Privacy Policy

Overview

Tapir API is an API client and endpoint monitor built and distributed by Shy Guy LLC. It allows developers to test HTTP endpoints, organize requests into collections, import OpenAPI specifications, and monitor endpoint health from their iOS device.

The short version: Tapir does not collect, transmit, or sell any personal data. Everything stays on your device.

Data We Do Not Collect

• —No analytics or usage tracking
• —No crash reporting sent to third parties
• —No advertising identifiers
• —No account registration or login
• —No data shared with third parties
• —No server-side storage of your requests or responses

Data Stored Locally on Your Device

Tapir stores the following data locally using iOS-managed storage (SwiftData). This data never leaves your device.

• —Saved API requests — URLs, headers, body content, and authentication tokens
• —Request history — URLs, response status codes, response times, and response bodies
• —Collections — named groups of requests
• —Environments — variable sets (e.g. base URLs, API keys) for switching between configurations
• —Monitors — endpoint URLs, check intervals, and health status

Authentication tokens and API keys you enter are stored in SwiftData on-device. They are used only to construct HTTP requests that you explicitly initiate.

Network Access

Tapir makes network requests in the following contexts, all initiated by you:

• —API testing — HTTP requests are made directly from your device to the URLs you specify when you tap Send.
• —Endpoint monitoring — When you create a monitor, Tapir periodically sends HTTP requests to the monitored URL to check its status.
• —Import — When you paste an OpenAPI spec or Postman collection, the content is parsed locally. No network request is made during import.

No traffic is proxied through Shy Guy LLC servers. All requests go directly from your device to the target endpoint. Tapir has no backend server.

Arbitrary Network Requests

Tapir is an API testing tool. By design, it sends HTTP requests to any URL you provide. The content of those requests — including headers, body, and authentication credentials — is determined entirely by you. Tapir does not validate, filter, or log the destinations of your requests beyond what is stored in your local request history.

Children's Privacy

Tapir is not directed at children under 13 and does not knowingly collect any information from children. As Tapir collects no personal data from any user, no special handling applies.

Changes to This Policy

If this policy changes materially, the effective date above will be updated and a note will be posted on shyguy.studio.

Contact

Questions about this policy? hello@shyguy.studio