Privacy Policy
Effective November 13, 2026
This policy explains what the Brimswipe app (the "app") collects, why, and the choices you have. Brimswipe is operated by Malloc LLC ("we", "us"). Questions: ceo@malloc.io.
The short version
- You can use the app without signing up. We create an anonymous guest account so your swipes and saves work.
- We use what you swipe and save to show you hats you are more likely to like. We do not sell your data and we do not use advertising trackers.
- When you tap Buy, the store's website opens and the purchase happens there, under that store's privacy policy.
- You can delete your account in the app at any time (Settings, Delete account).
What we collect
- Guest account. A random account ID and a sign in token stored on your device. No name or email is needed.
- Account details, if you create an account. Your email address, password (stored only as a secure hash), and the name, username and photo you choose to add.
- Activity in the app. The hats you swipe right or left on, the hats you save, the interests you pick, when you were last active, and friends you add.
- Buy taps. When you tap Buy we record which listing you tapped and when, so we can match it with commission reports from the stores' affiliate programs.
- Business details, if you add a business. The business name, contact details, logo, and the listings and photos you post. Businesses and their listings are shown publicly in the app.
- Server logs. Like most online services, our server keeps short term technical logs of requests (such as IP address, device and app information, and time). They are used for security and to fix problems, and are deleted after a few days.
- Crash reports. If the app crashes we may receive a technical report (device model, OS version, app version and the error). It is sent to our own error tracking server, not to a third party.
The app does not collect your location, contacts, or payment information. Camera and photo library access is only used when you choose to add a photo, such as a profile picture or a business listing.
How we use it
- To run the app: keep your swipes and saves, show you new drops, and sync your account across sessions.
- To personalize: rank hats by the interests and swipes you have shown, and show what is trending.
- To measure and get paid: count Buy taps and reconcile them with affiliate commission reports.
- To keep the service safe and working: prevent abuse, and find and fix bugs.
Stores and affiliate links
Hats in the app come from online stores (for example melin). Product photos load directly from the store's image servers, which can see your IP address like any website. Some Buy links are affiliate links: if you buy, we may earn a commission, at no extra cost to you. Once the store's website opens, what you do there, including the purchase, is covered by that store's and its affiliate network's privacy policies, not this one.
Sharing
We do not sell or rent your personal information, and we do not share it for advertising. We share data only:
- with the hosting provider that runs our servers, which processes it on our behalf;
- in summary form with stores or affiliate networks to reconcile commissions (for example a count of Buy taps per product), without your name or email;
- if required by law, or to protect the rights and safety of our users and the service.
Storage on your device
To be fast and work offline, the app keeps your saved hats and recently shown images on your device. Deleting the app removes them.
How long we keep it
We keep account and activity data while your account exists. When you delete your account, we delete your account, swipes, saves, interests and businesses. Buy taps are kept for commission records, but are no longer linked to you. Guest accounts that are no longer used may be removed automatically.
Your choices and rights
- Delete your account: in the app, Settings, Delete account. Or email us.
- Access or correct your data: edit your profile in the app, or email us for a copy of your data.
- Depending on where you live (for example the EU, UK or California) you may have additional rights, such as to object to processing. Email us and we will respond within the time the law requires.
Children
Brimswipe is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has given us personal information, email us and we will delete it.
Security
Data is sent over encrypted connections (HTTPS), passwords are stored as secure hashes, and access to our servers is restricted. No service can be perfectly secure, but we work to protect your information.
Changes
If we change this policy we will update the date above, and for significant changes we will let you know in the app.
Contact
Malloc LLC, ceo@malloc.io