The short version
Account profiles, usage history, settings, and credential snapshots are kept on your Mac. The app contacts provider services only to power the features you use, plus GitHub for signed update checks and downloads. It does not send product analytics or telemetry to Limit Lifeboat’s developer.
Data stored locally
Limit Lifeboat stores account profiles and usage history under ~/Library/Application Support/LimitLifeboat. App settings use the standard macOS preferences domain com.limitlifeboat.app.
App-managed credential snapshots are encrypted by macOS Keychain under the service com.limitlifeboat.app.credentials. They are stored so that they are available only after the device is first unlocked, only on this device: they are not synced to iCloud and are excluded from device backups. The app may read Claude Code’s provider-owned Keychain item when necessary, but it does not create or take ownership of that item.
When you switch an account, the app temporarily prepares rollback material under ~/Library/Application Support/LimitLifeboat/Backups. While those files exist they are protected by filesystem permissions rather than Keychain encryption, readable only by your user account. The app removes them after a verified switch or successful rollback. If a safe rollback is not possible, the recovery directory stays on disk and the app tells you, so you can inspect and remove it yourself. If another process changes the live credentials during recovery, Limit Lifeboat keeps a protected recovery copy rather than overwriting the external change.
When the app uses the network
Network access is limited to services needed for the selected feature:
- Anthropic for Claude account identity, token refresh, and usage.
- OpenAI through the locally installed Codex app server for isolated account verification, token refresh, and current usage readings.
- GitHub for the signed daily update feed, update downloads, and release links. Automatic checks can be disabled in Settings; installing always requires confirmation.
- Claude or ChatGPT web dashboards only when you explicitly open an embedded dashboard.
Codex usage checks run in a private temporary Codex home populated from the selected account’s encrypted snapshot; the temporary files are removed after the request. Recent local Codex session data remains a fallback for the active account. An embedded dashboard uses an isolated web data store inside the app and remains separate from your normal browser session.
This website
This static website has no analytics, advertising, tracking pixels, account system, cookies set by us, or contact forms. It does not load external fonts or third-party scripts.
The site is hosted by Vercel. Like ordinary web hosts, Vercel may process operational request data such as an IP address, user agent, requested URL, timestamp, and error details to deliver and protect the service. Those hosting logs are distinct from product analytics and are governed by Vercel’s own terms and privacy practices.
Following a link to GitHub, Homebrew, Anthropic, OpenAI, or another external service takes you to that service, where its privacy policy applies.
Your choices and control
Notifications, Terminal Automation, and launch at login are optional macOS permissions or settings. You can change them in Limit Lifeboat or System Settings. Browser, desktop-app, and CLI sessions remain separate; switching affects only the selected CLI.
You can remove profiles in the app and uninstall Limit Lifeboat at any time. Review the project’s source code or report a concern through GitHub. For a suspected vulnerability, use private vulnerability reporting instead of a public issue.