Privacy Policy

Last updated: August 19, 2026

1. What we collect

If you join the waitlist on this site before the app launches, we collect your name, phone number, how you heard about Smuggl, and whether you're on iOS or Android, so we can text or WhatsApp you when Smuggl is live in your city. We don't use it for anything else, and it isn't linked to an account until you actually sign up in the app.

When you create an account via Apple, Google, Facebook, or phone number, we collect your name, email (where provided), and phone number. If you sign in with Apple, we're only ever given your name on your very first sign-in — we store it then so it isn't lost on later logins.

If you enable contacts sync or connect Facebook to grow your "crew" (the trust graph used to find Smugglbears), we access your contacts and/or Facebook friends list to find mutual connections already using Smuggl. We do not store your full contacts list or friends list beyond what's needed to compute those matches.

To verify your identity and help keep in-person handoffs safe, we use a third-party identity-verification provider, Veriff. Verifying your identity involves submitting a photo of a government-issued ID and a live selfie/liveness check; Veriff processes this on our behalf and returns the verification result and the identity details extracted from your ID (such as your name, date of birth, ID number, and nationality) to us.

If you become a Smugglbear, we collect your flight/trip details (route, dates, airline) and bag capacity, so shoppers can find you.

During a request, we collect photos you upload as delivery/purchase/customs evidence, chat messages between you and the other party, and your approximate location (used to detect your local currency, applicable customs rules, and to suggest nearby meetup spots).

Payment details (card, bank account) are collected and processed directly by our payment partner, Tazapay — Smuggl does not receive or store your full card or bank account number.

2. Why we collect it

3. Who we share it with

We share data with the service providers that make the app work: Supabase (our database and authentication infrastructure), Tazapay (payment processing and escrow), Veriff (identity verification), and Apple/Google/Facebook (for sign-in, limited to what those providers return to us). We do not sell your personal data to third parties or data brokers.

The other party in a request (your shopper or Smugglbear) can see the information needed to complete that transaction — your first name, photo, city, rating, and the chat/photos exchanged during that request.

4. Data retention

We retain account and transaction data for as long as your account is active and as needed to resolve disputes, meet legal/tax obligations, and maintain a reliable rating history. You can request deletion of your account at any time (Section 6); some transaction records may be retained where required by law (e.g. financial recordkeeping).

5. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. Contact us (Section 7) to exercise any of these rights.

6. Account deletion

You can request account deletion by contacting us at byebye@smuggl.in. We'll delete or anonymize your personal data, except where we're required to retain it (e.g. completed-transaction records for tax/legal purposes) or where it's needed to resolve an open dispute.

7. Contact

Questions about this policy or your data: hello@smuggl.in.

8. Changes to this policy

We may update this policy as the app evolves. Material changes will be notified in-app or by email before they take effect.