Privacy & security
What we store, what we don't
Swiftin is built privacy-first. Most data-collection features are off by default and require an explicit opt-in.
History off by default
Translation history is disabled out of the box, for everyone. Local history is available on every plan (off by default). Sending history to our servers is Team-only (team-owner opt-in).
Cloud sync is independent
Saving history locally is one toggle; sending it to our servers is a separate toggle. Both default to off. Cloud history (Team only) is deleted automatically after 90 days.
Sensitive sites skipped
On banking, password managers, and other sensitive hosts, input translation is disabled by default, we don't want to risk intercepting credentials. You can override per-site.
Transit & storage
All translation requests use TLS. Stored history (when enabled) is encrypted at rest in our database. Account credentials use Supabase Auth with bcrypt-hashed passwords + JWT sessions.