Privacy Policy
Last updated: October 21, 2026 · Website and iPhone app
Who operates Switch Offer
This notice covers the Switch Offer iPhone app and switchoffer.app. Justin Kang operates Switch Offer as an individual based in New Jersey, United States. Contact hello@switchoffer.app for privacy questions. The public business mailing address is shown at the end of this page.
Purchases take place on merchant websites. Their privacy notices and the affiliate network practices apply to those visits separately. Switch Offer does not take payment or fulfill orders.
Information in the app
- Guests can browse the brand directory without providing a name or email. Creating an account requires a verified email. A display name is optional. We do not ask for a phone number.
- The app uses a self reported date of birth to check its minimum age of 13 before contact details. It discards the local date after the check. If you create a cloud account, the date is transmitted temporarily to Supabase to check eligibility on the server. Our profile stores eligibility and its confirmation time rather than the full date. This is not verified identity.
- Accounts use Supabase Auth to verify email ownership with a code. Sign in uses an email code or a password where one has been set. Supabase processes your email, authentication records and session information. Your private profile contains an optional display name, broad category interests and age eligibility information. App session credentials are stored in Apple Keychain. Planning, saving, brand details, offers and shopping links require an eligible verified account.
- Purchase plans and saved items remain on your device in SwiftData. They may include purchase text, budget, timing and switching preferences. They do not automatically synchronize through the cloud profile and are not sent to PostHog. Device backups may contain them depending on your settings.
- The app reads the published brand catalog from Supabase. A deliberate shopping action opens an approved Awin link in the browser and redirects to the merchant website. Our app does not read merchant checkout form fields.
Please avoid putting medical history, diagnoses, payment details or other unnecessary sensitive information in shopping plans or support messages. Free text may contain sensitive information if you choose to enter it; we do not treat all possible shopping text as anonymous or nonsensitive.
Information on the website
This website provides app information, support and information for brand partners. New launch notification email requests are closed. Earlier requests collected an email, optional category, adult confirmation, email permission, submission time and notice version. Those requests did not create app accounts, and closing intake does not expand the email permission previously given.
Optional website campaign collection is now off. Earlier email requests could include campaign labels with permission. Hosting and security providers process request information such as IP address, browser information, request time and requested pages. Earlier signup protection used temporary hashed identifiers; hashing does not necessarily make information anonymous.
Support messages include the details you send and the information needed to resolve your request. Do not send a password, verification code or identity document with a routine support request.
Why information is used
- To provide account access, verify email ownership, apply age eligibility rules and maintain your private profile.
- To store your plans and saved items locally, show the catalog and open the shopping link you choose.
- To deliver requested verification emails, respond to support and privacy requests, secure the service and comply with legal obligations.
- To fulfill earlier requests for a confirmation and one launch notification. These permissions do not enroll you in recurring marketing emails, texts or brand mailing lists.
- With a separate choice, to understand basic app use. Refusing optional analytics does not prevent use of app features available to your account or guest session. Optional website campaign collection is off.
Where a legal basis is required, we rely on consent for optional analytics and requested launch emails, performance of the service you request for account and app functions, legitimate interests balanced against your rights for security and support, and legal obligations where applicable. A privacy notice is not a waiver of your rights.
Service providers and affiliate shopping
- Supabase provides the app catalog, image storage, email authentication and private cloud profiles. App requests expose connection information such as IP address to the provider. Its request and security records may include approximate location derived from that address. This does not require GPS access.
- Resend delivers verification and requested service emails. It processes recipient addresses, message contents and delivery information. We do not send purchase plans to it to deliver routine verification messages.
- PostHog receives limited app events only when analytics collection is available and you opt in. Events describe visits, catalog views, saves, removals and shopping clicks using controlled catalog identifiers and a random session identifier. The app excludes names, emails, dates of birth, purchase text, authentication tokens, account identifiers and shopping URLs. No session replay or automatic screen recording is used.
- Awin and participating merchants process affiliate clicks and may use cookies or other identifiers to attribute eligible purchases. The app sends you through the approved tracking URL when you choose to shop. It does not add your contact details or purchase plan text to that link. This notice does not describe the whole shopping journey as free of cookies or tracking.
- OpenAI Sites and Cloudflare provide website hosting and infrastructure. Cloudflare D1 stores earlier website email requests and related suppression records. Namecheap Private Email provides our public support mailbox.
Providers process information needed for their role. We may disclose information to comply with lawful obligations, protect rights and security, or transfer the service with appropriate safeguards and notice. A change of operator does not create permission for unrelated marketing.
We do not sell your contact details or purchase plans, publish private plans, or use them to target advertising across unrelated services. Affiliate commissions are compensation to Switch Offer and do not authorize sharing your contact details with a brand.
Analytics, cookies and choices
App analytics is optional and can be turned off in Account settings. Turning it off stops future app events and resets the local session identifier. It does not automatically erase events already received by PostHog. Contact us if you have a question about previously collected information.
The website can store a choice to keep optional tracking off. Optional campaign collection is disabled, and saved campaign labels from earlier visits are cleared when the current page loads. Hosting may also set cookies. The observed inventory and its limits are explained at https://switchoffer.app/cookies. That notice also explains how merchant and Awin pages are separate from app API traffic.
Optional website campaign tracking stays off, including when your browser sends Global Privacy Control or Do Not Track. Website controls do not control cookies on merchant or Awin pages, or app analytics settings.
Notifications and guided planning
Notifications are optional local reminders controlled by your iPhone permission and app settings. The current reminder does not contain purchase plan text. Notification permission does not subscribe you to email or text marketing.
The guided planner uses local matching rules, not a paid generative AI service. Where voice input is available, it requires microphone and speech permission and supported on device recognition. App code does not write an audio recording or send your voice to an external AI provider. Ordinary typed planning remains available. Your iPhone settings control microphone and speech permission.
Retention and deletion
Local plans and saves remain on the device until you remove them or use the app clearing, sign out or deletion controls. Removing the app may remove local data. Device backups and copies you made are controlled separately by your device settings.
The cloud account and profile remain while the account is maintained, unless removed through deletion or otherwise required for a lawful purpose. Signing out clears local account information but does not delete the cloud account. In app account deletion requires confirmation and recent email verification, removes the authentication account and related private profile, and clears app plans, saves, credentials and reminders. Help is available at https://switchoffer.app/privacy-requests.
Earlier website email requests follow these cleanup rules: unconfirmed requests after seven days, confirmed records after 365 days, and category and campaign information after 90 days. Notified records are eligible for removal 30 days after the launch notification. Cleanup depends on the protected maintenance process running, so records can remain until that happens. You may request earlier deletion.
An unsubscribe removes the active email request and retains a hashed email identifier and withdrawal time to prevent unwanted future emails. This limited suppression record must not be reused for marketing. We retain it while the earlier notification program operates and review it when that program closes.
Ordinary support correspondence is retained for 12 months after the issue is resolved. Specific support records may be kept longer for an ongoing complaint, dispute, security investigation or legal obligation. Security logs, delivery records and analytics have separate retention periods needed to secure and maintain the service. Provider retention and backups are separate from deletion of active app records. We do not promise immediate deletion from every log, backup or recipient copy. Contact us for information about a particular request.
Processing locations and security
We are based in the United States. Providers may process information in the United States and other countries, where privacy laws may differ. Where applicable law requires transfer safeguards, those requirements apply. Continued use is not a waiver of those safeguards. Contact hello@switchoffer.app to ask about the providers involved in your information.
We use access restrictions and security measures intended to protect personal information, including authenticated access to private cloud profiles and restricted server administration. No system or transmission can be guaranteed completely secure. Do not share account verification codes.
Your rights
Depending on applicable law, you may have rights to access, correct, delete or receive a portable copy of information, withdraw consent, restrict or object to processing, or appeal a decision. You can ask us about these rights at https://switchoffer.app/privacy-requests without creating a new account.
We may need proportionate verification before disclosing or changing private records. We will explain a lawful reason if a request cannot be fulfilled in full. We do not penalize you for exercising privacy rights. Withdrawal does not invalidate processing that was lawful before withdrawal.
Where GDPR applies, we normally respond within one month, with a permitted extension explained within the initial period. Other applicable deadlines and appeal rights remain available. You may complain to a relevant privacy regulator, including an EEA supervisory authority or the UK Information Commissioner, without first contacting us.
Children and changes
The app is not intended for children under 13. Earlier website email requests required age 18 or older; no new requests are accepted. If you believe a child under the applicable age provided information, contact hello@switchoffer.app so we can investigate and remove it where required. Do not send the child’s identity documents.
We update this notice when our practices change and show the revised date. We will provide additional notice and obtain consent where required before using information for a materially different purpose.
Business mailing address
Switch Offer
710 Undercliff Ave, Edgewater, NJ 07020, United States