Privacy Policy

Last updated: 21 October 2026

1. Who is responsible

Gael Genet, Langgasse 49, 8400 Winterthur, Switzerland, operates SweetFarewell and is responsible for the processing of personal data described here (the “controller”). Email: support@sweetfarewell.com.

This policy explains what data we process, why, who receives it, how long we keep it, and what rights you have. It applies to everyone who uses sweetfarewell.com, and to the contact persons named by our users. It applies together with our Terms of Service.

2. What data we collect

We collect only what the Service needs. Most of it comes from you, some from your contact’s details that you enter, and some from flight data providers.

• Account: name, email address, password (stored hashed by our platform), language, notification settings, date you accepted the Terms. Source: you.
• Farewell: flight number and date, airports, scheduled times, flight status, your message, status flags. Source: you, flight data provider.
• Contact person: name, mobile phone number, optional email address. Source: you.
• Saved library: saved messages and saved contacts for reuse. Source: you.
• Payments: credits bought and used, amounts, invoice references, Stripe customer ID. Card details are handled by Stripe only and never reach us. Source: you, Stripe.
• Delivery records: a copy of the message and contact details at the time of a delivery, the result of the SMS. Source: created by us after a confirmed accident.
• Support: topic, message, email address and any details you send us. Source: you.
• Technical: IP address, device and browser data, error logs, session data. Source: your device, our platform.

Your message is free text, so it may contain sensitive information, for example about health, beliefs or family. We process it only to deliver it, as you instructed.

3. Why we use data and on what legal basis

We use data only for the purposes below. For users in the EU and the EEA, the legal basis follows the GDPR. Swiss law (FADP) asks for lawful, proportionate processing for a stated purpose, which is the same list.

• Create and run your account (account data). Legal basis: contract.
• Check your flight and watch its status (flight number, date, flight status). Legal basis: contract.
• Keep your message and deliver it to your contact if an accident is confirmed (farewell, contact person, delivery records). Legal basis: contract with you; legitimate interest in delivering a message you ordered.
• Take payments and keep credit records (payment data). Legal basis: contract; legal obligation to keep accounting records.
• Answer support requests (support, account). Legal basis: contract; legitimate interest.
• Secure the Service, prevent abuse, fix errors (technical data). Legal basis: legitimate interest.
• Defend or enforce legal claims (any data needed). Legal basis: legitimate interest; legal obligation.
• Special categories that you write in your message. Legal basis: your explicit consent, given when you write and activate the message.

We do not sell data, we do not use it for advertising, and no automated decision is taken about you: a person decides whether an accident is confirmed (Terms, section 6).

4. If you are a contact person

If someone has named you as their contact, we hold your name, your mobile number and, if given, your email address. We did not collect them from you: the user entered them.

We use them only to deliver that user’s message to you if the conditions in section 6 of our Terms are met. Until then, they are stored and not used. We do not contact you for any other purpose, and we do not use your details for marketing.

You can ask us for access to your data, for correction, or for deletion at support@sweetfarewell.com. We will answer within 30 days. If you receive a message from us, the page you open and our email contain a link to this policy.

5. Who receives data

We share data only with providers who help us run the Service, and only what each needs. They act on our instructions, except Stripe, which is also responsible for its own payment processing.

• Bubble: hosting, database and application platform. Data: all data stored in the app.
• Stripe: payment processing and invoices. Data: name, email, payment details, amounts.
• SendGrid (Twilio): sending emails. Data: recipient email, email content, including delivered messages.
• Textbelt: sending SMS to a contact. Data: contact phone number, SMS text with a link.
• AeroDataBox: flight data. Data: flight number and date only.
• Cloudflare: domain name system. Data: technical request data.
• Zoho: support mailbox. Data: emails you send to support@sweetfarewell.com.

We may also disclose data where the law requires it, for example to an authority, or to protect our rights. We do not otherwise disclose data to third parties.

6. Transfers outside Switzerland and the EEA

Several of our providers are based in, or process data in, the United States or other countries that may not offer the same level of data protection as Switzerland or the EEA.

Where that is the case, we rely on a recognised safeguard: an adequacy decision or a certification under the Swiss-US or EU-US Data Privacy Framework, or standard contractual clauses approved for Switzerland and the EU. You can ask us for a copy of the safeguards at support@sweetfarewell.com.

7. How long we keep data

We keep data only as long as needed for its purpose. These periods match section 10 of our Terms.

• Message and contact copy on a flight that landed safely: deleted 30 days after the landing.
• Message and contact copy on other flights, such as a cancelled flight: until you delete the Farewell or your account.
• Saved messages and saved contacts (library): until you delete them or your account.
• Account: until you delete it in Settings.
• Payment records and invoices: ten years, as Swiss accounting law requires.
• Delivery record and delivered copy: as long as needed to document the delivery and to deal with claims.
• Support requests: deleted 30 days after support is closed.

When you delete your account, we delete your account, flights, saved messages and saved contacts. Backups held by our provider are overwritten in the normal course.

8. Your rights

Under the Swiss Federal Act on Data Protection and, where it applies, the GDPR, you have these rights:

• Access to the data we hold about you and a copy of it.
• Correction of data that is wrong or incomplete.
• Deletion of your data. You can delete your account yourself in Settings. We keep what the law requires us to keep, such as payment records.
• Restriction and objection to processing based on our legitimate interests.
• Portability of the data you gave us, in a common format.
• Withdrawal of consent at any time, where processing relies on consent. This does not affect what happened before.

To use a right, write to support@sweetfarewell.com. We may ask you to prove your identity, and we answer within 30 days. A right can be limited where the law allows, for example where deleting data would break a legal duty or the rights of others.

9. Security

We protect data with technical and organisational measures that fit the risk:

• connections to the Service are encrypted (HTTPS);
• each user can see only their own farewells, messages and contacts, and the admin page does not show message texts or a contact’s phone number and email;
• a delivered message is reachable only through a long, unguessable link that is sent to the contact;
• card data stays with Stripe;
• admin access is limited to the operator, and we rely on the security measures of our hosting provider for storage.

No system is completely secure. If a breach is likely to put your rights at risk, we notify the competent authority and the people concerned as the law requires.

10. Cookies and similar technologies

The Service uses only the cookies and browser storage that it needs to work, for example to keep you logged in and to remember your session. We do not use advertising cookies.

You can block cookies in your browser, but you will not be able to log in.

11. Children and minors

The Service has no minimum age. If you are a minor, you may use it only with the consent of your parent or legal guardian, as the Terms state, and your guardian may exercise your rights for you. If we learn that we hold data of a child without the required consent, we delete it.

12. Changes to this policy

We may update this policy, for example when we change a provider or a retention period. The date at the top shows the current version. For a change that matters to you, we tell you by email or in the app before it takes effect.

13. Contact and complaints

For any question about your data, write to Gael Genet, Langgasse 49, 8400 Winterthur, Switzerland, or to support@sweetfarewell.com.

You can also complain to a data protection authority. In Switzerland this is the Federal Data Protection and Information Commissioner (FDPIC). If you live in the EU or the EEA, you can contact the authority of your country.

SweetFarewell