Privacy Policy
Swoon is an app for Android and iPhone that suggests replies for your conversations. It is made by Vishnu V ("we", "us"), who is responsible for your data. Questions or requests: emailvishnuv@gmail.com.
In short
- Swoon reads a conversation only when you tap Suggest Reply (or paste one, or pick a screenshot).
- Replies are written by Google Gemini, Google's AI service. Swoon asks your permission in the app before sending anything to it, and you can withdraw it at any time.
- That conversation is used to write your reply and isn't stored by Swoon.
- What Swoon remembers about the people you talk to is kept on your phone and backed up to Swoon's server, where it is used for your own replies and never shown to anyone else.
- Swoon never sees your passwords for the websites you open in it and never sends messages for you.
- We don't sell your data, show ads or use your memories to train AI models.
- You can export or delete everything from inside the app.
What Swoon collects and why
Conversations you ask about
When you tap Suggest Reply on a chat website, Swoon reads the latest messages shown on screen, the other person's display name and the website's name. If you paste a conversation or pick a screenshot, Swoon uses that instead (or a photo you take of a chat). Swoon sends this, together with your reply style and what it remembers about that person, to Swoon's server once, to write suggestions. The server passes it to Google's Gemini model and returns the suggestions. Neither the server nor Swoon keeps the conversation, the screenshot or the suggestions afterwards.
Sharing with a third-party AI service (Google Gemini)
Swoon uses Google Gemini, an AI service provided by Google LLC on Google Cloud Vertex AI, to write reply suggestions and to read screenshots. Before Swoon sends anything to Gemini for the first time, the app shows what is sent, who receives it and why, and asks for your permission. If you don't allow it, nothing is sent and Swoon can't suggest replies. You can withdraw permission at any time in Settings › AI Data Sharing.
- What is sent: the conversation you choose (its messages, and the names and times shown in it) or the screenshot you pick; your reply preferences and any instruction you type; and what Swoon remembers about that person.
- How it is collected: from the chat on screen when you tap Suggest Reply, from text you paste, or from an image you pick or take. Never in the background.
- How it is used: only to read that conversation and write suggestions for that request.
- Protection: requests go over HTTPS to Swoon's server, which passes them to Gemini. Google processes this data as our service provider under the Google Cloud data processing terms, which give it the same or equal protection as this policy. Google doesn't use it to train its models, and may hold it briefly for caching and abuse prevention. Swoon's server doesn't store it.
Memory about the people you talk to
Swoon can remember things about a person, such as their name, how you know each other and facts from past conversations, so later replies fit. You can see, edit and delete these in the app. Memory is stored on your phone and, by default, backed up to Swoon's server so it survives a new phone or reinstall (Settings › Backup & Sync). The backup is encrypted at rest with a key that Swoon's server holds, so the server can read it. It uses your backup to write your own replies. We may also learn general patterns from backups, such as which kinds of replies tend to work. Those patterns never include names, messages or facts about a specific person. Your backup is never shown to other users, never used in anyone else's replies and never used to train AI models.
Your reply style, activity and settings
What Swoon learns about how you like to write, your recent activity and your settings stay on your phone. Your reply style is sent along with each reply request and isn't stored on the server.
Account identifiers
Swoon creates an anonymous account for you automatically (Firebase Authentication). It is a random id with no name or email, used to secure requests, limit abuse and own your memory backup. If you choose to sign in with Google to use your backup on several phones, we also receive your Google account's email address, name and profile picture link.
Subscriptions
Swoon Pro and Max are sold through the App Store or Google Play, which handle the payment. Swoon never sees your card or payment details. RevenueCat, our subscription provider, receives the store's purchase receipts together with your anonymous account id, and tells Swoon's server which plan you are on. The server stores that plan with a count of the replies you generated today and this week, to apply your plan's limits. It doesn't store anything about the conversations.
App integrity
Firebase App Check, with Google Play Integrity on Android and Apple App Attest on iPhone, confirms that requests come from a genuine copy of Swoon on a real device. This shares device and app integrity signals with Google. It doesn't give us your device's contents.
"Help Improve Swoon" (off unless you turn it on)
If you turn this on, Swoon shares how suggestions are used, never what they say. That covers the kind of conversation, the kind of reply you picked, its rough length and emoji count, whether it asks a question, and whether you used, edited or sent it. It never includes names, messages, replies or memory. These events carry a pseudonymous id that can't be traced back to you without a secret key that only the server holds. We use them in aggregate to rank suggestion styles better for everyone. Turning the setting off deletes what you shared.
Reports of AI replies
Every suggestion has a report button. If you report one, Swoon sends that suggestion's text, the reason you picked and random ids for that generation. It never sends the conversation or your memory. Reports carry a salted hash of your account id, not the id itself. We read them to find and fix harmful or wrong replies.
Server logs
Like any web service, Swoon's server logs requests: time, route, status and timing, plus your IP address and device type from the network layer. Swoon's own logs use a salted hash of your account id and never include conversation or memory content.
Websites you open in Swoon
You sign in to chat websites directly, inside Swoon's built-in browser. Those websites set their own cookies on your phone, which keep you signed in. Swoon never reads your passwords, one-time codes or session cookies, and never sends a message for you. Swoon places a suggestion in the message box and you decide whether to send it. The websites' own privacy policies apply to what you do on them.
What we don't do
- No advertising, ad tracking or selling of personal data.
- No access to your contacts, SMS, call logs, location or microphone. Swoon sees only the images you choose: a screenshot from your gallery, or a photo you take with your phone's camera app for Swoon to read.
- No training of AI models on your conversations or memory.
- No sharing of your memory with other users.
Who processes your data
We use these service providers, under contracts that limit them to providing their service to us:
| Provider | What for | Where |
|---|---|---|
| Google Cloud and Firebase | Server (Cloud Run), anonymous and Google sign-in, App Check, request logs, encryption keys, "Help Improve Swoon" events (BigQuery) | India (Mumbai) mainly |
| Google Gemini on Vertex AI | Writing reply suggestions and reading screenshots. Google doesn't use this data to train its models and may hold it briefly for caching and abuse prevention. | Google's global infrastructure, which may be outside India |
| Supabase (hosted on Amazon Web Services) | Database for the encrypted memory backup, your plan and reply counts | India (Mumbai) |
| RevenueCat | Subscription purchases and status: store receipts, your anonymous account id, purchase history | United States |
We'll disclose data if the law requires it, and only as much as it requires.
How long we keep it
| Data | Kept |
|---|---|
| Conversations, screenshots, suggestions | Not stored by Swoon. Held only while your reply is being written. A suggestion you report is kept as described below. |
| Reports of AI replies | Up to 1 year |
| Memory backup | Until you delete that memory, turn off backup or delete your account. Deleting removes the content immediately. |
| "Help Improve Swoon" events | Up to 400 days. Turning the setting off or deleting your account hides them at once and erases them within about a day. |
| Server request logs | About 30 days |
| Anonymous account id | Until you delete your account |
| Plan and reply counts | Until you delete your account |
| Purchase history (RevenueCat) | As long as needed to run your subscription and for the tax and accounting records the law requires |
| Google sign-in details | Until you ask us to delete them (see below) |
| Data on your phone | Until you delete it in the app or uninstall Swoon |
Security
All traffic uses HTTPS. Every request must carry a valid account token and App Check token. The memory backup is encrypted at rest, its key is kept in Google Secret Manager, and only Swoon's server can use it. No system is perfectly secure, but we limit who and what can reach your data.
Your choices and rights
- See and export: Settings › Data Controls › Export my data.
- Correct: edit any remembered person or fact in the app.
- Delete: delete single memories, all memory, or your whole account in Settings › Data Controls. See Delete your account, which also covers requests without the app.
- Withdraw consent: turn off AI Data Sharing, backup or "Help Improve Swoon" at any time.
- Complain: email us first, and we'll reply within 30 days. You can also contact your data protection authority. In India, that is the Data Protection Board of India.
Children
Swoon is meant for adults aged 18 and over and isn't directed to children. If you think a child has used Swoon, email us and we'll delete their data.
Changes
If we change this policy, we'll update the date above. For important changes we'll also tell you in the app before they take effect.