The short version
Bugcutter collects no data. There is no account, no analytics, no ads, no tracking and no third-party SDKs. Nothing you do in Bugcutter is sent to us.
This policy covers the Bugcutter app for iPhone, iPad and Mac and this website. The website sets no cookies, loads nothing from other sites and runs no analytics.
What stays on your device
Everything Bugcutter saves for you stays on your device, in the app's own storage. That includes:
- saved values, saved lists and counters
- habit, expense and Pomodoro logs
- your plants, your subscriptions and your car's fuel log
- files that actions create for you, such as SQLite databases
Secrets you save with Set Secret, such as API tokens and passwords, and your SSH private keys are stored in the system Keychain. They are kept on this device only: they are not synced through iCloud Keychain and are not restored onto a new device.
Bugcutter has no server of its own, so none of this is ever uploaded to us. Deleting the app deletes its saved data. Keychain items can outlast the app, so if you want your secrets and SSH keys gone too, remove them first with the Delete Secret and Delete SSH Key actions.
Calendars, contacts and location
Bugcutter only reads your calendars and contacts on your device, and only when you run an action that needs them: Find Free Time reads your calendar events to find gaps, and Get Upcoming Birthdays reads the birthdays in your contacts. What they read is used to build the result and is never stored or sent anywhere.
Bugcutter does not ask for access to your location. Actions that work with a place, such as Get Air Quality or Find Cheapest Fuel Nearby, use the location you give them, for example from Shortcuts' own Get Current Location action.
When Bugcutter goes online
Most actions work entirely offline. Bugcutter only connects to the internet when you run an action that needs it, and only to the service that action is built on:
- frankfurter.devCurrency exchange rates, for Convert Currency. It receives the amount, the currencies and the date you ask about.
- date.nager.atPublic holidays. It receives the country and the year.
- apidatos.ree.esSpanish electricity prices (PVPC), published by Red Eléctrica. It receives the day you ask about.
- sedeaplicaciones.minetur.gob.esSpanish fuel prices, published by the Ministry. Bugcutter downloads the full national price list and picks the stations near you on your device, so your location is not sent.
- air-quality-api.open-meteo.comAir quality and pollen. It receives the coordinates of the place you give the action.
- speed.cloudflare.comTest Internet Speed. It sends and receives test data only.
- api.github.comThe GitHub actions. It receives the repository you ask about and, if you saved one, your own GitHub token.
- Servers you enter yourselfSend HTTP Request, SSH and SFTP, MQTT, Home Assistant, link expansion and the other network actions connect only to the address you type into them, and send only what you put in the action.
Like any internet connection, these services can see your IP address. Bugcutter adds no identifier of its own. Each service has its own privacy policy, and that policy applies to what it receives.
Permissions
Bugcutter asks for permission the first time an action needs it: Calendars for Find Free Time, Contacts for Get Upcoming Birthdays, and Local Network for actions that reach devices at home, such as Home Assistant, MQTT or SSH. You can change any of these at any time in Settings › Privacy & Security on iPhone and iPad, or System Settings › Privacy & Security on Mac.
Changes to this policy
If Bugcutter starts handling data in a different way, this page will be updated before that version is released, and the date at the top will change.
Contact
Questions about privacy, or anything else: contact@atch.cc.