Privacy Policy

What We Collect

Nothing we store on our servers.

AgentVigil operates without a backend server. There is no database, no user accounts, no analytics pipeline, and no data warehouse.

The only infrastructure involved is:

Cloudflare Tunnel — used to create an encrypted connection between your Mac and your phone. Cloudflare acts as a network relay only. All traffic is end-to-end encrypted before it reaches Cloudflare's network. Cloudflare cannot read your session content. We cannot read your session content.

ntfy.sh — used to deliver push notifications to your phone when a session needs your attention. Push notification payloads are encrypted. ntfy.sh sees only an encrypted blob and a topic name.

We do not use Google Analytics, Mixpanel, Amplitude, Segment, Sentry, Crashlytics, or any other third-party analytics or monitoring service.

What Stays on Your Devices

The following data never leaves your local network:

• Your source code and project files
• Claude Code, Codex, and Amp session content and transcripts
• Conversation history between you and your AI agents
• Permission prompt details and tool inputs
• File paths and working directory names
• Token usage data and cost calculations

This data is read from your Mac's local filesystem by the AgentVigil companion and transmitted directly to your phone via an encrypted tunnel. It is never stored on any external server.

Encryption

All communication between the AgentVigil Mac companion and the Android app is encrypted using TweetNaCl (XSalsa20-Poly1305) with X25519 key exchange. The encryption keys are generated on your devices during the pairing process and never transmitted to us or any third party.

The shared secret used for encryption exists only on your Mac and your phone. Not on Cloudflare's servers. Not on ntfy.sh's servers. Not with us.

• TweetNaCl XSalsa20-Poly1305 symmetric encryption
• X25519 Diffie-Hellman key exchange
• Keys generated locally during QR pairing
• Keys never transmitted to any server
• Relay sees only opaque ciphertext

The Android App

The AgentVigil Android app stores the following data locally on your device only:

None of this data is transmitted to us.

The Mac Companion

The AgentVigil Mac companion stores the following data locally on your Mac only:

This data never leaves your Mac except as encrypted payloads sent directly to your paired phone.

Push Notifications

Push notifications are delivered via ntfy.sh. When a permission prompt fires, the companion sends an encrypted notification payload to a randomly generated ntfy topic that only your phone subscribes to. The topic name is a 32-character random string generated during setup. ntfy.sh has no way to associate this topic with your identity.

The notification payload is encrypted before it is sent to ntfy.sh. ntfy.sh cannot read the contents of your notifications.

Open Source

The AgentVigil Mac companion is fully open source and available on GitHub. You can read every line of code that runs on your machine before running it. We believe tools with access to your terminal and AI agent sessions should be fully auditable.

The Android app source code is not currently public.

Children

AgentVigil is a developer tool intended for adults. We do not knowingly collect any information from anyone under the age of 16.

Changes to This Policy

If we materially change this privacy policy we will update the date at the top of this page and post a notice on our GitHub repository. Continued use of AgentVigil after changes constitutes acceptance of the updated policy.

Contact

If you have questions about this privacy policy, open an issue on GitHub or send us an email.