Privacy Policy

Effective July 12, 2026 · Eudaimonia Software

What the relay stores

The relay is a small forwarding service (hosted on Cloudflare) whose only job is to move sealed messages between your computer and your devices, and to trigger push notifications. Per pairing, it stores exactly two things:

• A pairing identifier — a random UUID that means nothing outside your own devices.
• An Apple push token — an opaque device address issued by Apple, used only to deliver your notifications. It cannot be used to identify you.

While a prompt is waiting for your answer, its encrypted form is held briefly in memory so a freshly opened app can catch up; it is discarded the moment the prompt resolves or expires.

What the relay can never see

Message contents — commands, file paths, directory names, questions, your answers, machine names — are encrypted on your computer with keys created during pairing and held only on your devices (in the iOS Keychain, hardware-backed). The pairing QR code travels over your screen and your camera, never over the network, so the relay has no opportunity to intercept the keys. What the relay forwards is ciphertext it cannot open; push notifications carry that same ciphertext, and your device decrypts it locally before anything appears on your lock screen.

What stays on your devices

• Encryption keys — iOS Keychain, never transmitted.
• Your history and activity lists — stored only on the phone, capped to the most recent entries, deleted with the app.
• On your computer: pairing configuration in your home directory, readable only by your user account.

What we don't do

• No accounts, sign-ins, or email collection.
• No analytics, telemetry, tracking, or advertising — in the app or on this site.
• No selling, sharing, or monetizing of data of any kind. There is nothing to sell.

Third parties

Two infrastructure providers touch your (encrypted) data in transit: Cloudflare, which hosts the relay, and Apple, whose push-notification service delivers messages to your devices. Both see ciphertext and routing metadata only. If you prefer zero third parties, the relay is open source and self-hostable — the app accepts any relay URL at pairing time.

Deleting your data

Unpair a desktop (or delete the app) and the keys are destroyed, which permanently orphans anything the relay holds — ciphertext without keys is noise. Re-pairing replaces the relay's stored identifier and token. To remove the desktop side, use the plugin's hook-removal option; it cleans its entries out of your Claude Code settings.

Changes

If this policy changes materially, the effective date above changes with it, and the app's release notes will say so. The policy's history is public in the project repository.

Contact

Questions about privacy: [email protected].