Privacy Policy
How we collect, use, and protect your personal data.
Last updated: 2025-05-15
1. Data Controller
The data controller for personal data is BetaSwap, contactable at: [email protected].
2. Data Collected
2.1 Data provided directly by the user
- Registration data: email address, username, password (bcrypt-hashed), registration date.
- Profile data: spoken languages, preferred app categories, Android devices used (brand, model, Android version).
- User-generated content: feedback submitted to campaigns, app descriptions, campaign objectives.
2.2 Automatically collected data
- Navigation data: IP address (anonymized after 90 days), browser and OS, pages visited, access dates and times.
- Technical cookies: authentication session (see Cookie Policy).
- Testing activity: verified active days, session duration (aggregated from Firebase Analytics), anomaly score, reputation.
2.3 Third-party data — Firebase Analytics
For Firebase-verified campaigns, the developer grants BetaSwap read-only access to aggregated Google Analytics data from their Firebase project. BetaSwap reads exclusively: daily DAU, average session duration, hourly event distribution. This data contains no personal information of the app's end users and is retained for the campaign duration plus 30 days, then deleted.
3. Purposes and Legal Basis for Processing
- Service delivery (Art. 6.1.b GDPR): account management, campaigns, credits, activity verification, transactional emails.
- Legal obligations (Art. 6.1.c GDPR): access log retention for security purposes.
- Legitimate interest (Art. 6.1.f GDPR): fraud prevention, anomalous pattern detection, service improvement. Legitimate interest is balanced with data subject rights through anonymization measures.
4. Data Retention
- Active account data: for the duration of the contractual relationship.
- After account deletion: personal data deleted within 30 days, unless legal retention obligations apply.
- Security logs: 12 months from the event.
- Aggregated Firebase data: campaign duration + 30 days.
- Backups: data in backups deleted within 90 days of account deletion.
5. Data Sharing
BetaSwap does not sell or transfer user personal data to third parties for commercial purposes. Data may be shared with:
- Campaign developer: the tester's email is communicated to the developer for addition to Google Play Console (only for campaigns the tester participates in).
- Technical service providers: hosting (VPS server), SMTP email system. All providers operate as data processors under Art. 28 GDPR.
- Competent authorities: in case of legal obligation or judicial order.
6. Data Subject Rights
Under Arts. 15-22 GDPR, you have the right to:
- Access (Art. 15): obtain confirmation of processing and a copy of your data.
- Rectification (Art. 16): correct inaccurate data.
- Erasure (Art. 17): obtain deletion of data ("right to be forgotten").
- Restriction (Art. 18): obtain restriction of processing in certain cases.
- Portability (Art. 20): receive your data in a structured, machine-readable format.
- Objection (Art. 21): object to processing based on legitimate interest.
- Complaint: lodge a complaint with your national data protection authority.
To exercise these rights: [email protected]. We will respond within 30 days.
7. Data Security
BetaSwap adopts appropriate technical and organizational measures to protect personal data: HTTPS/TLS connections, bcrypt-hashed passwords, restricted database access, regular backups, server security updates.
8. International Data Transfers
Data is stored on servers located in the European Union. Where services with non-EU servers are used (e.g., Google OAuth), transfers occur in compliance with the safeguards provided in Chapter V of the GDPR (Standard Contractual Clauses or European Commission adequacy decisions).
9. Minors
The Service is intended for users at least 16 years old. We do not knowingly collect data from minors. If you believe a minor has created an account, contact us for immediate deletion.
10. Changes to Privacy Policy
Any changes will be notified via email to registered users and published on this page with a new update date.