Privacy Policy

Overview

Vigilant is an expiry monitoring app built and distributed by SHYGUY LLC. It helps you track SSL certificates, domain registrations, subscriptions, licenses, and other time-sensitive items so nothing expires unexpectedly.

The short version: Vigilant does not collect, transmit, or sell any personal data. Everything stays on your device.

Data We Do Not Collect

• —No analytics or usage tracking
• —No crash reporting sent to third parties
• —No advertising identifiers
• —No account registration or login
• —No sale or sharing of your data — the only outside services involved are named on this page

Data Stored Locally on Your Device

Vigilant stores the following data on your device, in storage only the app can read (SwiftData on iPhone, the app's private files on Android). It never leaves your device unless you export or share it.

• —Watch items you create — name, type, identifier, expiration date, and notes
• —Notification preferences — which alert windows you configure (e.g. 30, 14, 7, 1 days before expiry)
• —Documents you add to an item's vault — scanned pages, photos, barcode values, and the text and dates read from them
• —In-app purchase status (Pro unlock) — managed by Apple's App Store or Google Play, not by SHYGUY LLC servers

Network Access

Vigilant makes network requests only for auto-checkable item types:

• —SSL Certificates — connects to the domain over HTTPS to read the certificate expiry date
• —Domain Registrations — asks rdap.org, a public registration-lookup service run by a third party, for the domain's record; it forwards the request to the domain's registry. The domain name you track is sent to rdap.org

SSL checks go directly from your device to the host you entered; domain checks go to rdap.org as described. No traffic passes through SHYGUY LLC servers. All other item types (subscriptions, licenses, insurance, etc.) are manually entered and require no network access.

Scanning and Text Recognition

When you scan a document or barcode, or pick a photo, the text and codes are read on your device: by Apple's Vision framework on iPhone, and by Google's ML Kit on Android. The images and the text are not sent anywhere. On Android, ML Kit sends Google diagnostic information about its own use — device and app information, per-installation identifiers that are not meant to identify you or your phone, performance metrics and error codes — encrypted in transit and not passed to third parties (Google's ML Kit data disclosure). On Android the document and barcode scanners are provided by Google Play services, so Vigilant itself never needs the camera permission.

Share to Vigilant

You can create a watch item by sharing a link or text to Vigilant from another app (a share extension on iPhone, the share sheet on Android). What you share is used to fill in the form on your device and is never transmitted.

Notifications

Vigilant schedules local notifications to remind you before items expire. These notifications are generated entirely on-device (iOS local notifications; on Android, the system's WorkManager), at 9 AM on Android. No push notification server is involved, and no notification data leaves your device.

Vigilant for Android

Everything above applies to the Android app. In addition:

• —Permissions: internet (SSL and domain checks), network state, notifications, and the one Google Play Billing needs. No camera, location, contacts or storage permission.
• —Vigilant Pro is a one-time in-app purchase through Google Play. Google handles the payment; we never see your payment details, and the app only asks Google Play whether your account owns Pro.
• —The home-screen widget shows the next item to expire. It reads that one item from the app's own storage on the phone.
• —Android's cloud backup is turned off for the app, so your items and documents are not copied to Google Drive.
• —Exports (PDF, images, ZIP) are written to the app's private cache and handed to the app you choose in the share sheet.

Children's Privacy

Vigilant is not directed at children under 13 and does not knowingly collect any information from children. As Vigilant collects no personal data from any user, no special handling applies.

Changes to This Policy

If this policy changes materially, the effective date above will be updated and a note will be posted on shyguy.studio.

Contact

Questions about this policy? hello@shyguy.studio