Privacy Policy

1. Who we are

This Privacy Policy describes how Swary (“Swary,” “we,” “us,” or “our”) collects, uses, shares, and protects information when you use our websites, web apps, mobile apps, APIs, booking widgets, and related services (collectively, the “Services”).

Our principal website is https://swary.app. Contact: support@swary.app.

This Policy should be read with our Terms of Service.

2. Products covered

This Policy applies to the Swary product suite, including:

• Swary Dispatch — web and native dispatch, fleet, CRM, billing, calendar, and operations tools
• Swary Driver — chauffeur trip workflow, maps, messaging, and job offers
• Swary Private Client — passenger booking, tracking, payments, and trip history
• Swary Concierge — booking on behalf of guests (hotels, venues, assistants)
• Swary Health — Health-oriented dispatch / medical-transport workflows with stronger privacy and audit controls
• Booking widgets & booking agents — embedded or hosted booking experiences on company websites
• Farm-out / partner tools — partner company collaboration for servicing trips
• Display boards, open jobs / job board, notifications (email, SMS, push), invoicing, and related admin features

Transportation companies (“Companies”) that use Swary decide how they operate their fleets and what passenger information they enter. When we process data for a Company customer, we act as a service provider / processor to that Company for much of the ride and passenger data; Companies remain responsible for their own privacy notices to their riders where required.

3. Information we collect

3.1 Account & profile

• Name, email, phone number, username, and password (stored hashed)
• Company name, logo, branding, timezone, and configuration settings
• Roles and permissions (owner, dispatcher, driver, client, concierge, admin)
• Optional Google sign-in data (email, name, profile image) when you use Google
• Biometric unlock preferences on device (we do not receive raw Face ID templates)

3.2 Ride, booking & operations data

• Passenger details (name, phone, email), pickup/drop-off addresses, date/time, flight numbers, notes, stops, luggage/passenger counts, vehicle type, and trip type
• Driver assignment, status times (e.g., IR/OL/POB/DO/GI), and activity logs
• Pricing, driver pay, invoices, payment status, tips, and related billing metadata
• Farm-out / partner offers and acceptance status between Companies (including offer amounts shared with partners)
• Job board posts, interests, and related network visibility settings
• Chat / messaging content when you use in-product messaging

3.3 Swary Health–related data

When a Company enables Swary Health features or marks a trip as Swary Health, the Services may process more sensitive passenger and trip details needed for medical or health-related transportation (for example, more restrictive display of passenger contact and address details, unlock audit events, and related workflow metadata). Treat such information carefully. See Section 8.

3.4 Location

With permission, we collect device location from Driver (and other location-enabled) apps to support live tracking, ETAs, and coordination. Location is used while the relevant app features are in use according to your device permissions and Company settings.

3.5 Payments & commercial data

Payment card details are processed by payment providers (e.g., Stripe, Square). We typically receive tokens, last-four digits, status, and related transaction metadata rather than full card numbers.

3.6 Communications & device data

• Emails, SMS, and push notifications we send or receive (including delivery status)
• Device/app identifiers, push tokens, IP address, browser/OS type
• Usage logs, approximate geolocation from IP, and diagnostic/error data

4. How we use information

• Provide, operate, secure, and improve the Services
• Enable booking, dispatching, driving, concierge coordination, and tracking
• Support farm-out / partner workflows between Companies
• Send transactional messages (confirmations, status updates, invoices, OTPs)
• Authenticate users and prevent fraud or abuse
• Process payments and produce invoices/receipts where enabled
• Maintain audit/activity logs (including Swary Health field-unlock events such as actor, time, field, and IP where recorded)
• Comply with law and enforce our Terms
• Communicate product announcements and support (you may opt out of marketing)

We do not sell personal information. We do not use this campaign/channel for promotional SMS unless a Company separately configures and discloses that, and we generally limit SMS to transactional/operational traffic.

5. How we share information

• Within a Company: Authorized dispatchers, admins, and roles at that Company can access relevant fleet, ride, and customer records.
• Drivers & passengers: Information needed to fulfill a trip may be shared between the assigned driver, passenger, and Company (e.g., names, pickup details, status).
• Farm-out partners: When a Company farms out a trip, selected trip details and offer information are shared with the partner Company according to product rules (including restricted fields until acceptance or unlock where Health controls apply).
• Service providers: Hosting, databases, email (e.g., Resend), SMS (e.g., Twilio), maps (e.g., Google), payments (e.g., Stripe, Square), analytics/diagnostics, and similar vendors under contracts that limit use of the data.
• Legal & safety: When required by law, to protect rights/safety, or in connection with a merger, financing, or sale of assets.

6. SMS & messaging

If you provide a mobile number for bookings, verification, invoices, or account access, we (and Companies using Swary) may send transactional SMS related to those activities. Message frequency varies. Message and data rates may apply. You can reply STOP to opt out of SMS where that keyword is supported on the number, or contact the Company / support@swary.app. Reply HELP for help. Consent to SMS is not required as a condition of purchasing transportation separately from the Company that serves you, except where an SMS is necessary for security (e.g., OTP).

7. Cookies & similar tech

We use cookies, local storage, and similar technologies for authentication, session continuity, preferences, and basic analytics/security. You can control cookies through your browser settings; some features may not work if disabled.

8. Swary Health privacy controls

Swary Health provides product features intended to reduce unnecessary exposure of sensitive passenger and trip details—for example, limiting what is shown by default on Health-marked trips, requiring explicit unlock of certain fields, recording unlock/audit events, and applying stricter share rules in farm-out and driver views.

These controls are designed to support Companies that transport patients or handle sensitive trip information. This Policy does not mean that a Business Associate Agreement (BAA) is in place, or that Swary is a covered entity or that every Customer configuration is HIPAA compliant. Companies are responsible for determining whether HIPAA or other health-privacy laws apply to them, configuring the Services appropriately, training their staff, and executing any BAAs or other agreements separately if required. Contact support@swary.app regarding enterprise Health / BAA discussions.

9. Security

We use administrative, technical, and organizational safeguards appropriate to the nature of the Services, including encrypted transport (TLS), hashed passwords, access controls, and audit logging for sensitive actions. No method of transmission or storage is 100% secure. Companies and users must protect credentials, devices, and screens when viewing passenger details.

10. Retention

We retain information for as long as needed to provide the Services, comply with law, resolve disputes, and support operational and audit needs (including ride history and activity logs). Companies may request deletion or export subject to legal holds and technical limits. Backup copies may persist for a limited period.

11. Your rights & choices

Depending on your location and role, you may be able to:

• Access or correct account information in-product
• Request deletion of an account or specific personal data
• Opt out of marketing emails
• Opt out of SMS as described above
• Revoke Google OAuth access in your Google account settings
• Manage location and notification permissions in your device settings

Passengers whose data was entered by a Company should typically contact that Company first. You may also email support@swary.app. We may need to verify your request and may deny requests when another party is the controller, or when retention is legally required.

12. Children

The Services are not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child has provided information, contact us and we will take appropriate steps.

13. International users

We are based in the United States. If you access the Services from another country, your information may be processed in the U.S. and other locations where we or our vendors operate.

14. Changes

We may update this Policy from time to time. We will post the revised Policy on this page and update the “Last updated” date. Material changes may also be communicated in-product or by email where appropriate. Continued use after the effective date means you acknowledge the updated Policy.

15. Contact

Swary
Email: support@swary.app
Web: https://swary.app