Privacy Statement
The short version. We see your transactions so we can round them up and show you insights. We never see your bank login, we never hold your money or your keys, and we never sell your data. You can ask us to delete your account and data at any time; your bitcoin stays yours.
1. Who is responsible for your data
Sweep IP Pty Ltd (ABN 56 693 758 208), Central Coast, New South Wales, Australia. We are bound by the Australian Privacy Act 1988 and the Australian Privacy Principles.
2. What we collect
- Account details: your name, email address, country, and the device you use.
- Bank transactions: read-only, through the bank-connection provider you authorise — merchant, amount, date and category. We never receive or store your bank username or password.
- Identity verification: your date of birth, address and identity document are collected by our regulated conversion partner, not by Sweep. Sweep receives only the outcome (verified or not).
- Sweep activity: each round-up, buy, send, receive and withdrawal, and the bitcoin amount delivered.
- Wallet information: your wallet's public receiving address. Never your keys or recovery words — those are generated on your phone and never leave it.
- App diagnostics: crash reports and logs you choose to send with a support request.
- Waiting list: name, email, country and phone type, if you sign up on this website.
3. Why we use it
- To work out and deliver your round-ups.
- To show you your spending insights and your own inflation rate.
- To meet legal obligations, including identity verification through our partner.
- To fix problems and keep the service secure.
- To contact you about Sweep. We do not send marketing you haven't asked for.
Your spending data is used for your round-ups and your insights, and for nothing else.
4. Who we share it with
- Our bank-connection provider, to read your transactions with your authorisation.
- Our regulated conversion partner, to verify your identity and convert your round-ups to bitcoin.
- Infrastructure providers that host our systems.
- Authorities, where the law requires.
We do not sell your data, and we do not share it with advertisers. Our partners may change from time to time; the current ones are shown to you in the app. Some of our providers are outside Australia, including in the United States.
5. How long we keep it
Transaction history — your sweeps, buys, sends, receives and withdrawals — is kept for seven years, as Australian law requires for financial records. Your personal information — name, email, bank transaction data — is kept only while you have a Sweep account, and is deleted when you delete your account, except where the law requires us to keep a record. Records of your acceptance of the Conversion Partner's terms are kept for at least five years, as our agreement with the Conversion Partner requires. Leaving Sweep without deleting your account keeps your account so you can come back; it removes your bank connection.
6. How we protect it
Data is encrypted in transit and at rest. Your bank connection is read-only. Your bitcoin can only be moved with your twelve recovery words, which we never have.
7. Your choices and rights
- Access and correction: ask us for a copy of your data, or to fix it.
- Disconnect your bank at any time by leaving Sweep in the app. Your bank connection is removed and your wallet is untouched.
- Delete your account and data: from Settings in the App, or ask us at hello@sweepapp.io. Your bitcoin stays in your wallet, recoverable with your twelve words. Transaction history is kept for seven years as the law requires; your personal information is deleted.
- Complain: contact us first. If you're not satisfied, you can contact the Office of the Australian Information Commissioner (oaic.gov.au).
8. If you are in the United States
Sweep is operated from Australia and currently serves customers in the United States. If you live in the US, the rights in section 7 apply to you, and depending on your state you may have additional rights under laws such as the California Consumer Privacy Act (CCPA/CPRA): to know what personal information we collect and how we use and share it, to request a copy, to request deletion, to correct inaccurate information, and not to be discriminated against for exercising those rights.
We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We do not use or disclose sensitive personal information (such as bank account details or government ID) for anything other than providing the Sweep service, verifying your identity and meeting our legal obligations.
To exercise any of these rights, use Settings in the App or email hello@sweepapp.io. We will confirm your identity before acting on a request, and respond within 45 days. You can have an authorised agent make a request for you; we will ask for proof that you gave them permission.
Your data may be processed in Australia, the United States and other countries where our providers operate. Where that happens we apply the same protections described in this statement.
9. Children
Sweep is not for people under 18, and we do not knowingly collect their data.
10. Changes
If we change this statement in a way that matters, we'll tell you in the app or by email before it takes effect.