Privacy

Swath is made by Atlas Development (“we”, “us”), based in Australia. We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. Questions go to privacy@swath.com.au.

This policy covers the Swath mobile app, our API, and this website.

Account. Your email address. There is no password; we email you a one-time code to sign in. We also record when your account was created and which plan it is on.

Places. For each place you add: the name you give it, its coordinates, the watch radius, which layers you chose, how often to check, and your cloud-cover limit. The places you watch may reveal where you live, work or own land. Treat them accordingly.

Imagery and analysis. The satellite scenes we fetch for your places, the comparisons between them, change summaries, any questions you ask about a scene and the answers, and the alerts we send you.

Device. If you allow notifications, a push token that lets us reach your device. If you allow location, your position is used once to centre the map while you add a place; it is not stored.

Subscriptions. Whether you have an active Plus or Pro subscription and when it renews or expires. Payment is handled by Apple. We never see your card or billing details.

Usage. A ledger of the imagery fetched for your account and what it cost us, used to enforce plan limits. Standard server logs (IP address, request time, app version) kept briefly for security and debugging.

We do not run advertising or third-party analytics SDKs in the app.

• To sign you in and keep your account secure.
• To fetch imagery for your places on the schedule you chose, compare it, and tell you what changed.
• To answer questions you ask about a scene.
• To send alerts you have opted into, and essential account email such as sign-in codes.
• To apply the limits of your plan and keep the service running.
• To respond when you contact support.

We do not sell personal information and we do not use it to build advertising profiles.

We use a small number of providers to run the service. Each receives only what it needs for its job:

• Supabase hosts our database, authentication and image storage.
• Vercel hosts our API and this website, in Sydney.
• Satellite imagery provider. To fetch a scene we send the coordinates and radius of a place, never your identity. Scenes are derived from European Space Agency Copernicus Sentinel data.
• Place lookup. Coordinates are sent to OpenStreetMap-based geocoders (Photon, Nominatim) to name a place and to work out whether it is on the coast.
• AI model provider (OpenAI). Change summaries are generated from scene imagery and statistics. When you ask a question about a place, we send your question, the place's name, locality and approximate coordinates, and a summary of its satellite record; the model may run web searches to answer. We do not send your email address or account details.
• Apple and RevenueCat process subscriptions. RevenueCat links your purchase to an anonymous identifier for your account and tells us your plan status.
• Expo delivers push notifications to your device.
• Resend sends sign-in codes and account email.

Some of these providers store data outside Australia, including in the United States. We will also disclose information if the law requires it, or to protect the rights and safety of our users.

Your account, places, imagery and alerts are kept for as long as you have an account. When you delete your account, your email, places, saved imagery, comparisons, questions and alerts are permanently removed straight away. Anonymised usage records and short-lived server logs may be kept for accounting and security.

Removing a single place deletes its imagery and history. Deleting your account does not cancel an App Store subscription; cancel that in Settings → Apple ID → Subscriptions.

• Delete your account any time from Account → Delete account in the app, or email us. See Support.
• Notifications and location can be turned off in your device settings. The app works without either.
• Access or correct your information by emailing privacy@swath.com.au. We will respond within 30 days.

If you have a complaint about how we have handled your information, contact us first. If you are not satisfied with our response you can complain to the Office of the Australian Information Commissioner.

Data is encrypted in transit and at rest. Access to your places and imagery is restricted to your account by row-level security in our database. Sign-in codes expire quickly and can be used once. No system is perfectly secure; if we learn of a breach that is likely to cause you serious harm we will tell you and the regulator as the law requires.

Swath is not directed at children under 13 and we do not knowingly collect information from them. If you believe a child has created an account, email us and we will remove it.

We will update this page when the policy changes and show the date at the top. For material changes we will tell you in the app or by email before they take effect.