Privacy policy
Effective 22 October 2026 · terms · privacy · refunds
We read nothing until you tap. The text you choose is processed to give you the result and is not stored. Ads never see your text.
1. The short version
- Swish reads nothing until you press your shortcut. It never reads password fields and never records keystrokes.
- The text you choose to fix or rewrite is sent securely to our AI service to produce the result. We do not store it and do not use it to train models.
- Sponsored lines never receive your text. They get only a placement, your language and a coarse app category.
- Payments are handled by Dodo Payments; we never see your card number.
- You can turn off AI fixing (Smart grammar), disconnect permissions at any time, and ask us to delete your account.
2. What we collect
The table below lists everything we hold, why, and for how long.
| Data | Why | Kept |
|---|---|---|
| The text you choose to fix or rewrite, and the style or instruction you pick | To produce the result you asked for | Not stored by us after the answer. Our AI providers process it transiently under instructions not to retain it |
| A random device identifier (a hash), app version and macOS major version | To apply your free allowance and credits, prevent abuse, and show you the right plan | While the device is active, then deleted or anonymised |
| Usage counts per day (number of fixes and rewrites, characters, credits used, limits reached) | To run billing, protect the service and understand how it is used. No text is included | Up to 24 months, in aggregate |
| Network address (hashed) at request time | Abuse prevention (a per-network daily cap) | Short-lived counters only |
| Account email, plan, credits, linked Macs | To sign you in, link your Macs and apply what you bought | Until you delete your account |
| Payment records (amount, plan, provider reference, date) | Accounting, refunds, tax and fraud checks. Card details stay with Dodo Payments | As the law requires (typically 7 to 10 years) |
| Advertiser details, campaigns, wallet transactions | To run the marketplace, bill and audit it | As the law requires |
| Ad events (which line was shown and whether it was clicked) tied to your random device identifier | To bill advertisers once and cap how often you see the same brand | Up to 90 days |
We do not collect your name for the free tier, your contacts, your files, your screen contents, or what you type outside the moment you ask Swish to act.
3. Permissions on your Mac
Accessibility lets Swish read the text you chose and put the improved version back. It is used only when you press your shortcut. Screen Recording is optional and is used only on your Mac, for a moment, to find where your words are so the glow lines up. Images are analysed in memory and discarded; they are never stored or sent anywhere. You can switch either permission off in System Settings, Privacy and Security, whenever you like.
4. How AI processing works
When you tap, Swish sends the chosen text (in pieces of about 1,200 characters) and your chosen style over an encrypted connection to our service, which forwards it to a large language model provider to produce the result. We currently use models from Google (Gemini) and OpenAI, through the routing service OpenRouter. We instruct providers not to retain or train on this text. The result is returned to your Mac and the request is finished: we do not keep the text or the answer. If you switch off Smart grammar, Fix runs entirely on your Mac.
5. Sponsored lines
Advertising is built so that it does not need to know you. When a sponsored line is requested, the request contains only the placement, your interface language and a coarse app category (chat, mail, docs, code, other), plus your random device identifier so the same brand is not shown to you too often and each view is billed once. We do not sell personal data, we do not build advertising profiles, and advertisers never receive your text, identity or device identifier. Paid plans see no sponsored lines.
6. Who else handles data (our service providers)
- Supabase: database, accounts and server functions (hosting).
- OpenRouter, Google and OpenAI: AI processing of the text you choose, as described above.
- Dodo Payments: payments and tax as merchant of record.
- Vercel: hosting of this website.
- Apple: distribution and notarisation of the Mac app.
They process data only to provide their service to us and under contracts that require appropriate protection. Some are located outside your country; where required we rely on recognised transfer mechanisms such as standard contractual clauses.
7. Cookies and similar technologies
The website uses your browser's local storage only to keep you signed in to your account and admin or sponsor pages. We do not use advertising or analytics cookies on this site. The Mac app stores its settings and a random device identifier on your Mac.
8. Security
Connections are encrypted. Access to the database is restricted by row-level security and server-side functions; payment webhooks are signature-checked; administrator access requires a confirmed account on an allow list and every change is logged. No system is perfectly secure; tell us at [support email] if you find a problem.
9. Your rights and choices
Depending on where you live (for example under the GDPR, UK GDPR, CCPA/CPRA or India's DPDP Act), you may have the right to access, correct, delete or export your personal data, to object to or restrict some processing, and to withdraw consent. To use these rights, write to [support email] from your account email; we reply within 30 days. You may also complain to your data protection authority. In the app you can disconnect permissions, turn off Smart grammar, sound and animation, and remove the app at any time.
10. Children
Swish is not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has given us data, write to us and we will delete it.
11. Changes and contact
If we change this policy in a way that matters, we will update the date above and tell you in the app or by email. Controller: [Company legal name], [registered address]. Contact: [support email].
Questions about this page? Write to [support email]. Swish is operated by [Company legal name], [registered address].