Privacy Policy
Last updated: June 22, 2026
ModelWitch is built by Lumenif OÜ ("we", "us"). This policy explains what data ModelWitch processes, why, and where it goes. It's written to describe exactly what the app does — not boilerplate.
Account sign-in
When you connect your Claude Pro account, ModelWitch uses Anthropic's own secure OAuth browser flow. Your Claude password is never seen, requested, or stored by this app. We only receive an access token and refresh token, which are encrypted and stored in your device's iOS Keychain. These tokens are used solely to call Anthropic's official usage API on your behalf, directly from your device — they are never transmitted to our servers.
Optional Anthropic Admin API key
If you choose to enable the Anthropic API cost dashboard, you provide an Admin API key. It's stored the same way as your OAuth tokens — encrypted in the iOS Keychain — and used only to query Anthropic's cost report endpoint directly from your device. We never see or store this key on our servers.
Usage data
Session, weekly, and cost figures returned by Anthropic are cached locally on your device so the app works offline and loads instantly. If you use ModelWitch on Apple Watch, this cached data syncs only between your own iPhone and your own Watch, using Apple's on-device WatchConnectivity framework — it does not pass through our servers.
Premium background sync (push notifications)
If you subscribe to Premium, your device's Apple Push Notification token and an anonymous installation identifier are sent to our backend (hosted on Amazon Web Services) so we can deliver silent "refresh now" notifications that keep your widgets and Watch complications current in the background. This token is opaque — it cannot be linked to your name, your Claude account, or your Apple ID — and your Claude OAuth tokens are never uploaded alongside it. If you cancel Premium or delete the app, this token is removed from our systems (Apple also automatically reports dead tokens to us, which we prune).
Purchases and subscriptions
All payments are processed entirely by Apple through StoreKit. We never receive your payment card details. We only receive an entitlement signal from Apple's systems indicating whether your Premium subscription is currently active.
What we don't do
ModelWitch does not include third-party analytics SDKs, advertising identifiers, or ad networks. We do not sell or share your data with third parties, and we do not use your data for advertising.
Data retention & deletion
Signing out of ModelWitch deletes your stored OAuth tokens and Admin API key from the Keychain immediately. Uninstalling the app removes all locally cached data. You can request deletion of any push token associated with your device by contacting us below.
Age requirement & children's privacy
ModelWitch is not directed at children and requires users to be at least 18 years old, consistent with Anthropic's own eligibility requirement for Claude Pro and Anthropic API accounts — since the app is unusable without one. We do not knowingly collect data from anyone under 18.
Changes to this policy
If we materially change how ModelWitch handles data, we'll update this page and adjust the "last updated" date above.
Contact
Questions about this policy or your data? Email us at support@modelwitch.com.
This policy describes ModelWitch's actual technical behavior as of the date above. It is provided by Lumenif OÜ and has not been reviewed by an attorney — if you require formal legal compliance review (e.g. for GDPR, CCPA, or other regional requirements), please have qualified counsel review this page before relying on it.