The check-in loop
A switch is armed as long as you keep checking in. Each check-in is a deliberate action — you confirm it with a PIN (or your device biometrics) so a check-in is never an accidental tap. Checking in resets the deadline to the full interval. You pick the rhythm with a safety preset, or set your own:The grace window
If a deadline passes, the switch does not fire immediately. It enters a grace window and starts warning you — across push, email, and (on Pro) SMS. Every warning has a one-tap “I’m here” that instantly re-arms the switch. Only when the grace window fully elapses — after all the warnings — does the switch fire.There is a hard safety floor: a switch can never fire less than 48 hours after its
deadline, and it must always warn you on at least two channels first. No custom setting can
lower that.
Actions
A switch fires one or more actions, delivered to the recipients you chose:Message
A text message or farewell letter. Send it end-to-end encrypted, or — if it’s low-stakes —
as a normal readable email. Your choice, clearly labelled.
Encrypted file or secret
Release a file, a set of credentials, or instructions. Always zero-knowledge — encrypted on
your device, opened only by your recipient with the passphrase you shared out-of-band.
Private page
A hosted page that opens for your chosen recipients via a private link. Same encryption
options as a message.