Our approach
GabbyAI is operated by Swish World Group Inc. We aim to collect only the information needed to operate, secure and provide the service, and to limit access to personal information wherever reasonably possible.
1. Our privacy principles
Privacy is part of how GabbyAI is designed and operated. Our approach is based on the following principles.
Data minimisation
We aim to collect and retain only the personal information reasonably required to operate, secure and support GabbyAI.
Private conversations
Private conversation content is not sold and is not made available to advertisers.
Limited access
Access to personal information is restricted to authorised personnel and systems where access is reasonably necessary.
Clear purpose
We process personal information for defined operational, security, contractual and legal purposes.
Security by design
Authentication, access controls, encryption in transit, logging and infrastructure security are built into the GabbyAI platform.
User control
We provide account and conversation controls and support applicable privacy rights.
2. Overview
GabbyAI is an artificial intelligence service that allows users to ask questions, explore ideas, generate and improve written content, discuss code, plan tasks and interact with AI-generated responses.
This Privacy Policy explains how personal information is handled when you create an account, use GabbyAI, communicate with us or otherwise interact with the service.
Nothing in this policy limits any privacy or data-protection rights that apply to you under applicable law.
3. Who we are
GabbyAI is operated by:
Swish World Group Inc. is responsible for the processing described in this policy unless another notice expressly states otherwise.
4. Information we collect
4.1 Account information
When you create or manage a GabbyAI account, we process information needed to operate that account, including:
- Your email address.
- Your display name.
- Your securely hashed password.
- Your email verification status.
- Your account status.
- Your account creation and update dates.
- Authentication and session records.
4.2 Conversations and submitted content
We process the prompts, messages, instructions and other content you submit to GabbyAI so that the service can generate and return responses.
Where conversation history is enabled, conversation content and generated responses may be stored so that you can return to previous conversations.
You should not submit information that you do not have the right to disclose. You should also avoid including highly sensitive personal information unless it is genuinely necessary for your use of the service.
4.3 Technical and security information
Our systems process technical information needed to operate and protect GabbyAI. This can include:
- Your Internet Protocol address.
- Your browser type and version.
- Your device and operating system.
- Request dates and times.
- Pages and API endpoints accessed.
- Authentication attempts.
- Session activity.
- Error and diagnostic information.
- Security events.
- Suspected misuse or abuse.
- Service-performance information.
- Approximate geographic information derived from your IP address.
4.4 Communications
If you contact us, we process the information you provide so that we can respond, investigate the matter and maintain an appropriate record of the communication.
5. How we use information
Personal information is used only where reasonably necessary for defined purposes, including to:
- Create and manage your account.
- Authenticate you.
- Maintain secure signed-in sessions.
- Process prompts and generate responses.
- Store and display conversation history.
- Remember account settings and preferences.
- Verify email addresses.
- Support password and account recovery.
- Provide customer and privacy support.
- Maintain and operate the service.
- Diagnose technical problems.
- Monitor performance and availability.
- Prevent fraud, abuse, misuse and security incidents.
- Enforce our Terms of Use.
- Comply with legal and regulatory obligations.
- Establish, exercise or defend legal claims.
6. Legal bases for processing
Where applicable law requires a legal basis for processing, we rely on one or more of the following.
Contract
Processing necessary to create your account and provide the GabbyAI services you request.
Legitimate interests
Processing necessary to operate, secure, maintain and improve GabbyAI where those interests are not overridden by your rights.
Legal obligations
Processing required to comply with applicable laws, court orders and lawful regulatory requirements.
Consent
Processing based on your permission where consent is required by law.
Legal claims and safety
Processing necessary to establish, exercise or defend legal claims or protect the rights and safety of users, staff or others.
7. AI conversations and model processing
When you send a message to GabbyAI, the content is transmitted to the AI systems required to generate a response.
Conversation content may exist temporarily in system memory during processing and may also be stored as part of your conversation history where that feature is enabled.
GabbyAI uses AI infrastructure operated by or on behalf of Swish World Group Inc., including the SwishAI platform.
We do not sell private conversation content, provide private conversations to advertisers or use private conversations to build advertising profiles.
If our approach to model training materially changes in the future, we will update this policy before that change takes effect and establish any legal basis or user controls required by law.
Limited human access
We do not routinely read private conversations.
Authorised personnel may access limited conversation content only where reasonably necessary for a specific purpose, such as:
- Investigating suspected abuse, misuse or a security incident.
- Diagnosing a technical fault that cannot reasonably be resolved without access.
- Responding to a support request where you ask us to investigate a conversation-related problem.
- Complying with a binding legal requirement.
- Protecting the security and integrity of GabbyAI.
Administrative access is restricted to authorised personnel and should be limited to the information necessary for the relevant purpose.
AI responses can be wrong
GabbyAI is not an emergency service and generated responses can be inaccurate, incomplete or inappropriate for a particular situation. Important information should be independently verified where necessary.
8. When we share information
We do not sell personal information.
Personal information is shared only where reasonably necessary for the purposes described below.
8.1 Service providers
We use selected service providers for functions such as hosting, databases, infrastructure, cybersecurity, email delivery, monitoring and payment processing.
Providers are given access only to the information reasonably necessary to perform their function and are subject to applicable contractual, confidentiality and security requirements.
8.2 Swish organisations
Information may be shared within Swish World Group where reasonably necessary to operate, secure, support or administer GabbyAI.
8.3 Legal and safety requirements
We may disclose information where required by law or where we reasonably believe disclosure is necessary to:
- Comply with a binding legal obligation.
- Respond to a valid court order or lawful regulatory request.
- Investigate fraud, abuse or a security threat.
- Enforce our agreements.
- Protect the rights or safety of users, staff or others.
- Establish, exercise or defend legal claims.
8.4 Corporate transactions
Information may be transferred as part of a merger, acquisition, restructuring, financing, sale of assets or similar corporate transaction.
8.5 With your instruction
We may disclose information where you instruct us to do so or otherwise provide valid permission.
9. International data transfers
GabbyAI uses infrastructure in more than one country. Personal information may therefore be processed outside the country in which you live.
Where applicable law requires safeguards for an international transfer, we use an appropriate lawful transfer mechanism, such as an adequacy decision, contractual safeguards or another permitted mechanism.
10. Retention
We do not intend to retain personal information indefinitely.
Information is retained only for as long as reasonably necessary for the purpose for which it was collected, subject to security, legal, contractual and operational requirements.
| Information | Retention approach |
|---|---|
| Account information | Retained while the account is active and for a limited period after closure where needed for security, fraud prevention, legal compliance or dispute resolution. |
| Conversation history | Retained while available in your account or until deleted or otherwise no longer required, subject to backup rotation and legal requirements. |
| Authentication sessions | Retained until expiry, logout or revocation. Limited security records may be retained for longer where necessary. |
| Access and security logs | Retained for a limited period based on cybersecurity, fraud-prevention and operational requirements. |
| Support communications | Retained for as long as necessary to resolve the request and maintain an appropriate business record. |
| Backups | Removed through scheduled backup rotation. Backups are intended for recovery, continuity and security purposes. |
Information may be retained for longer where required for legal claims, investigations, regulatory requirements, fraud prevention or compliance with law.
11. Information security
We use technical, organisational and administrative safeguards designed to protect personal information against unauthorised access, loss, misuse, alteration, disclosure or destruction.
Measures may include:
- Access controls.
- Authentication and session controls.
- Encryption in transit.
- Restricted administrative access.
- Network security controls.
- Security logging and monitoring.
- Backup and recovery procedures.
- Patch and vulnerability management.
No online system can be guaranteed to be completely secure. You are responsible for protecting your password and devices and should notify us if you believe your account has been accessed without permission.
12. Your privacy rights
Depending on where you live and the law that applies, you may have rights including the right to:
- Request access to your personal information.
- Request correction of inaccurate information.
- Request deletion of personal information.
- Request restriction of certain processing.
- Object to certain processing.
- Receive certain information in a portable format.
- Withdraw consent where processing relies on consent.
- Request information about international transfer safeguards.
- Complain to an appropriate privacy or data-protection authority.
These rights are subject to applicable legal conditions, limitations and exceptions.
To exercise a privacy right, contact:
We may need to verify your identity before completing a request.
13. Children and young people
GabbyAI is not intended for children under 13. A person under 13 must not create a GabbyAI account.
Where the law in your country requires parental or guardian permission to use online services, you may use GabbyAI only where the required permission has been obtained.
A parent or guardian who believes a child has provided personal information contrary to this policy should contact:
14. Cookies and browser storage
GabbyAI uses cookies, local storage, session storage or similar technologies where required for essential functionality.
These technologies may be used to:
- Keep you signed in.
- Maintain authentication state.
- Store essential account preferences.
- Maintain security.
- Support website functionality.
- Preserve interface preferences.
Disabling essential browser storage may prevent account or security features from working correctly.
If we introduce non-essential analytics, advertising or tracking technologies, we will provide appropriate notice and consent controls where required by law.
15. Changes to this policy
We may update this Privacy Policy where GabbyAI, our processing activities, legal requirements or operational practices change.
The current version will be published on this page with an updated effective date.
Where a change materially affects how personal information is handled, we may provide additional notice through GabbyAI, by email or through another appropriate method.
16. Contact us
Questions, concerns and privacy requests may be directed to: