Privacy Policy

1. What we collect

• Account: your @duq.edu email, the name you choose, and optionally your class year, dorm, interests and a profile photo.
• What you post: listings, photos, wanted requests, roommate posts, offers and messages you send to other students.
• Device: if you turn on notifications, a push subscription for that device. If you install the app, basic device/browser type.
• Usage: which screens you open and which features you use (via PostHog, with a random ID — no email). We do not record your keystrokes or sessions.

We never see your Duquesne password: sign-in works with a one-time code sent to your email.

2. How we use it

• To verify you are a Duquesne student and run the Service.
• To show your name, photo, class year and dorm to other students on your listings and profile (not your email).
• To send sign-in codes, notifications you opted into, and a weekly digest you can turn off any time.
• To match “Wanted” requests with new listings, and to tell you when a saved item drops in price.
• To understand what works and improve the app (aggregated, anonymous statistics).

3. Who sees what

Other verified students see your listings, your display name, photo, class year, dorm, rating and the messages you send them. Your email address is never shown to other users. Listings are also visible to anyone with a link (so you can share them), but contact requires a @duq.edu account.

4. Services we rely on

We use trusted providers to run the Service: Supabase (database, authentication, photo storage), Vercel (hosting), Brevo (email delivery), PostHog (usage analytics), Anthropic (AI that suggests listing titles and prices from a photo you choose to analyze), and web push services from Apple and Google for notifications. Each processes data only to provide its service to us.

5. We don’t sell your data

We do not sell or rent personal information, and we do not share it with advertisers. We may share aggregated, anonymous statistics (for example, “300 items sold during Winter Swap”) publicly or with Duquesne University.

6. Your choices

• Edit your name, photo, year and dorm any time in your profile.
• Turn notifications and the weekly digest on or off in your profile.
• Hide or delete your listings at any time.
• To delete your account and data, email hello@dukesswap.com from your @duq.edu address; we delete it within 30 days.

7. Retention and security

We keep your account while it is active. Listings expire automatically and messages are kept so both parties have a record. Data is stored on servers in the United States, encrypted in transit, with access limited to the people who run the Service.

8. Changes and contact

We may update this policy; the date above shows the latest version. Questions: hello@dukesswap.com.