Privacy policy

Who is responsible

SwiftzTech is the controller of the data described here. Contact: support@vigiu.com.

On your Mac

Conversations, history, settings and Flows are stored on your Mac. API keys you add are kept in the macOS Keychain. None of this is sent to us.

AI agents and models

When you talk to an AI agent or model, Vigiu uses the agent installed on your Mac or the API key you added yourself. The content goes from your Mac straight to the provider you chose (for example Anthropic, OpenAI or Google) and is subject to that provider’s terms and privacy policy. With local models it never leaves your Mac. Vigiu does not receive these conversations.

Some features query public services directly from your Mac, such as currency rates, a web search requested by an agent, or checking for new versions of installed agents. These requests don’t go through us.

Account

An account is optional on the Mac and required to use Vigiu on your phone. You sign in with Apple, Google or GitHub. On the sign-in server we store:

• a random account identifier and the date it was created;
• the provider you used and the identifier it gives you;
• the name and email the provider shares (to show in the app and to link providers of the same person);
• to keep you signed in, only a hash of the session token, the device name and usage dates. That token expires after 180 days without use, and signing out deletes the one for that device.

We never receive your provider password. On the device, the session is kept in the Keychain (Mac and iPhone) or in a file encrypted with the Android Keystore.

Remote access from your phone

Your phone and your Mac talk with end-to-end encryption. The remote access server (relay.vigiu.com) only forwards encrypted packets and has no key to read conversations, commands or files.

To work, it stores: the public key and name of each registered Mac, the account it belongs to, when it was registered and when it last connected; pairing invites (codes only as a hash, deleted 30 days after they expire); and the notification token of each paired phone.

Server logs never contain message content. IP addresses only appear as a code that changes every day and can’t be turned back into the IP. We make daily backups of this data, kept for up to 90 days.

Phone notifications

Notifications are delivered by Apple (APNs) on iPhone and by Google (Firebase Cloud Messaging) on Android. A notification is sent with no text, only its type (for example, “an agent needs approval”). If you turn on previews on your phone (off by default), the details are encrypted and only your device can decrypt them. The iPhone Live Activity and the Android ongoing notification show only counts, such as how many agents are working.

Camera

The camera is used only to scan the QR code that pairs your phone with your Mac. Scanning happens on the device; no image is stored or sent.

Face ID, Touch ID and fingerprint

The biometric lock is optional and off by default. Your device’s system does the check; Vigiu only learns “confirmed” or “not confirmed” and never has access to biometric data.

Voice and dictation

Vigiu’s voice is generated on your Mac. Dictation uses Apple speech recognition, on the Mac itself when it allows, or a local model. If you choose cloud transcription, the audio goes to the provider you configured, under its terms. Voice models are downloaded from a public repository, with none of your data.

Usage statistics (optional)

On the Mac, “Help improve Vigiu” (Settings › Privacy) is off by default. If you turn it on, the app sends our server a random installation identifier, a few events from a fixed list (app opened, setup finished, which kind of agent was connected, which feature was used) and environment details: app and macOS version, processor type, time zone, region and language. Conversations, text, file names and email are never sent. Turning it off deletes the identifier and any events not yet sent.

The iPhone and Android apps have no usage statistics or crash reporting.

Mac updates

Vigiu checks updates.vigiu.com for updates and downloads a list of enabled features. These requests carry no identifier and no system profile; the server only sees what any internet request shows, such as the IP address.

Website

vigiu.com counts clicks on “Download” added up by day, page version and language, with no cookies and no personal data. If the site ever uses analytics tools with cookies, they only run after you click “Accept” on the notice.

Who handles data for us

We don’t sell or rent data and we don’t run ads. To operate, we use: Cloudflare (network and protection in front of our servers, and website hosting), a virtual server provider (where the relay and sign-in run), Apple and Google (sign-in and notifications) and GitHub (sign-in). Each handles what it receives under its own policies. These services may be located outside your country.

How long we keep data

Account and registered Mac data is kept while the account exists and leaves the server the moment you delete it. Sign-in tokens expire after 180 days without use; pairing codes are deleted 30 days after they expire; backups last up to 90 days.

Your rights and deleting your account

Under the LGPD (Brazil) and the GDPR (European Union), you can ask to access, correct, delete or port your data, and withdraw consent. For any of these, email support@vigiu.com from your account’s address; we reply within 15 days.

To delete your account and everything linked to it (sign-ins, sessions, registered Macs, pairings and notification tokens), use Apagar conta… (Delete account) in the Account part of the app’s Settings (on the Mac, under Remote access): deletion on the server is immediate. Without access to the app, ask by email. Backups stop holding that data within 90 days. Step by step at vigiu.com/delete-account.

You can also complain to your country’s data protection authority.

Children

Vigiu is not directed at children under 13 and we don’t knowingly collect their data. If you learn of such a case, contact us and we’ll delete it.

Changes to this policy

When this policy changes, we publish the new version on this page with a new date. If the change is significant, we’ll let you know in the app or on the site before it takes effect.