SkillSwap
Campus Service Marketplace
SkillSwap connects university students who need help — tutoring, design, coding, editing and more — with verified fellow students who can deliver it, safely and affordably.
Five service categories built around what students actually need
Top-rated verified providers on campus this week
Register as a Service User for free, or apply as a Service Provider.
Providers submit a skill portfolio and pay a one-time RM10 verification fee.
Compare providers by rating, price and category, then book directly.
Message your provider, get the job done, then rate the experience.
Whether it's tutoring, design or coding — list your services and get discovered by thousands of fellow students. SkillSwap only takes a small cut, so you keep more of what you earn.
Confirms you're a real, skilled student — builds trust with buyers.
e.g. a RM30 poster design earns SkillSwap RM1.50 — you keep the rest.
Every completed booking can be reviewed — top providers get featured.
All listings are from verified student providers.
Check each applicant's IC and selfie photo, then approve or reject.
This page is written for an academic prototype (a UTAR Entrepreneurial Project) and describes how this demo app actually handles data. It has not been reviewed by a lawyer and should not be treated as a production-ready legal document — a real deployment should have this reviewed against Malaysia's Personal Data Protection Act 2010 (PDPA) and other applicable law.
Last updated: August 2026
When you create a SkillSwap account, we collect your full name, university email, gender, phone number, and campus location. To operate the Verified Student Service Provider (VSSP) system, we also collect your IC number and photos of your IC and your face (a selfie), which are used only to confirm you're a real, matchable student. If you list a service, we additionally store the service details, price, category, and any cover photo you upload. As you use the app, we store the bookings you make or receive, messages you send through the in-app chat, and reviews you leave or receive.
We use your IC number, IC photo and selfie solely to verify that you're a genuine student before marking your account "Verified" — this is reviewed manually by our admin team, never shared or sold. Your name, gender, avatar and location are shown to other students so they can decide who to book or message. Phone numbers are stored so providers and customers can coordinate a booking directly, but are not shown publicly on listings. We also use your data to send in-app notifications (new bookings, messages, status changes) and to respond to support requests.
Your IC photo and selfie are stored in a private file location that only you and the SkillSwap admin review team can access — other users never see these. Your public profile (name, avatar, bio, verification badge, rating, location) is visible to anyone browsing the marketplace. Messages you send are only visible to you and the recipient. Booking details are visible to you and the other party in that booking.
SkillSwap is built on Supabase (a hosted Postgres database, file storage and authentication provider). All data is transmitted over HTTPS. Access to the database is restricted with row-level security rules so that, for example, only you can read your own private verification documents, and only an account flagged as admin can review pending applications. As with any hosted service, Supabase acts as our data processor and stores data on its infrastructure.
We keep your account data for as long as your account is active. If you'd like your account and associated data (including IC documents) deleted, contact us using the details below and we'll remove it, except where we're required to keep limited records (e.g. for dispute resolution already in progress).
You can review and update most of your profile details (location, etc.) from your Profile page at any time. You may request a copy of the personal data we hold about you, ask us to correct inaccurate data, or ask us to delete your account entirely. Depending on where you're studying, these rights may also be protected under local data protection law, such as Malaysia's Personal Data Protection Act 2010.
SkillSwap does not use advertising or tracking cookies. Your browser stores a login session token locally so you stay signed in, and a couple of your interface preferences (like whether the support chat is open). We don't run any third-party analytics or ad trackers.
SkillSwap is built for verified university students and is not directed at children. If you believe a minor has created an account, please contact us so we can remove it.
If this policy changes, we'll update the "Last updated" date above. Significant changes will be communicated in-app.
Questions about this policy or your data can be sent to the SkillSwap team via the in-app support chat, or to the project owner's email on file with the university.