Trust is part
of the product.

People bring their work, their routines and their files to Swish. Here is how we protect them, what we promise, and how to reach us when something isn't right.

Our approach

Four principles for every product.

Trust isn't a settings page. It's decided by how a product is designed from the first line of code.

Privacy by design

We collect the least data needed to make a product work, and keep it on your device wherever we can.

Security in depth

Modern, audited cryptography, encrypted transport and storage, and least-privilege access internally.

Transparency

Plain-language policies that say what we do with data, and what we never do.

Your control

Export, delete and walk away whenever you want. No lock-in, no hoops.

Product protections

How each product
keeps you safe.

Each product applies our principles to its own job. Product-specific privacy details are published on each product's website.

Qew

Encrypted agent sessions

Sessions between your devices are end-to-end encrypted, and Qew works without an account. Your code and prompts stay between you and the models you choose, including fully local ones.

Fold

Offline first

No ads and no analytics, only crash reports. Everything is saved on your phone first, and synced data lives on servers we run ourselves, not a third-party cloud.

Requesto

Nothing in the middle

Files go device to device over local Wi‑Fi, or through a relay protected by ChaCha20‑Poly1305 end-to-end encryption. No email or password, and the relay forwards files without storing them.

Data practices

Straight answers.

Do you sell personal data?

No. We don't sell personal data to advertisers, data brokers or anyone else, and we don't build advertising into our products.

Do I need an account to use Swish products?

No. Qew, Fold and Requesto all work from the first open without creating an account. Some optional features, such as sync or premium plans, may need one.

Can Swish read my files or sessions?

Where a product uses end-to-end encryption, such as Requesto transfers and Qew sessions, the keys stay on your devices and we can't read the content.

How do I export or delete my data?

Most data lives on your own devices and is removed when you delete the app. For anything we hold on our side, email hello@swishfoundry.com with the subject "Privacy request" and we'll take care of it.

Where can I read the full policies?

Our privacy policy, terms of use and cookie notice cover this website. Each product's website publishes its own product-specific policy.

Responsible disclosure

Found a vulnerability? Tell us.

We welcome reports from security researchers and treat every one seriously. If you believe you've found a security issue in a Swish product or service, please report it privately.

  1. Step 1

    Report privately

    Email hello@swishfoundry.com with the subject "Security report".

  2. Step 2

    Include details

    The product and version, steps to reproduce, and the impact you observed.

  3. Step 3

    We investigate

    We'll confirm receipt, keep you updated, and work on a fix.

  4. Step 4

    Coordinated release

    Once fixed, we'll agree on disclosure timing and credit you if you'd like.

Please do

  • Give us reasonable time to fix the issue before public disclosure
  • Use test accounts and your own data where possible
  • Stop and tell us if you reach someone else's data

Please don't

  • Access, change or delete other people's data
  • Run denial-of-service or social engineering tests
  • Degrade our services for other users

Policies

The fine print, in plain language.