Privacy Policy

Effective Date: December, 2025
Last Updated: September 26, 2026

Important: Swavan Studio is designed with privacy as a top priority. Your credentials, passwords, and private keys are stored locally using encrypted storage. The App does not send them to Swavan servers. If you explicitly configure an export, sync provider, plugin, or remote connection, the App sends only the data needed for that feature directly to the destination you choose.

1. Introduction

Welcome to Swavan Studio ("we," "our," or "us"). This Privacy Policy explains how we collect, use, store, and protect your information when you use the Swavan Studio desktop or mobile application, command-line tools, and related features (the "App").

Please review this policy before using the App. It describes the App's data practices and the choices available to you. If you do not agree with our policies and practices, please do not use the App.

2. Information We Collect

2.1 Information You Provide Directly

When you use Swavan Studio, you provide the following information:

SSH Connection Details: Server hostnames or IP addresses, port numbers, connection names, and descriptions
SSH Credentials: Usernames, passwords, SSH private keys, and passphrases for encrypted keys
Connection Settings: Custom landing paths, connection preferences, and configuration settings
Vault Password: A master password used to encrypt and protect your stored connections

2.2 Camera and QR Code Scanning

Swavan Studio requests camera access solely for scanning QR codes. The camera is used for:

Peer-to-Peer Device Pairing: Scanning QR codes to establish secure connections between your devices for transferring connection profiles
Connection Sharing: Scanning QR codes shared by other users to quickly import SSH connection configurations

Camera Privacy: No photographs, videos, or images are captured, stored, or transmitted. The camera is activated only when you explicitly initiate a QR code scan and can be revoked at any time through your device settings. Camera data is processed entirely on-device and is never sent to any server.

2.3 Automatically Collected Information

We may automatically collect limited technical information:

Device Information: Device model, operating system version, and app version
Crash Reports: Technical diagnostic information if the app crashes (no personal data included)
Usage Statistics: Anonymous app usage patterns to improve performance (if you opt-in)

2.4 Information We Do NOT Collect

We do NOT collect or track your browsing history
We do NOT capture, store, or transmit photos, videos, or camera images
We do NOT access your contacts or other personal files
We do NOT collect location data
We do NOT use cookies or tracking technologies

3. How We Use Your Information

We use the information collected solely for the following purposes:

Establish SSH Connections: To connect you to your remote servers using the credentials you provide
Store Connection Profiles: To save your connection settings for quick access in the future
Secure Your Data: To encrypt and protect your credentials using your vault password
QR Code Scanning: To scan QR codes for peer device pairing and connection sharing (camera data is processed on-device only)
Improve the App: To fix bugs, improve performance, and add new features
Provide Support: To respond to your support requests and technical issues

4. How We Store and Protect Your Information

4.1 Local Storage Only

Your credentials and connection details are stored locally by default. We do not upload them to Swavan servers. Optional export and sync features may copy encrypted data to a location or storage provider that you explicitly configure.

4.2 Encryption and Security Measures

AES Encryption: All connection data is encrypted using industry-standard AES encryption
Vault Protection: Your vault is locked with a master password that only you know
User-Controlled Transfers: Export and sync features run only when you configure or invoke them; encrypted sync data is sent directly to the storage provider you select

4.3 SSH Security

When establishing SSH connections:

All communications are encrypted using SSH protocol (industry standard)
Private keys never leave your device
Credentials are sent only to destinations you configure, using the selected connection protocol
We support SSH key-based authentication for enhanced security

5. Information Sharing and Disclosure

5.1 We Do NOT Sell Your Data

We do NOT sell, rent, or trade your personal information or credentials. Data is disclosed to a third-party system only when you direct the App to connect, export, sync, or use that system. We do not share data with:

Advertisers or marketing companies
Analytics services (beyond anonymous crash reporting)
Data brokers or aggregators
Social media platforms
Other apps or services

5.2 Legal Requirements

Because Swavan does not receive or control your locally stored credentials, connection details, or data sent directly to providers you configure, we cannot disclose information we do not possess. In the unlikely event we are required by law to provide information, we can only provide information actually available to us.

6. Your Data Rights and Control

6.1 Access Your Data

All your data is accessible within the app. You can view and edit your connection profiles at any time.

6.2 Delete Your Data

You have complete control over your data and can delete it at any time by:

Deleting individual connections within the app
Clearing all app data through the app settings
Uninstalling the app (removes all locally stored data)

7. Data Retention

Your data is retained on your device only as long as:

You keep the app installed on your device
You have not deleted specific connections or cleared app data

When you uninstall Swavan Studio, all locally stored data is permanently deleted from your device.

Data you intentionally exported or synced to storage you control is retained according to that provider's settings and must be deleted through that provider or the corresponding App feature.

8. Children's Privacy

Swavan Studio is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will take steps to delete such information.

9. International Data Transfers

The App does not route connections or synced data through Swavan servers. Your direct connections, exports, and configured sync operations may transfer data to systems in other countries depending on the destinations and providers you choose.

10. Third-Party Services

Swavan Studio may contain links to third-party websites or services (such as documentation or support pages). We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, regulatory, or operational reasons. When we make changes, we will:

Update the "Last Updated" date at the top of this policy
Notify you through the app or via email (if you have provided one)
Provide a prominent notice for significant changes

Your continued use of Swavan Studio after changes are made constitutes your acceptance of the updated Privacy Policy.

12. Acknowledgment and Your Choices

The in-app acknowledgment records that you received and reviewed this Privacy Policy; it is not blanket consent for optional processing where applicable law requires a separate choice. Features such as camera access, exports, remote connections, and third-party sync run only after you invoke or configure them, and operating-system permissions can be withdrawn through device settings.

13. Compliance

This Privacy Policy is designed to comply with:

Apple's App Store Review Guidelines
General Data Protection Regulation (GDPR) - for users in the European Union
California Consumer Privacy Act (CCPA) - for users in California
Other applicable privacy laws and regulations

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Email: [email protected]
App Support: [email protected]
Website: https://studio.swavan.io/

We will respond to your inquiry within 30 days.

15. Additional Rights for EU Users (GDPR)

If you are located in the European Union, you have additional rights under GDPR:

Right to Access: Request a copy of the personal data we hold about you (all data is accessible in the app)
Right to Rectification: Correct any inaccurate personal data
Right to Erasure: Request deletion of your personal data
Right to Restrict Processing: Request limitation on how we process your data
Right to Data Portability: Receive your data in a portable format
Right to Object: Object to certain types of processing
Right to Withdraw Consent: Withdraw consent at any time

16. Additional Rights for California Users (CCPA)

If you are a California resident, you have the right to:

Know what personal information we collect, use, disclose, and sell
Request deletion of your personal information
Opt-out of the sale of personal information (we do NOT sell your information)
Non-discrimination for exercising your CCPA rights