Last updated: April 3, 2026
This privacy policy explains how Swipcall collects, uses, and protects information when you use the Swipcall Android application and this website. Swipcall is a local-first customer management app built for tradespeople such as plumbers, electricians, and locksmiths. We designed Swipcall so that your personal and business data stays on your device. This policy is written in plain language so you can understand exactly what happens with your data.
This policy describes how we process your data when you use Swipcall, and the legal bases we rely on for each processing activity, as detailed in Section 4 below.
The data controller responsible for your data is:
Swipcall
Operated by Cadvix, an unregistered partnership based in Israel
Email: eitaymcc@gmail.com
Given the nature and scale of our processing activities, we are not required to appoint a Data Protection Officer under Article 37 of the GDPR. For all privacy-related matters, contact us at eitaymcc@gmail.com.
For all privacy-related requests, including exercising your rights under the GDPR, please contact us at the email above. We aim to respond within 30 days.
Swipcall is a local-first app. The vast majority of data never leaves your device. Below is a complete list of data categories, where they are processed, and who can access them.
This data is stored in a local SQLite database on your Android device. Swipcall has no server that receives this data. We cannot access, read, or recover it.
| Data | Service | Purpose |
|---|---|---|
| Email address, display name | Google Sign-In | Authentication (creating and signing into your account) |
| Anonymous crash reports (stack traces, device model, OS version - no personal data) | Firebase Crashlytics (Google) | Identifying and fixing bugs |
| Anonymous usage events (feature tap counts, screen views - no personal data) | Firebase Analytics (Google) | Understanding which features are used so we can improve the app |
| Anonymous user ID, purchase receipts | RevenueCat | Managing subscriptions and verifying purchases |
| Data | Service | Purpose |
|---|---|---|
| Encrypted backup file (AES-256-GCM encrypted copy of your local database) | Google Drive (your personal account) | Backup and restore, initiated by you |
| Appointment details you choose to sync | Google Calendar (your personal account) | Two-way calendar sync, initiated by you |
Under Article 6 of the GDPR, every type of data processing must have a legal basis. Here is the legal basis for each processing activity in Swipcall:
| Processing activity | Legal basis (Art. 6 GDPR) | Explanation |
|---|---|---|
| On-device processing of call logs, contacts, and customer records | Art. 6(1)(b) - Performance of a contract | This processing is necessary to provide the core service you downloaded the app to use (caller identification and customer management). |
| Google Sign-In (email, name) | Art. 6(1)(b) - Performance of a contract | Authentication is necessary to provide the service and manage your account. |
| Firebase Crashlytics (anonymous crash reports) | Art. 6(1)(f) - Legitimate interest | Our legitimate interest is maintaining app stability and fixing bugs. The data is anonymous and the impact on your privacy is minimal. |
| Firebase Analytics (anonymous usage counts) | Art. 6(1)(a) - Consent | Firebase Analytics is only initialized after you opt in within the app settings. You can withdraw consent at any time by disabling analytics in the app settings. |
| RevenueCat (subscription management) | Art. 6(1)(b) - Performance of a contract | Necessary to process and verify your subscription purchase. |
| Google Drive backup (encrypted) | Art. 6(1)(a) - Consent | You choose to enable this feature. You can stop at any time. |
| Google Calendar sync | Art. 6(1)(a) - Consent | You choose to enable this feature. You can disconnect at any time. |
Swipcall requests the following Android permissions. Each is required for a specific feature:
You can revoke any permission at any time through your Android device settings. Revoking a permission will disable the feature that depends on it, but the rest of the app will continue to work.
The following third parties process data on our behalf or as part of the services you use through Swipcall:
| Processor | Role | Data processed | Privacy policy |
|---|---|---|---|
| Google LLC (Firebase Crashlytics) | Sub-processor | Anonymous crash data | Google Privacy Policy |
| Google LLC (Firebase Analytics) | Sub-processor | Anonymous usage events | Google Privacy Policy |
| Google LLC (Sign-In, Drive, Calendar) | Independent controller / processor | Email, name, backup files, calendar events | Google Privacy Policy |
| RevenueCat Inc. | Sub-processor | Anonymous user ID, purchase receipts | RevenueCat Privacy Policy |
| Google LLC (Google Play) | Processor | Payment and subscription data | Google Privacy Policy |
We do not sell, rent, or share your personal data with any other third parties. We do not use advertising networks or tracking services.
Swipcall is operated from Israel, which has an adequacy decision from the European Commission, meaning the Commission recognizes Israel as providing an adequate level of data protection.
Some third-party processors listed above (Google LLC and RevenueCat Inc.) are based in the United States. Data transferred to these US-based processors is protected by the following safeguards:
We apply the following retention periods:
| Data | Retention period | How to delete |
|---|---|---|
| On-device data (customers, calls, appointments, settings) | Kept until you delete it or uninstall the app | Use "Delete all data" in Settings, or uninstall the app |
| Google Drive backups | Kept in your personal Google Drive until you delete them | Delete the backup files from your Google Drive, or disconnect backup in the app |
| Google Sign-In data (email, name) | Stored locally on your device; kept by Google as part of your Google account | Local copy is deleted when you uninstall the app or use "Delete all data" in Settings. To remove from Google, revoke Swipcall's access in your Google account security settings |
| Firebase Crashlytics data | 90 days (Google's default retention) | Automatically deleted by Google after the retention period |
| Firebase Analytics data | 14 months (Google's default retention) | Automatically deleted by Google after the retention period |
| RevenueCat subscription data | Subscription duration plus up to 7 years as required by Israeli tax law | Contact us at eitaymcc@gmail.com to request deletion after subscription ends and the tax retention period has elapsed |
If you are in the European Economic Area (EEA), the United Kingdom, or Switzerland, you have the following rights regarding your personal data:
For data stored on your device, you can exercise your rights directly through the app:
For data held by third-party processors (Firebase, RevenueCat, Google), email us at eitaymcc@gmail.com with the subject line "GDPR Data Request". Please include your email address so we can identify your account. We will respond within 30 days. There is no fee for exercising your rights. If your request is complex or you make multiple requests, we may extend the response period by up to 60 additional days and will inform you of the extension.
Where we rely on your consent as the legal basis for processing (Firebase Analytics, Google Drive backup, and Google Calendar sync), you have the right to withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of any processing we carried out before you withdrew it.
To withdraw consent:
If you believe that our processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority. You can do this in the EU/EEA member state where you live, where you work, or where the alleged violation took place.
A list of EU/EEA data protection authorities is available on the European Data Protection Board website.
If you are in Israel, you may also lodge a complaint with the Israeli Privacy Protection Authority (PPA).
We encourage you to contact us first at eitaymcc@gmail.com so we can try to resolve your concern directly.
Providing your data to Swipcall is not a statutory or contractual requirement. However:
Swipcall does not use automated decision-making or profiling as defined in Article 22 of the GDPR. No decisions with legal or similarly significant effects are made about you based on automated processing.
When you tap "Send WhatsApp" in the app, Swipcall opens the WhatsApp application using a standard Android intent (deep link) with the customer's phone number. This is a direct device-to-app communication. No data passes through any Swipcall server. The phone number is sent directly from your device to WhatsApp on your device. WhatsApp's own privacy policy governs how WhatsApp handles that data.
The Swipcall website (this site) uses only essential local storage (localStorage) to remember basic preferences such as your language selection and accessibility widget settings (font size, contrast, and display preferences). We do not use tracking cookies, advertising cookies, or any third-party cookies. A localStorage notice banner is displayed to inform you about this storage. localStorage does not track you across sites.
Swipcall is a business tool designed for professionals. It is not intended for use by anyone under the age of 16. We do not knowingly collect personal data from children under 16. If you believe that a child under 16 has provided us with personal data, please contact us at eitaymcc@gmail.com and we will take steps to delete that data.
We take the following measures to protect your data:
Swipcall is operated from Israel and is subject to the Israeli Protection of Privacy Law, 5741-1981. In addition to the GDPR rights described above, all users have the following rights under Israeli law:
To exercise these rights, contact us at eitaymcc@gmail.com.
If you believe your privacy rights under Israeli law have been violated, you may lodge a complaint with the Israeli Privacy Protection Authority (PPA).
Under the Israeli Protection of Privacy Law, database registration with the Registrar of Databases is required when a database contains personal data of more than 10,000 individuals. Swipcall will complete this registration if and when this threshold is reached.
We may update this privacy policy from time to time to reflect changes in the app, the law, or our practices. When we make changes:
We encourage you to review this page periodically.
If you have questions about this privacy policy, want to exercise your data rights, or have a concern about how your data is handled, please contact us:
Email: eitaymcc@gmail.com
Subject line for data requests: "GDPR Data Request"
We aim to respond to all inquiries within 30 days.
Swipcall