Publication pending: the public domain is a placeholder until purchase and deployment. These are review drafts.

Privacy policy

DRAFT FOR COUNSEL. Developer/operator: Egghead Labs. Contact: support@eggheadlabs.co.za. Effective date and the operator's registered name, registration number and postal address await counsel and director confirmation.

Local study and optional accounts

Your imported papers, memos, notes, photos, answers, links and progress stay on your device for local study. Scanned pages use on-device reading and your check. Manual study works with AI off. Swotty does not distribute your uploads or supply a first-party exam library.

Requesting a sign-in code sends your email to our account service and configured email relay. Account records include your user identifier, sessions, declared birth year, conservative age band, country, available store age range, and timestamped consent version and guardian records. A separate guardian email is used when consent is required. Country is declared, not taken from GPS. The release email relay and its country are pending operator confirmation. We do not request an identity document, address book or full birth date.

Sync, document restore and purchases

With account consent, private sync stores document hashes, types, page counts, chunk positions and geometry, links, attempts, mastery and review cards. The structural snapshot omits raw chunk text and answer text. Free users re-upload source files on a new device. Eligible paid users may back up source document bytes and captured page images in their private cloud store for restore. Such files can contain personal information.

Apple or Google handles payment credentials. We receive purchase product identifiers, verification tokens or signed transactions, entitlement and usage records. An obfuscated account identifier is shared with store billing for purchase integrity. We do not receive your payment-card number.

Optional AI: knowledge only

When you request AI, only the study knowledge needed for that task is sent: question, memo or reference excerpts and, for answer comparison, the submitted answer. Our service keeps your learner identifier for budget, queues, cache and accounting; it is not included as an explicit identifier in the provider payload. We do not send account email, birth year, guardian records or payment credentials to an AI provider. Study text itself can contain personal information: remove unnecessary identifiers before requesting AI; the compare-answer path also scrubs identifiers. Knowledge only does not mean that every uploaded excerpt is anonymous.

The pinned routing policy can use Mistral, Alibaba Model Studio (Qwen/DashScope), OpenAI and DeepSeek, according to task and fallback. Providers process the requested study material and return results; our private queues, cached answers and usage ledger may persist them. This processing is not necessarily ephemeral. Provider contracting entities, processing countries, DPA references, no-training commitments and retention must be confirmed for the enabled release routes before publication. Online material is included only with your opt-in; AI is optional and is not a marking authority.

Signals, logs and infrastructure

Shared document structure uses hashes and offsets, not a distributed copy of source text. Optional structural signals exclude document text, filenames and precise location. Raw signals are linked to the account until folding or purge; only qualifying aggregates are anonymous, with at least 20 contributors. The Settings choice gates writing and sending. Signals default off; minors contribute no S1–S6 corrections and have additional restrictions and production upload is gated on counsel approval and store declarations. There is no third-party analytics SDK or in-app advertising SDK. We do not sell study content or use it for advertising.

The selected hosting plan is Hetzner in Germany (EU). Deployment configuration includes Backblaze B2 EU document backups and Hetzner Object Storage for database backups/WAL and erasure records. Actual deployment, backup locations, access controls and retention are still to be verified. Operational infrastructure may handle IP addresses and request logs. No first-party app crash uploader is implemented; final store-billing SDK traffic and retained diagnostic logs still need validation. Hosting in the EU does not imply that all AI providers process in the EU.

Purposes, retention and your rights

We process optional account and study data to provide authentication, sync, restore, requested AI, purchase verification, security and support. Counsel must confirm lawful bases, cross-border safeguards and local rights, including POPIA, GDPR, UK GDPR and US requirements. Optional signals require a separate choice and release approval.

Ordinary private cloud records have a 90-day inactivity retention window. Eligible paid private state, source files and reusable AI answers remain during paid access and for 90 days after it ends. Optional raw signals have a maximum 90-day window and are deleted after folding. Deletion removes account-owned private data, revokes sessions, cancels queued AI and purges raw signals and account ledger data. Anonymous aggregates already folded may remain, with knowledge re-reviewed if withdrawal drops it below the required contribution count. Minimal erasure/fraud records may remain to prevent deleted data or purchases being restored; their exact fields, lawful basis and period, together with backup expiry and recovery checks, await counsel and operational verification.

In Account, choose Delete account to initiate cloud erasure, or download your account data. You can also request deletion without the app. Local files remain on your device until you remove them. Deletion does not cancel an Apple or Google subscription; cancel separately in the store. Contact support@eggheadlabs.co.za to request access, correction, export, deletion or an objection where local law provides it. We verify account control, not identity documents or passwords. Counsel will settle response periods, complaint authorities and legal retention exceptions.

Younger learners

Swotty markets to learners aged 16 and older. This is a marketing target, not a universal account minimum. No one under 13 may open an account. Learners aged 13 to the local adult age are served under minor rules. Local, offline study is available from age 13 without an account, with nothing sent to our service. Account sync and paid AI below the local consent age require the applicable parent-approved store signal or guardian consent route. Eligibility and consent depend on the selected country; countries without an enabled account route retain offline study. Age is self-declared with store age signals where available, using the conservative age classification.

Security and policy changes

Account access controls and protected transport are designed into the service. Final production encryption, SDK traffic, logging, breach procedure and backup erasure replay must be verified before launch. Material changes will be dated here, with notice and renewed consent where required. These drafts do not certify production security or legal approval.