Privacy Policy & Security Architecture

1. Core Philosophy

Lafine Systems Design believes security tools must never compromise user privacy. RoamSwitch is engineered strictly with local execution and zero external tracking.

2. Data Never Collected (Complete Absence of Telemetry)

The software strictly refrains from collecting, storing, or transmitting any of the following information:

• Connected Wi-Fi SSID, BSSID, router MAC addresses, or IP addresses
• Local processes, open listening ports, or executable binary file paths
• Authentication logs, SSH connection records, or XProtect security logs
• Personal identity, file contents, browsing history, or geographic location
• App analytics, usage metrics, or background telemetry crash data

That said, the Software makes a small number of technically necessary network connections: (1) license activation when you enter a license key (sends the license key, device hash, and device name to lafine.net); (2) automatic app update checks via Sparkle; (3) the signed threat-feed fetch used by link protection (receive-only, a fixed URL with no identifying information); (4) ClamAV virus-definition updates if you have ClamAV installed; and (5) the encrypted VPN tunnel traffic if you enable the VPN feature (WireGuard / Tailscale). None of these conflict with the "information we do not collect" commitment above. See Security Whitepaper §7 for the full list of network paths.

3. Local On-Device Data Storage

All settings (trusted network BSSIDs, security presets, UI preferences) are stored strictly within macOS encrypted local sandboxes (UserDefaults / App Sandbox) and never leave your machine.

4. Secure Privileged Helper Design

To control the macOS kernel packet filter (pf) and network sharing, RoamSwitch uses Apple's official SMAppService privileged helper protocol.

• Principle of Least Privilege: Executes only strict commands required for firewall rules and sharing toggles, never accessing user files with root permissions.
• Open Auditing: Helper operations use native OS APIs (launchd, XPC), enabling users to inspect and verify process behavior anytime.

5. Passive & Non-Destructive Auditing

All port vulnerability checks and system audits are completely passive. RoamSwitch never modifies database records, kills active processes, or disrupts existing configurations.

6. Handling of Support Inquiries

Personal information provided through contact forms (name, email, message) is used solely to respond to support inquiries and is never shared with third parties.

7. Policy Revisions

Lafine Systems Design may revise this policy to reflect new features or legal requirements. Material updates will be communicated on this website or inside the app.