Privacy Policy

Swindon Together is a community platform for people in Swindon, United Kingdom. It provides local information, community discussions, events, support resources, local issue reporting, maps and AI-assisted information.

This Privacy Policy explains how Swindon Together collects, uses, stores and shares personal information when you use our website or Android application.

• Service: Swindon Together
• Website: https://swindon-together.co.uk
• Operator: Swindon Together is an independent community initiative operated by an individual. It is not operated by Swindon Borough Council or any other public body.
• Privacy and account-deletion contact: johnathanleech@swindon-together.co.uk

Depending on the features you use, the information processed may include:

• Account information: name, email address, display name and authentication information when you register or sign in.
• Community content: posts, comments, questions, suggestions, feedback and other information you choose to submit.
• Local issue reports: report titles, descriptions, categories, status, supporting information, images and information about the affected location.
• Location information: approximate location, an address or map pin you select, and precise device location if you grant permission and use a feature that requests it.
• Images and attachments: photographs or other files you choose to upload.
• Device and technical information: IP address, browser or device details, session information, security logs and diagnostic information processed by the platform or its providers.
• Usage and preference information: page interactions, analytics information, cookies, saved preferences and similar technical data.
• AI interactions: questions or prompts you submit to the AI assistant and relevant information used to generate a response.

You do not need to provide precise location information unless you choose to use a feature that requires it. You should avoid including unnecessary personal or confidential information in public posts or reports.

We use information, where necessary, to:

• Operate and maintain the Swindon Together website and app.
• Provide accounts, community features and user-submitted content.
• Display local information, events, services and community resources.
• Receive, review, manage and display local issue reports.
• Place reports on a map and help users understand local issues.
• Respond to enquiries, feedback, support requests and reports of inappropriate content.
• Generate AI-assisted responses to questions.
• Maintain security, detect misuse, prevent spam and investigate technical problems.
• Understand how the service is used and improve accessibility, reliability and performance.
• Meet applicable legal obligations and protect the rights and safety of users.

Some content submitted to Swindon Together, including community posts and local issue reports, is visible to other users or the public.

Published content may include your display name, report description, images, category and the location you set. Do not assume that a submitted report, its evidence, photographs, location information or any personal information it contains is private, confidential or access-protected unless a specific feature clearly tells you so.

Do not include your home address, contact details, information about children, medical information or other sensitive personal details in content intended for public display.

Public content may be copied, shared or indexed by other services. We do not currently apply field-level access controls that hide individual fields within a public report.

If you upload a photograph or file, it may be stored and processed to provide the relevant feature. Images attached to public reports may be publicly accessible via their stored URL and may be displayed to other users.

Please check images before uploading them. They may contain identifiable people, vehicle registration plates, private documents or other personal information.

The service strips embedded image metadata (including GPS coordinates) from photographs uploaded through the Snap & Map feature, by re-encoding the image. This metadata stripping is not applied to all upload features. Do not rely on metadata removal as a substitute for checking an image before uploading it.

When you use the Swindon Together AI assistant, the text of your question may be sent to an external AI service provider to generate a response. Relevant platform information may also be provided as context.

Depending on the question, external search or information services may be used to retrieve information.

The AI provider processes information under its applicable terms and privacy practices. We do not promise that AI prompts are never retained by a provider.

Do not submit passwords, financial details, confidential documents or unnecessary sensitive personal information to the AI assistant.

AI-generated information may be incomplete or inaccurate and should not be treated as professional advice or emergency assistance.

Swindon Together may use service providers to host and operate the platform, authenticate users, process data, provide AI functionality, measure usage, display maps or translate content.

Depending on the features enabled, these may include:

• Base44: application hosting and platform services.
• Google Analytics: website usage measurement, where enabled.
• Google Translate: translation functionality, where enabled.
• External AI providers: processing AI questions and generating responses.
• OpenStreetMap-related services or other mapping/geocoding providers: helping locate places or display maps.
• External information sources: obtaining public information used for local updates and community features.

Information may be processed by these providers to deliver their services. Their processing may be subject to their own terms and privacy policies.

We do not sell personal information to advertisers. We may disclose information where necessary to provide the service, protect users, comply with the law or respond to lawful requests.

The website or app may use cookies, local storage or similar technologies to support authentication, remember preferences, maintain functionality, improve accessibility, measure usage or protect the service.

Some technologies may be provided by third parties. Where consent is required, the relevant technologies should not be activated before valid consent is obtained.

You can manage available browser or device settings, although disabling some technologies may affect functionality.

Where UK data protection law applies, the appropriate legal basis depends on the purpose and circumstances of the processing. This may include:

• Performing a contract or providing a service you request.
• Our legitimate interests in operating, securing and improving the platform, where those interests do not override your rights.
• Your consent, where required.
• Compliance with legal obligations.

Where we rely on consent, you may withdraw it where applicable. Withdrawal does not make earlier lawful processing unlawful.

We use appropriate technical and organisational measures intended to protect information, including encrypted connections where supported, access controls and platform security measures.

No internet service can guarantee absolute security. Access to personal information should be limited to people and systems that need it for legitimate purposes.

We continually review the platform's security and privacy practices.

We retain information for as long as reasonably necessary for the purposes described in this policy, taking account of the type of information, the feature involved, security requirements and applicable legal obligations.

Retention periods may differ between account information, community content, reports, technical logs, backups and information held by service providers.

Depending on the circumstances and applicable law, you may have the right to:

• Request access to your personal information.
• Request correction of inaccurate information.
• Request deletion of information.
• Object to certain processing or request that it be restricted.
• Request a portable copy of certain information.
• Withdraw consent where processing relies on consent.
• Complain to the UK Information Commissioner's Office (ICO).

To raise a privacy request, use the Contact Us facility on our website. We may need to verify your identity before responding.

You can find information about your rights and how to complain at https://ico.org.uk/.

If you have an account, you can request deletion of your account using the in-app Delete Account option where available, or by emailing the privacy contact at johnathanleech@swindon-together.co.uk.

Some information may need to be retained where required by law or for legitimate security purposes. Where information must be retained, it should be restricted to the necessary purpose and duration.

Swindon Together is a community platform and is not intended to encourage children to disclose unnecessary personal information publicly.

Users should not post personal details, private photographs or sensitive information about children. Parents and guardians should help children understand the risks of sharing personal information online.

The service's intended age group and any additional protections for children should be reflected accurately in its app store declarations and actual operation.

Some service providers may process information outside the United Kingdom. Where this occurs, appropriate safeguards must be used where required by applicable data protection law.

Further information about relevant providers, locations and safeguards can be requested through our website's Contact Us facility.

We may update this policy when the service, its features, its providers or applicable legal requirements change.

The latest version will be published on our website with the date of the most recent update.

For privacy questions, requests to exercise your rights, or account-deletion requests, please email:

johnathanleech@swindon-together.co.uk

You can also use the Contact Us facility at https://swindon-together.co.uk/.

Please identify your request as a privacy matter. Do not include passwords or unnecessary sensitive information in your message.