Privacy Policy
Switchboard uses shared boards that sync through a developer-run backend. This policy explains what board data is processed, what stays on your device, and how inactive boards are removed.
This Privacy Policy describes how Switchboard ("App") handles information. If you have privacy questions, contact [email protected].
1. Scope and Core Privacy Model
Switchboard is a shared-board app for Apple devices. Unlike a local-only utility, Switchboard uses a backend service so multiple devices can join the same board and stay synchronized in real time. We do not use advertising SDKs or developer-run behavioral analytics in the current app codebase. RevenueCat may process purchase and app-activity data for purchase and entitlement functionality and related service analytics, as described below.
2. Data Categories and Purposes
The App may process the following categories of data to provide Switchboard functionality:
- Board data: board title, frequency, passcode, notes, and default seed counts so a board can be created, joined, updated, and protected.
- Hierarchy data: groups, sections, switches, colors, notes, sort order, and on/off state so the shared control surface can be rendered and synchronized.
- Connection, security, and activity data: IP address, board identifiers, last edit time, last view time, and active connection state so the service can rate-limit abuse, protect board passcodes, keep boards current, and remove expired inactive boards. IP-based security state is processed in server memory and is not written to the board database. Operational logs may separately contain board and connection identifiers, request timings, errors, and temporary pseudonymous IP fingerprints for investigating connection failures and abuse.
- Local app settings: theme, keep-awake setting, server URL, last joined frequency, last joined passcode, sound preference, and haptic preference so the App can restore your experience.
- Purchase, entitlement, and related technical data: Apple and RevenueCat may process purchase history, receipt or transaction information, Pro entitlement status, last-seen app activity, device type, operating system, and a random anonymous RevenueCat App User ID so the App can offer, unlock, and restore the one-time Pro purchase and so RevenueCat can provide purchase-service analytics. Switchboard does not provide RevenueCat with a custom account identity and does not receive your payment card details.
- Support communications: your email address and message contents if you contact support. An email draft opened from the App may include the app version, language, operating system, device model, and a device identifier or computer name to help diagnose your issue. You can review or remove those details before sending.
3. What Stays on Your Device
Switchboard stores some preferences and join context locally on-device through standard platform storage. This includes settings such as app theme, keep-screen-awake preference, sound and haptic preferences, server URL, and the most recent join information needed for board restore flows.
Sensitive local join values are stored using Apple Keychain. To support restore and companion features, join state may also synchronize through Apple's iCloud, CloudKit, and WatchConnectivity services and can include a board passcode when one is present, together with a random app-specific device identifier used to resolve which synchronized change is newer.
The current app code does not request location, contacts, camera, photos, or microphone access for core functionality.
4. Apple Watch Companion Sync
When used with Apple Watch, Switchboard can send companion board context between iPhone and Watch through Apple's WatchConnectivity framework. That context may include whether a board is active, the board frequency, the passcode (if one exists), and the configured server base URL so the Watch can restore or join the same board.
5. Who Can See Shared Board Data
Board content is visible to devices that successfully join the board. Anyone with the board frequency and, if required, the correct passcode can access that board's shared state. You are responsible for choosing who receives those codes.
We do not sell personal information and we do not share personal information for cross-context behavioral advertising. Data may be processed by infrastructure and platform providers that are necessary to host the service and distribute the App, including Apple platform services and RevenueCat for in-app purchase, entitlement, and related purchase-service analytics. RevenueCat describes its end-user processing and retention in its privacy policy.
6. Retention and Deletion
Switchboard includes automatic cleanup for inactive boards. Based on the current service configuration, a board may be deleted after both of these conditions are true:
- No edits for 30 days.
- No views for 7 days.
When an inactive board expires—or when it is explicitly deleted through the App—the service permanently deletes the board and its hierarchy from active service storage. This server deletion is separate from copies of join context or recent-board data held by an Apple device or Apple synchronization service.
Local settings and join context remain until they are updated or cleared through the App or platform. Removing an entry from Recent Boards is designed to remove its app-managed Keychain passcode and CloudKit recent-board record, with synchronization occurring when Apple services are available. Leaving a board clears active join context but does not by itself remove that board from Recent Boards.
Apple Keychain items may survive removal and reinstallation of the App, and iCloud, CloudKit, device, or backup copies may remain associated with your Apple Account according to Apple's synchronization, backup, and retention behavior. App removal alone should not be relied on to erase those copies. Before removing the App, you can leave the active board and remove saved Recent Boards; you can also manage Switchboard's iCloud access through Apple platform settings. Operational logs are subject to hosting-provider retention settings and are separate from board deletion. RevenueCat retains purchase-related information according to the provider policy linked above and applicable legal requirements.
7. Security
We use platform security controls and transport security provided by the Apple and server platforms. No method of storage or transmission is guaranteed to be completely secure, so you should use passcodes for boards that should not be accessible by anyone who learns the frequency alone.
8. Your Rights and Choices
Depending on your location, you may have rights to access, correct, delete, or export personal data, and to object to or limit certain processing. Because Switchboard is designed around shared board data, your most direct controls are to leave a board, remove saved Recent Boards, delete board content, stop sharing join codes, manage Apple platform synchronization settings, and contact support for additional help.
9. Children's Privacy
Switchboard is not directed to children under 13, and we do not knowingly collect personal information from children under 13 through the App.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date on this page.
11. Contact
Privacy questions or requests: [email protected]