PRIVACY POLICY

Last Updated: 26/03/2025

INTRODUCTION

This privacy notice describes how Sway As Limited ("Sway.ly", "we", "us", "our") collects, uses, shares, and protects your personal data as "user", whether you are a parent or a child, when you use our services via our website (www.sway.ly) or our apps (we've referred to both as our "Site" in this policy). We are committed to protecting your privacy and ensuring the security of your personal data. Our Privacy FAQ for Kids [here] sets out the same information in a child friendly format.

SUMMARY

At Sway.ly, the privacy of our users is paramount. We are committed to protecting the privacy of our service users and website visitors. This Privacy Policy sets out how we collect and look after your personal information and your rights in relation to the manner in which we use your personal information.

The most important things to know are that:

  • We take the protection of children and adult personal information very seriously.
  • We will never rent or sell our users' personal information.
  • In order to offer you our services, we require social media account specific information: social media handle and password and how you/your family interacts with them (likes, comments, reposts, shares, interaction with advertising).
  • We will only share your/your family's personal data with our service providers with the purpose of providing our services or to authorities to comply with our legal obligations.

We do urge you however, to read this Privacy Policy so you understand how we collect, process and use your personal information.

1. ABOUT SWAY.LY

The Controller is Sway As Limited, doing business as Sway, a company registered in the United Kingdom with address at 3 Walden Road, Chislehurst, Kent BR7 5DH. For any questions, suggestions, or complaints regarding your personal data, or exercise your rights, contact our Data Protection Officer at support@sway.ly.

2. WHAT TYPES OF PERSONAL INFORMATION DO WE PROCESS?

  • Account Creation, Set-up and Registration data. We will collect the following personal data about you when you create your user account or otherwise register to our services: name, surname, nickname, username(s), password(s), family relationships, email address, age, gender, mobile telephone number. This information is required to enable Sway.ly to provide you the services.

  • Payments. We collect payment related details including billing name, billing contact details (street addresses, email addresses), and payment instrument details. This information is required to provide you the services. Paddle is our current payment provider, but we can contact additional payment processors. Any payment data they collect directly may be processed according to their terms and privacy policy, which is provided to you during the payment process.

  • Communications and submissions. We collect data when you communicate with us (e.g. via email or our Site) or submit information, for example when you sign up to our beta-release through our Site, contact us for queries, comments or out of curiosity, respond to surveys, provide feedback or participate in promotions.

  • Social Media username and password. We collect your username and password of social media accounts to access your social media interactions exclusively to provide the services.

  • Social Media Data: Information of your social media accounts and the social media post you interact with or social media accounts that interact with your account, based on the Hypertext Transfer Protocol or as otherwise provided by you to us. This information is required to provide you the services.

  • Device Information: Details of the device used to access the services such as operating system, browser type or version, the address of a referring site (if any) and your activity on our Sites such as what pages were visited and what links were clicked. We also collect or store Your IP address, applications installed and screen time configuration through our app.

  • Analysis Results: Insights generated through Al processing and data analytics of your account's use of our services. This information is required to provide you with those services.

  • Service Customisation Data: Personalised recommendations of information resources.

  • Preference information: Your marketing preferences, including any consents you have given us.

If you choose not provide us the information required to provide you the services, as previously described, we may be unable to do so.

3. WHAT ARE OUR SOURCES OF DATA

We collect personal data directly from you and may also process:

  • Information we obtain from third parties: including from social media platforms and family members if they add you as a user in their account, as well as from service providers and other business intelligence sources.
  • Information we collect automatically: information collected through cookies or similar tracking technologies on our website and the use of our services.
  • Information we generate: analytics results and service customisation data.

4. WHAT ARE THE PURPOSES OF DATA PROCESSING AND LEGAL BASIS?

We collect and use your personal data to provide our services and comply with the law. In some places, like the European Economic Area (“EEA”), the United Kingdom ("UK") and Mexico, we may need a specific legal reason to use your information. This Section describes how we use your information, and, if applicable, the legal basis for collecting your information. If we need to collect any other information from you, we'll explain why when we collect it.

The table below sets out why we process your data and to the extent European Economic Area and the United Kingdom law is applicable, the lawful basis for the processing:

PurposeLegal Basis
To fulfil our contractual obligations with you, which includes setting up and managing your Sway.ly Account, communicating with you, billing administration activities, process payments and otherwise providing our services, as well as sending newsletters and promotions, if so requested by you.
  • Performance and preparation of a contract with you or to take steps at the request of the data subject prior to entering into a contract.
  • Necessary for our legitimate interest in running our business and providing you with our services.
Managing our services, which includes:
  1. Analytics results and service customization data.
  2. Improving navigation, maintenance and support, fraud prevention and implementing security measures.
  3. Promoting, measuring, improving and securing our services, as well as their functionalities.
  4. To troubleshoot and support our services.
  5. Recommendation and satisfaction surveys
  • Performance and preparation of a contract with you or to take steps at the request of the data subject prior to entering a contract.
  • Necessary for our legitimate interest in running our business and promoting, measuring, improving and securing our services, as well as its functionalities.
Use information provided by social media platforms or trusted third parties to complement, analyse and combine your collected data through the services in order to provide such services.
  • Necessary for our legitimate interest in running our business and promoting, measuring, improving and securing our services, as well as their functionalities.
  • Necessary to comply with a legal obligation.
Comply with a legal or regulatory obligation: for compliance with a legal or regulatory obligation that we are subject to.
  • Necessary to comply with a legal obligation.
To communicate with users, prospective users and people who contact us.
  • Performance and preparation of a contract with you or to take steps at the request of the data subject prior to entering a contract.
  • Necessary for our legitimate interest in running our business.
To send you marketing promotions, offers, competitions and events by email (subject to your preferences). Please see the section below on Marketing for more information.Processing based on your consent for direct marketing purposes.
To generate anonymized and aggregated reports for internal analysis, statistics and publications. These reports will not identify individual users.Necessary for our legitimate interest in running our business and promoting, measuring, improving and securing our services, as well as their functionalities.

If other laws require us to obtain your consent before processing your personal data for the described purposes, we will do so in accordance with those laws.

5. CHILDREN'S DATA

In line with the UK's laws on processing children's personal data, where consent is required by law, parents/guardians of anyone under the age of 13 must provide that consent and children over the age of 13 will be asked to give their own consent.

We do not use children's data for marketing purposes.

6. DATA SHARING

Personal data will be shared with third party service providers, who will process it on behalf of Sway.ly so that we can provide our services to you. Such third parties include providers of website hosting and maintenance, customer support service providers, payment providers, analytics providers for service improvement. We also have Al processing partners that generate insights required for the services, which are exclusively of publicly available data of social media end users public posts, as such provided to us by third-party sources.

We do not transfer data outside the UK.

In the event that the business is sold or integrated with another business, your details will be disclosed to our advisers and any prospective purchaser's adviser and will be passed to the new owners of the business.

7. DATA RETENTION

We retain personal data:

  • Only for as long as necessary for purposes stated in this Privacy Policy.
  • In accordance with legal and regulatory requirements.
  • Subject to potential longer retention for legal claims.

Retention periods are determined by the following criteria:

  • Statutory requirements.
  • Contractual obligations.
  • Legitimate business needs.

8. THIRD PARTY SERVICES AND LINKS.

If you grant us access to information of your YouTube, Instagram, Facebook, or TikTok accounts, we may automatically retrieve Social Media Data, as previously defined. We utilize this Social Media Data, along with data from other sources, to provide our Services. Please carefully review the terms and conditions and privacy policies of your respective social media platforms, as they govern, among other relevant terms, the information shared with us and other businesses, and the purposes for which it is shared.

Please note that our services contain links to other websites or services (chats, helplines, etc.), which have their own privacy policies. Sway.ly is not responsible for the privacy practices of those external sites, and we encourage you to review their privacy policies.

9. YOUR RIGHTS

As a data subject, you have the following rights under applicable data protection laws:

  • Right to be informed: You have the right to know whether we are processing your personal data and the lawful basis for doing so, including legitimate interest assessments.
  • Right of access: You have the right to access your personal data and receive information about how we process it. There are exceptions to this right, so that access may be denied if, for example, making the information available to you would reveal personal data about another person, or if we are legally prevented from disclosing such information. You are entitled to see the personal data held about you.
  • Right to data accuracy: You have the right to have corrected inaccurate personal data concerning you. You also have the right to have incomplete personal data completed.
  • Right to erasure or cancellation: In certain circumstances, you have the right to request the deletion or cancellation of your personal data, for instance when the personal data is no longer necessary for the purposes for which it was collected, or when, among other things, your personal data have been unlawfully processed.
  • Right to restrict or limit processing: You have the right to request that we restrict the processing, use and/or disclosure of your personal data in specific situations or for specific purposes.
  • Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format that allows you to easily transfer it to another controller.
  • Right to object: In certain situations you have the right to object to the processing of your personal data and to ask us to block, erase and restrict your personal data.
  • Right to withdraw consent: Where we are relying on consent to process your personal data, you have the right to withdraw it, although we may have other legal grounds for processing your data for other purposes, such as those set out in the table at section 4 above.

To exercise these rights, please contact us at support@sway.ly where we will provide you with information on the procedure on how to exercise them.

10. MARKETING

If you've shared your contact information with us, we may send you our newsletter and marketing emails about our services and other updates about Sway. If you don't want to receive these emails, you can check the appropriate box when you sign up for our services simply click the 'unsubscribe' link in any email we send or contact us at the email address in the final section of this Policy. Remember, unsubscribing from newsletter and marketing emails won't stop important service-related messages.

11. DATA SECURITY

We prioritize the security of all your personal data. In compliance with applicable laws, we implement security provisions to safeguard your information. This includes but is not limited to, encryption, pseudonymisation, anonymisation, access controls, tokenisations and data masking.

12. DATA RETENTION

Sway stores your personal data only for as long as needed to provide services or while your account remains active. We also retain data when legally required or for legitimate purposes. Please note that our backup systems may temporarily store residual copies per our disaster recovery plans.

13. COOKIES AND TRACKING TECHNOLOGIES

We use cookies and other tracking technologies on our Website. To find out more, please consult our policy on trackers available here.

14. CHANGES TO THIS PRIVACY NOTICE

This Policy may be amended or revised from time to time at the discretion of Sway. Changes to this Policy will be posted on our website https://www.sway.ly/privacy and, where appropriate, notified to you by email. If we propose to make any material changes, we will provide notice on this page prior to the change becoming effective. We encourage you to periodically review this Policy for the latest information on our privacy practices.

15. COMPLAINTS AND CONTACT INFORMATION

If you believe we have not complied with data protection laws, you can lodge a complaint with the applicable data protection authority, including with:

  • UK Information Commissioner's Office (ICO)
  • Relevant EU Data Protection Authorities

For any privacy-related questions, please contact: support@sway.ly.