Privacy Policy

Effective November 5, 2026

Switchy is a menu bar app for Mac made by Vladimir Babic, an independent developer (“I”, “me”). This policy explains what the app and this website do with your information.

The short version

There is no Switchy account, no analytics, no tracking and no ads, in the app or on this website.
Payments go through Polar. Switchy sends your license key to Polar to check it, and nothing else about you.
Your 2FA codes and API tokens are kept in your Mac’s Keychain. I never receive them.
Switchy only contacts the services listed below, and most of them only after you turn a feature on.
Crash and problem reports are sent by you, from your own mail app, only if you choose to.

What Switchy keeps on your Mac

What	Where
2FA accounts (secret, issuer, account name, nickname, website, colour)	macOS Keychain. Synced through iCloud Keychain if it’s on (see below).
Your license key and this Mac’s activation ID	Your login Keychain on this Mac only. Never synced.
Deploy platform API tokens	Your login Keychain on this Mac only. Never synced.
Settings: your switch layout, shortcuts, connected Usage profiles and their last known email, deploy team or account IDs, the number of times you’ve flipped a switch	App preferences on this Mac
Site icons for your 2FA accounts	`~/Library/Caches/com.vladbabic.switchy`, kept up to 30 days, with file names hashed
Encrypted code backups	Only where you save them. Encrypted with your password (AES-256-GCM).

What Switchy sends over the network

Switchy has no server of its own that collects data. It makes these requests:

Purpose	Goes to	What is sent	When
License check	`api.polar.sh` (Polar)	Your license key, the activation ID for this Mac and, when you activate, your Mac’s name so you can tell your Macs apart in the Polar customer portal. Polar sees your IP address.	When you activate or deactivate a Mac, at launch, and about once a day
Update checks	`updates.getswitchy.app` (Cloudflare)	A request for the update list and, when there is an update, its download. Your IP address and app version are visible to the host. No system profile is sent.	Once a day. Turn it off in Settings → General.
Public IP in the Network card	`checkip.amazonaws.com` (Amazon)	A plain request with no data. Amazon sees your IP address, which is what it returns.	When you open the panel, at most once a minute
Site icons in Codes	The website of each 2FA account, for example `github.com`	A request for the site’s icon, with no cookies. The site sees your IP address.	On by default. Turn it off in Settings → Codes → Show site icons.
Deploys	The platforms you connect: Vercel, Netlify, Cloudflare, Railway, Render, DigitalOcean, Heroku or your own Coolify server	Your API token for that platform, to read your recent deployments	Only after you add a token. Every 15 to 60 seconds while connected.
Usage (beta)	Anthropic and OpenAI, through the Claude Code and Codex command-line tools already on your Mac	Switchy asks those tools for your plan limits. They use their own sign-in; Switchy never reads your login or tokens.	Only for profiles you connect. Every 5 to 15 minutes.

Links and buttons that open a page, such as a deploy dashboard or a provider’s sign-in, open in your browser. What happens there is covered by that site’s own policy.

What never leaves your Mac

Camera. Mirror shows a live preview and the QR scanner reads codes on the device. Nothing is recorded, saved or uploaded.
Screen. Scanning a QR code on screen captures only the window you pick, once, in memory.
Microphone. Mute Microphone only changes the input volume. Switchy never records audio.
Clipboard. Switchy only writes to it, when you copy a code. Copied codes are marked so clipboard managers skip them, and are cleared after 30 seconds and when Switchy quits.
System settings. Switches such as Dark Mode, Night Shift, DNS and Do Not Disturb change settings on your Mac. The localhost tracker reads which development servers are running. None of this is sent anywhere.

iCloud Keychain

If iCloud Keychain is on, your 2FA accounts sync to your other Macs signed in to the same Apple Account. Apple encrypts iCloud Keychain end to end, so neither Apple nor I can read them. To keep codes on one Mac only, turn off Passwords & Keychain in System Settings → Apple Account → iCloud. Deploy tokens and settings never sync.

Crash and problem reports

If Switchy crashes, it asks the next time it opens whether you want to send the crash report. If you say yes, it opens an email in your own mail app with the report attached, so you can read it before you send it. A crash report includes technical details such as your Mac model, macOS version and file paths, but none of your codes or tokens. “Report a Problem…” in Settings → About works the same way. Switchy never sends anything by itself.

If you email me, I use your email address and what you send only to reply and to fix the problem, and I don’t keep crash reports longer than it takes to fix it.

This website

getswitchy.app uses no cookies, analytics or third-party scripts; its fonts and scripts are served from the site itself. It is hosted on Cloudflare, which processes visitors’ IP addresses and request details to deliver and protect the site, under the Cloudflare Privacy Policy.

Service providers

Cloudflare hosts this website and the update downloads.
Polar sells Switchy as the merchant of record. When you buy, Polar collects your email, name, billing country and payment details under the Polar Privacy Policy. I can see your email, name and order in Polar, and use them only for your purchase and support.
Apple provides iCloud Keychain, Touch ID and notarization.
Amazon Web Services answers the public IP lookup.
Deploy platforms, Anthropic and OpenAI receive requests only for the features you connect, under your own account with them.

I don’t sell, rent or share personal information with anyone else.

Your choices and rights

Because Switchy keeps your data on your Mac, you control it directly:

Delete 2FA accounts and deploy tokens inside Switchy.
To remove everything, quit Switchy, delete it from Applications, run defaults delete com.vladbabic.switchy in Terminal, and delete ~/Library/Caches/com.vladbabic.switchy. Remove any items named “com.vladbabic.switchy” in the Passwords app or Keychain Access.

Depending on where you live, you may have the right to access, correct or delete personal information I hold about you, which is only your Polar order details and emails you’ve sent me. Email me and I’ll respond within 30 days.

Children

Switchy is a general-purpose tool and is not directed at children under 13. I don’t knowingly collect information from children.

Changes

If this policy changes, I’ll update it here and change the date at the top. If a change affects what the app sends, I’ll mention it in the release notes for that update.

Contact

Questions about privacy: [email protected]