Trust & Security

1. What does Sway capture?

When you start a session, Sway captures microphone audio from your Mac in real time to generate a live transcript and contextual suggestions. It also captures a screenshot only when you explicitly trigger one (Cmd+E). Sway does not run a meeting bot and does not join your call as a participant.

2. Does raw audio leave my Mac?

No. Raw microphone audio is processed locally on your Mac and is not uploaded to our servers or sent to any third-party AI provider. We do not store audio recordings and do not create voiceprints or other biometric identifiers.

3. Where are transcripts and context stored?

The live transcript and session context are held locally on your device for the duration of a session so Sway can keep track of what was said. They are not uploaded to our servers as a meeting recording. Account and subscription metadata (not call content) is stored in Firebase — see subprocessors below.

4. What is sent to Google Gemini or another AI provider?

Only the transcript or context text you choose to act on is sent to your configured AI provider (such as Google Gemini, or OpenAI if you configure it) to generate a response. You control what is shared. Audio is never transmitted to the provider. The provider's own terms apply to text you send it.

5. Is my data used to train AI models?

We do not use your call content to train our models. If you use a third-party AI provider, that provider's terms govern whether and how submitted text may be used; review their policies and configure enterprise/no-training options where available.

6. How long is data retained?

Session transcripts and context live locally and are not retained on our servers as recordings. Operational usage logs are retained for up to 90 days. Account data is retained until you delete your account. See our Privacy Policy for full detail.

7. How do I delete my data?

You can delete your account and associated data from within the app (Settings → Delete Account), which cancels any active subscription and removes your data from our database. You can also email privacy@ideaboundary.com for any data request.

8. What subprocessors does Sway use?

• Google Firebase — authentication, database, and hosting for account and subscription metadata.
• Google Gemini — default AI provider for generating suggestions from the context text you send.
• OpenAI — optional AI provider, used only if you configure it.
• Stripe — subscription billing and payment processing. We do not store card numbers.
• Sentry — crash and error diagnostics (no call content).
• Google Analytics — aggregate website analytics on swayon.app.

9. What macOS permissions does Sway require?

• Microphone — to capture audio locally for live transcription.
• Screen Recording — to read on-screen context for the Cmd+E screenshot feature.
• Accessibility — for global keyboard shortcuts and the overlay window.

You grant these through macOS System Settings, and you can revoke them at any time.

10. Is the app signed and notarized?

Yes. Sway for macOS is distributed as a Developer ID–signed and Apple-notarized build, so Gatekeeper verifies it on first launch. The current version, file details, and SHA-256 checksum are listed on the Download page so you can verify your copy.

11. Who is the legal entity?

Sway is operated by Idea Boundary Inc., a corporation based in Ontario, Canada. Idea Boundary Inc. is the data controller under GDPR and the organization responsible for personal information under PIPEDA and Quebec Law 25.

12. How do I contact support, security, or privacy?

• Support: support@swayon.app
• Security / responsible disclosure: security@swayon.app
• Privacy / data requests: privacy@ideaboundary.com

13. What responsible-use rules apply?

You are responsible for following your workplace policies, the rules of any platform you use, and applicable consent and recording laws before using Sway in a conversation. Sway is built for responsible, disclosed use.

Do not use Sway for covert surveillance, secret recording, bypassing consent, or any use prohibited by an employer, platform, examination body, or applicable law. See our Terms of Service for the full acceptable-use policy.