number, security messages | Contract | While the account exists. Erased on deletion |
| Sign-in code request: the code (we keep not the code itself but its protected fingerprint), time, number of attempts | Check that the number is yours; prevent code guessing | Contract, legitimate interest | The code is valid for 5 minutes. Request records are erased when the account is deleted |
| IP address when a code is requested | Protection against SMS abuse: no more than 20 code requests from one address per hour | Legitimate interest | Only in server memory, 1 hour |
| IP address, page address and time of the request (without link parameters and without cookies) | Server log: finding errors and attacks | Legitimate interest | While the log is needed to find errors. We will state the exact period in the next edition |
| Email (optional) and the confirmation link (we keep only its fingerprint) | Confirm the address, tell you about important changes. A confirmed email is needed for your trust level to rise above “Newcomer” | Contract; you add it yourself | Until you remove the email in your account or delete the account. The link is valid for 24 hours |
| Consents: 18+, terms, policy, news — with the edition number, time and source (website or app) | Prove that you gave consent, and ask again when a new edition comes out | Law, legitimate interest | Kept after account deletion too, but without phone, nickname and email |
| Nickname (permanent, cannot be changed) | Your name on the platform | Contract | While the account exists. Erased on deletion |
| City and whether to show it | Matching counter-routes, profile | Contract; showing it is your choice | While the account exists |
| Sessions: fingerprint of the session key, device or browser name, time of sign-in and of last activity | Keep you signed in, show the list of your devices | Contract, legitimate interest | A session lasts 30 days. Erased when the account is deleted |
Device tag: in the app — a random phone tag, on the website — a random browser tag in the gsx_device cookie (we keep only their fingerprints) | Stop a blocked violator from coming back | Legitimate interest | Together with the session; if blocked, in the block list |
| Fingerprint of the IP address at sign-in (for IPv6 — of the /64 network; we do not store the address itself) | Stop a blocked violator from coming back. Signing in from a blocked member's address is not refused — many people can share one address — but such an account's requests are checked by a person and an administrator is notified | Legitimate interest | With the session — 30 days. If the account is blocked — in the block list for 90 days |
| Requests: cities, currencies, amounts, method (cash or local transfer), dates, note, statuses and history | Request feed, matching, checking requests | Contract | While the account exists. If a request led to a deal, together with the deal |
| Offers and deals: terms and their versions, comment, events, deadlines, who confirmed what | Record the parties' agreement, show the deal's progress | Contract, legitimate interest | After account deletion they remain without your phone, nickname and email ("deleted member"), so the other side keeps its history |
| Recipients you named: name, phone, city | Send the recipient an SMS link for consent and confirmation | Contract — for you; legitimate interest — for the recipient | While your account exists. On deletion the name and number are erased; only a masked number remains in the deal |
| Recipient's consent and receipt mark: fingerprint of the link and code, time, attempts | Show that the recipient confirmed participation and receipt themselves | Contract, legitimate interest | Together with the deal |
| Meeting code: secret for the changing QR code, time of the check, attempts | The person handing over makes sure the right recipient is in front of them | Contract, legitimate interest | Together with the deal. The code itself is not stored |
| Deal chat messages, including the earlier text after an edit or deletion | Reach an agreement; review a case if something went wrong | Contract, legitimate interest | Remain after account deletion without your nickname and phone. The text may still contain data you wrote yourself |
| Reviews, ratings and replies to reviews | Members' reputation | Contract, legitimate interest | Remain after account deletion without your nickname and phone |
| Vouches (who vouched for whom, note) | Trust level | Contract | While the account exists; after deletion without your personal data |
| Trust level and limit: number of deals, time in the service, vouches, penalties | Limit the amount of open requests (newcomer — 500 USD in equivalent) | Contract, legitimate interest | While the account exists |
| Cases and breaches: category, text, correspondence with support, decision, appeal | Reviewing breaches of the rules. Support does not decide who is right in a money dispute | Legitimate interest; law — on a request from a public authority | Remain after account deletion without your personal data, so decisions can be checked |
| Block: date, reason, who blocked; fingerprints of the number, device tags, confirmed email and session IP addresses from the last 30 days | Keep a violator from coming back | Legitimate interest | Fingerprints of the number, devices and email remain after account deletion while the block is in force; IP fingerprints — 90 days |
| Freeze and moderation flags: date and reason of a freeze for a low rating, the flag “sign-in from a blocked member's address”, why a request awaits manual review | Protect members from repeat fraud | Legitimate interest | While the account exists or until an administrator lifts it |
| Notifications in your account | Tell you about offers, deals, security | Contract | While the account exists |
| Push token (iPhone or Android) and language | Send push notifications | Contract; you give permission in your phone settings | While the session is active; erased on sign-out and on account deletion |
| Export archive (a copy of your data) | Fulfil your right to a copy of your data | Law | Can be downloaded for 7 days. Erased on a new export or on account deletion |
| Deletion request: dates, reason for postponement | Carry out the deletion | Law | Until deletion |
What we do not collect. Passport and documents, your phone's location (you choose your city yourself), photos and files in the chat (there are none in this version). There is no advertising and no third-party analytics. The camera in the app is used only to read the meeting QR code.
We do not verify members' identity at present. If we start, we will update this policy first.
Cryptocurrency is switched off in the service; we do not collect wallet addresses.
City list. City names come from the open GeoNames gazetteer. We keep a copy of it, so your data does not go there when you search for a city.
News. If you ticked consent to news, we may write to you about news of the service. There are no such mailings at present. This consent is optional, and saying no changes nothing.
Data of people without an account (recipients). If a member named you as a recipient, we store the name, phone number and city they entered and send you an SMS with a link. The SMS contains the nickname of the person handing over and the amount. We do not create an account for you. If you do not know this person, simply do not confirm participation: without your consent the deal will not start. To have your data deleted, write to support@goswappix.app.
Automated decisions. The trust limit is calculated automatically from the number of deals, time in the service, vouches and penalties. It limits the amount of requests but does not close the account. Blocks and decisions on cases are made by a person. If you disagree with your limit, write to us.
Request review and freeze. A request goes to the feed right away if its description has no contact details, the amount is within the limit, the account is older than a day or has a completed deal, there is no open case against you, and the account is neither flagged nor frozen. Otherwise a person reviews the request, usually within a day. If the average rating falls below 3.0 with ratings from at least three different members, the account is frozen automatically: new requests, offers and deals are unavailable; deals already started can be finished. Only a person — an administrator — can lift the freeze or block the account. If you disagree, write to us.
4. Who we share data with
We do not sell data and do not share it for advertising.
| Recipient | What they receive | Where | Role |
|---|---|---|---|
| Hetzner Online GmbH | Everything that passes through the server: website, API, logs, database backups | EU | Hosting, processes data on our behalf |
| Supabase | Database | EU | Processes data on our behalf |
| Telegram (Telegram Gateway) | Phone number and sign-in code | Outside the EU | Delivers the code in Telegram if the number has Telegram |
| Twilio Inc. | Number and SMS text: sign-in code; for a recipient — the link, the nickname of the person handing over and the amount | USA | Processes data on our behalf |
| Resend | Your email address and the email text | Ireland, EU | Sends emails on our behalf |
| Telegram (administration bot) | Nickname, route and amounts of a request awaiting manual review, and the reason; nickname and reason of a freeze or flag | Outside the EU | Delivers messages to the Goswappix administrator so they can decide. No phone numbers or email addresses |
| Apple (APNs) | Device token and push text | USA | Delivers push to iPhone |
| Google (Firebase Cloud Messaging) | Device token and push text | USA | Delivers push to Android |
| OpenFreeMap | Your IP address when the website or app loads the map | Depends on the map service | Third-party map service |
| Google Fonts (app only) | Your IP address when the app loads a font | USA | Third-party font service. On the website, fonts are served from our server |
| Other members of the deal | Nickname, rating, city (if allowed), deal terms, messages, recipient's name and masked number | — | — |
| Public authorities | Only what a lawful request requires | — | — |
Push notification texts contain no amounts or codes.
We get exchange rates from open sources. Your data is not sent to them. Server failure alerts contain no user data.
5. Transfers outside the EU
Some recipients are outside the EU (see the table above). We send them only what they need for their work: the number and SMS text, the token and push text. Twilio states that it participates in the EU-U.S. Data Privacy Framework and applies the EU standard contractual clauses.
Data is stored in the EU. If the law of your country requires its citizens' data to be stored inside the country, please note: we store it in the EU.
6. Your rights
You can:
- find out what data we hold and get a copy of it;
- correct inaccurate data. You change your city in your profile. The nickname is fixed for good: if it contains your personal data, write to us and we will sort it out;
- delete data — with the exceptions in section 7;
- restrict processing;
- receive your data in a machine-readable format — a JSON file;
- object to processing based on legitimate interest;
- withdraw consent — for example to news or to push (push — in your phone settings);
- complain to a data protection authority: in the country where you live, or in France (CNIL).
How to use your rights. Export and deletion are under "My data" on the website and in the app. For everything else, email support@goswappix.app. To make sure a request comes from you, we may ask you to repeat it through a case in your account. We reply within 30 days and try to do so sooner.
7. Account deletion and export
Export. Under "My data", press "Export". The archive is ready immediately and available for 7 days. It contains your profile, email, consents, sessions, requests, offers, deals, recipients, your messages, your reviews and reviews about you, cases and notifications. Other people's messages and phone numbers are not in the archive.
Deletion. On the website and in the app: "My data" → "Delete account". If you cannot sign in, write to support@goswappix.app.
- Your open requests are withdrawn and pending offers are cancelled immediately. New deals are no longer available.
- If there is an unfinished or stopped deal, the deletion waits until it is closed: this keeps your obligations to the other side.
- 14 days after the request (or after the deals are closed), your phone number, email, nickname, city, sessions, push tokens, notifications, export archive, and the names and numbers of your recipients are erased.
- Changed your mind? Cancel the deletion before then.
What remains after deletion and why: deal records, messages, reviews and cases without your nickname, phone and email ("deleted member"), so the other side keeps the history of the agreement and its reviews; consent records, as proof; fingerprints of the number and device if the account was blocked, so a violator cannot come back.
Backups. Database backups are made every 6 hours and kept on our server for 14 days. Deleted data disappears from the backups when that period ends. The database provider also keeps its own backups; deleted data disappears from them too when their period ends.
8. Age
Goswappix is only for people aged 18 or older. You confirm your age at sign-in. If we learn that an account was created by someone under 18, we will close it and delete the data. Report it to: support@goswappix.app.
9. Cookies and browser storage
There are no advertising or analytics cookies.
| Name | Why | Period |
|---|---|---|
gsx_session | Keeps you signed in. Not accessible to page scripts, sent only over a secure connection | Until the session ends (30 days) |
gsx_csrf | Protection against forged requests | No longer than the session |
gsx_lang | Remembers the language you chose | 1 year |
gsx_tz | Your time zone, to show deal times in local time | 1 year |
gsx_device | A random browser tag: protection against repeat fraud — a blocked violator's browser is recognised even with a new number. It contains nothing about you; we keep only its fingerprint. Not accessible to page scripts | 2 years |
| Browser storage (unfinished request) | Not to lose an unfinished request | Until you submit the request or clear your browser |
All of them are needed for the website to work, so we do not ask for separate consent to them.
The app stores the session key and the device tag in the phone's secure storage, and settings in the app's regular storage.
10. Security
- The connection to the website and the app is encrypted (HTTPS).
- We keep sign-in and confirmation codes, session keys and link keys only as fingerprints from which they cannot be recovered.
- The server log does not record link parameters or cookies.
- A recipient's number is shown to other members only masked.
- Access to data is limited: the database is closed to public access, and support sees a deal chat only when reviewing a case.
- The chat is encrypted in transit, but not end-to-end.
In case of a breach that threatens your rights, we will notify the supervisory authority and you within the time limits set by law.
11. Changes
We announce material changes at least 14 days in advance: in your account and by email, if you have added one. If new consent is needed, the service will ask for it at your next sign-in.
Edition 2 of 04.11.2026 is currently in force. What changed compared with edition 1 of 04.11.2026: a fingerprint of the IP address at sign-in and the gsx_device browser tag to prevent repeat fraud; an email fingerprint in the block list; automatic review of requests and a freeze for a low rating; messages to the administrator via a Telegram bot.
12. Contact
Goswappix. The operating company is being registered in France; its name, address and registration number will appear here once it is registered.
Email: support@goswappix.app. We answer by email.
Edition 2 of 04.11.2026