Your telemetry has a destination you choose.

The Mac app

Vigil requests telemetry from the Vigil API address you configure. That API is operated separately by you or your team; its operator controls storage, retention and access. The app displays records including logs, exceptions, AI usage, security findings and TestFlight crashes. Those records may contain information about your own users, so configure the source systems and access permissions accordingly.

The current Mac app has no developer-operated analytics or automatic crash-reporting service. Its functionality does not require sending your telemetry to a Vigil-operated cloud. Optional source connections and Apple authentication have their own providers and privacy terms.

Local storage and credentials

Vigil stores its API credential in macOS Keychain. Connection preferences and selected folder access are stored on your Mac. TestFlight reports collected through ASC are cached locally so they remain readable after collection. The direct build uses the ASC profile you authorize in your CLI. The planned Store build bundles ASC and uses a separate app-owned Keychain profile that you authorize; it does not import host CLI profiles. Uninstalling the app does not necessarily remove Keychain credentials or separately stored data; remove those through the relevant macOS or CLI controls.

Connected MCP clients

Starting the app-owned MCP server enables connected local clients to request scoped read-only records through a private socket and short-lived access grants. Responses are bounded and redact recognized credentials. Redaction cannot determine whether every field is sensitive. Connect only clients you intend to receive the data, and stop the server in MCP Hub when sharing is no longer needed.

If your chosen coding agent sends context to a model provider, that client's settings and provider terms govern the onward transfer. Vigil does not select a model provider for that client.

This website

This static website uses no advertising pixels, analytics scripts or signup forms. Its hosting provider, Vercel, processes technical request information such as IP addresses and user-agent headers to deliver and secure the site. Downloading files also makes a normal request to the host.

Emailing support sends the information you include to the developer's email service. Keep credentials and private telemetry out of those messages. We use support correspondence to answer the request.

Questions and requests

Contact luke@rhodes.gg about this app or website. For data held by your configured telemetry backend or source providers, contact their operator.