Privacy Policy

ContextSwitch Kanban App

What This Policy Covers

This privacy policy explains how Helton Labs LLC ("we," "our," or "us") handles information in connection with the ContextSwitch kanban application ("ContextSwitch" or "the App"). This policy applies to the ContextSwitch macOS application available through the Mac App Store.

Information We Do NOT Collect

ContextSwitch is designed with a privacy-first architecture that ensures complete data ownership. We do not collect, store, or transmit any of the following:

• Todo Content - Task titles, descriptions, notes, or any content you create
• Project Information - Database names, project structures, or organizational data
• Tags and Categories - How you organize and categorize your work
• Due Dates and Scheduling - When tasks are due or how you plan your time
• Priority Settings - Which tasks you mark as high, medium, or low priority
• Usage Patterns - How often you use the app, which features you access, or productivity metrics
• Database Files - The location, names, or contents of your .db files
• Device Information - Hardware specifications, operating system details, or device identifiers
• Location Data - Your physical location or IP address
• Search Queries - What you search for within your projects
• AI Interactions - Commands or conversations with AI assistants through MCP integration

How Your Data Is Stored

100% Local Database Files

ContextSwitch uses a multi-database architecture where each project is stored in its own SQLite database file on your Mac:

• User-Controlled Location - You choose where to store each .db file
• Standard SQLite Format - Uses industry-standard database format
• No Hidden Data - All project data is in the .db files you create
• Portable - Files can be moved, backed up, or shared at your discretion
• No App Data Folder - No hidden application support files containing your data

Security-Scoped Bookmarks

To provide seamless access to your database files, ContextSwitch stores macOS security-scoped bookmarks:

• File Access Only - Bookmarks only store file access permissions, not content
• macOS Security - Uses Apple's secure bookmark system
• No Content Exposure - Bookmarks don't contain your actual project data
• User Revocable - You can revoke access by removing databases from the app

No Network Communication

ContextSwitch operates entirely offline and makes no network requests for:

• Data synchronization or backup
• Analytics, telemetry, or usage tracking
• Feature usage reporting or crash analytics
• Software updates (handled by the Mac App Store)
• License validation beyond initial App Store verification

AI Integration and Data Access

Model Context Protocol (MCP)

ContextSwitch includes an optional MCP server that enables AI assistant integration. This integration:

• Runs Locally Only - The MCP server operates entirely on your Mac
• Requires Manual Configuration - You must explicitly set up AI assistant access
• No Automatic Connection - AI assistants cannot access your data without your configuration
• Revocable Access - You can disable AI integration at any time
• Transparent Operations - All AI actions are visible in the app interface

AI Assistant Data Access

When you configure an AI assistant with MCP access, it can:

• Read todo titles, descriptions, and metadata
• View project database structures and swimlanes
• Create, update, and delete todos
• Search and filter across your databases
• Move todos between swimlanes and databases
• Access tags, priorities, and due dates

Important: AI assistants process your data according to their own privacy policies. When you share your todo data with an AI service (like Claude Desktop), that service's privacy policy governs how they handle the information. We recommend reviewing the privacy policies of any AI services you choose to integrate.

Mac App Store Integration

App Store Transactions

When you purchase or subscribe to ContextSwitch through the Mac App Store:

• All payment processing is handled by Apple
• We receive only anonymous transaction notifications from Apple
• We cannot link your App Store purchase to your usage of ContextSwitch
• Apple's privacy policy governs the collection and handling of your payment information

Subscription Management

Your $1.99/month subscription is managed entirely through your Apple ID:

• Billing is handled exclusively by Apple
• Subscription changes are made through System Settings > Apple ID > Media & Purchases
• We have no access to your payment methods, billing history, or personal information
• App Store receipts are validated locally on your device

Data Security and Protection

Local Data Protection

Your project data benefits from multiple layers of security:

• macOS File System Security - Protected by Apple's file system permissions
• User Account Isolation - Data only accessible under your user account
• App Sandbox Protection - ContextSwitch runs in Apple's secure app sandbox
• FileVault Encryption - Protected by full disk encryption when enabled

No Remote Attack Surface

Since ContextSwitch doesn't communicate over the network, it eliminates risks from:

• Server-side data breaches
• Network interception attacks
• Man-in-the-middle attacks during data transmission
• Unauthorized remote access to your project data
• Cloud storage security vulnerabilities

Your Data Rights and Control

Complete Data Ownership

With ContextSwitch, you have absolute control over your data:

• Direct File Access - Your .db files are standard SQLite databases
• Backup Control - Back up files using any method you prefer
• Data Portability - Export data in CSV, JSON, or other formats
• Sharing Control - Share database files with teammates or collaborators
• Deletion Control - Delete individual todos, entire databases, or all data
• Location Control - Store databases anywhere on your Mac or external drives

Multi-Database Benefits

ContextSwitch's multi-database architecture provides additional privacy benefits:

• Data Segmentation - Keep work, personal, and client data separate
• Selective Sharing - Share only specific project databases
• Granular Backup - Back up different projects on different schedules
• Risk Isolation - Protect other projects if one database is compromised

Uninstalling ContextSwitch

If you choose to uninstall ContextSwitch:

• All your database files remain untouched on your Mac
• You can access your data using any SQLite browser or editor
• No data is retained in cloud services or remote servers
• Reinstalling the app provides immediate access to existing databases
• Security-scoped bookmarks are removed, but your actual data remains

Third-Party Services

No Third-Party Data Sharing

ContextSwitch does not integrate with or share data with any third-party services, including:

• Analytics platforms (no Google Analytics, Mixpanel, etc.)
• Crash reporting services (no Crashlytics, Sentry, etc.)
• Marketing automation tools
• Social media platforms
• Cloud storage services (no automatic sync to iCloud, Dropbox, etc.)
• Productivity tracking services

AI Service Privacy Considerations

If you choose to configure AI assistants to access your ContextSwitch data, review their privacy policies:

• Claude (Anthropic) - Review Anthropic's privacy policy for data handling practices
• ChatGPT (OpenAI) - Review OpenAI's privacy policy and data usage terms
• Other AI Services - Each AI service has its own privacy and data handling policies

Remember: AI integration is entirely optional and under your control.

Children's Privacy

ContextSwitch is not specifically directed toward children under 13, and we do not knowingly collect personal information from children under 13. Since our privacy-by-design architecture ensures we don't collect any personal data, this inherently protects users of all ages, including minors who may use the app for school projects or personal organization.

International Data Protection

ContextSwitch's local-only architecture automatically complies with international data protection regulations:

• GDPR (European Union) - No personal data processing by us means automatic compliance
• CCPA (California) - No personal information collection, sale, or sharing
• PIPEDA (Canada) - No personal information collection or cross-border transfers
• Data Localization Laws - Data remains in your country/jurisdiction at all times
• Right to be Forgotten - You control all data deletion

Data Processing Legal Basis

Since ContextSwitch processes data entirely on your device for your own purposes, the legal basis for any data processing is:

• Legitimate Interest - Your own interest in managing your projects and todos
• No Third-Party Processing - We don't process your data for our own purposes
• User-Initiated Processing - All data operations are initiated by you

Business Model and Privacy

Our subscription-based business model aligns with strong privacy practices:

• Revenue from Subscriptions - We make money from app subscriptions, not from your data
• No Advertising - No ads means no need to collect data for targeting
• No Data Sales - We don't sell, rent, or monetize user data
• Privacy-Sustainable Model - Our business success depends on providing value, not collecting data

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices, legal requirements, or the app's functionality. Any changes will be:

• Posted on our website with a clear "Last Updated" date
• Made available within the ContextSwitch application
• Announced through Mac App Store update notes for material changes
• Consistent with our core privacy-first principles

We encourage you to review this policy periodically, especially after app updates that might introduce new features.

Verification and Transparency

Open Source Components

ContextSwitch uses open-source components where possible to enable community verification of privacy practices:

• MCP server implementation details are available for review
• SQLite database format is fully documented and standard
• No obfuscated code that could hide data collection

Network Activity Verification

You can verify ContextSwitch's privacy claims by monitoring network activity:

• Use Activity Monitor to confirm no network connections from ContextSwitch
• Use network monitoring tools to verify no data transmission
• Check firewall logs to confirm no outbound connections