The short version: Swishterm collects nothing. Your keys stay on your device, your sessions go straight to your servers, and Swishcore runs no server that sees your data.
In this policy, "Swishcore", "we" and "us" mean Swishcore Inc., a New York corporation at 4225 203rd St, Bayside, NY 11361, United States.
What stays on your device
Swishterm keeps your settings, host list and keys on your device. Private keys live in the platform's secure storage: the Secure Enclave or Keychain on Apple devices, Android Keystore, TPM or DPAPI on Windows, and the system keyring on Linux. You can add a biometric lock to the app.
Your terminal sessions go straight from your device to the servers you choose. They never pass through us. We do not see what you type or what your servers send back.
Your hosts folder
Swishterm stores your hosts as plain files in a folder you pick. If you sync that folder with a service such as Syncthing, Nextcloud, iCloud Drive, Dropbox, Google Drive, OneDrive or a git repository, the files go straight to that service. Its own privacy policy covers them.
Private keys never go in the folder. Only public keys sync. You can lock the folder with a passphrase, using Argon2id and AES-256-GCM, so the sync service cannot read it.
Agent alerts and push notices
Pro can alert you when a coding agent on your server asks for permission. Swishterm sends these notices through ntfy.sh or a push server you run. Swishcore runs no server for them and never receives them. Each notice is signed with HMAC-SHA256 and expires after 15 minutes. If you use ntfy.sh, its own privacy policy covers delivery.
Files and images
When you paste an image or transfer a file, Swishterm sends it over SFTP to the server you are connected to. Nothing goes to us.
What we collect
Swishterm collects no data. It has no account, analytics, crash reports, ads or third-party code that reports back to anyone. We only receive what you choose to send us:
- Support messages. If you email us, we keep your address and message so we can reply.
- App store purchases. Google Play handles payment for the Android app, and the App Store handles payment for the iPhone and iPad app. They give us limited details, such as the product and date, but never your card details.
- Website purchases. If you buy a Windows or macOS license on swishcore.com, we keep your email address and order details so we can deliver and recover your key. Our payment processor handles your card, and we never see the full card number.
We never sell your data.
This website
This website uses no cookies, analytics or tracking scripts, and loads nothing from other companies. Our web server keeps standard access logs (IP address, time and page) for security, and deletes them within 30 days.
How we use your data
We use the data above only to answer support requests, deliver what you bought, and meet legal duties. We do not share it with anyone else unless the law requires it.
How long we keep it
We keep support emails for up to two years after your last message, then delete them. We keep purchase records as long as tax law requires.
Your rights
You can ask us to show you, correct or delete any personal data we hold about you. Email support@swishcore.com and we will respond within 30 days.
Children
Our products are not meant for children under 13, and we do not knowingly collect their data.
Changes
If we change this policy, we will post the new version here and update the date at the top.
Contact
Swishcore Inc.
4225 203rd St, Bayside, NY 11361, United States
support@swishcore.com