Privacy Policy

1. What we collect

• Account info: email address, password (stored hashed by our auth provider), full name, and mobile phone number.
• Consent records: whether you opted in to SMS, and the version of the Terms and Privacy Policy you accepted, with timestamps.
• Your content: voice recordings, transcripts, AI-cleaned notes, and the folders and corrections you create.
• Diagnostic logs: basic crash and request logs needed to operate the service.

2. How we use it

• To provide the core app: transcribe your voice notes, organise them with AI, and let you search them.
• To send you SMS messages only if you have opted in at signup.
• To investigate abuse and keep the service running.

3. Third-party AI services

Data shared with external AI providers

Your voice notes and text jots are processed by third-party AI services to provide Swistly's core features. You are asked to consent to this processing explicitly during signup before any data is shared.

OpenAI (openai.com) — Audio transcription

Audio recordings and/or text are sent to OpenAI's Whisper API for transcription. OpenAI receives the audio content of your voice recordings in order to convert them to text. OpenAI does not use data submitted via the API to train its models by default. See the OpenAI Privacy Policy.

Anthropic (anthropic.com) — Note organisation

Transcribed text is sent to Anthropic's Claude API to clean, summarise, and automatically organise your note into the appropriate folder. Anthropic receives the text content of your jots. Anthropic does not use data submitted via the API to train its models by default. See the Anthropic Privacy Policy.

What is NOT shared with AI providers: Your email address, phone number, full name, account credentials, and payment information are never sent to OpenAI or Anthropic.

Your choice: If you do not wish your voice or text content to be processed by these third-party AI services, please do not use the recording or jot features of Swistly.

4. SMS opt-in data — not shared with third parties

Mobile opt-in data and consent are not shared with third parties or affiliates for marketing purposes. We use your phone number and consent flag solely to deliver the SMS program you opted into. We do not sell, rent, or share that information for marketing.

We do use a downstream SMS provider (an A2P 10DLC carrier aggregator) strictly to transmit messages on our behalf; that provider acts as a processor and is contractually bound to use the data only to deliver the messages.

5. How long we keep it

We keep your account data for as long as your account is active. When you delete your account, we delete your content and consent records within 30 days, except where we are required to retain limited records by law.

6. Your choices

• You can opt out of SMS at any time by replying STOP to any message, or by contacting us.
• You can request deletion of your account and associated data from Settings, or by emailing privacy@swistly.online.
• You can request an export of your data by emailing the same address.

7. Security

We use industry-standard encryption in transit (HTTPS) and encryption at rest for credentials and content. No system is perfect, so please use a strong, unique password.

8. Children

Swistly is not directed to children under 13 and we do not knowingly collect data from them.

9. Changes

If we materially change this Policy, we will require you to re-accept the new version inside the app before continuing to use it.

10. Contact

Privacy questions? Email privacy@swistly.online.