Privacy

Privacy: what each part sees and keeps.

This describes the actual data flows of the DevOS beta. Contact: support@fightingsmartcyber.com.

In short: your code, files, prompts and agent conversations stay on your devices and computers. DevOS has no accounts, no ads and no tracking in the apps. The relay sees only what is needed to connect your devices, plus feedback and crash reports you choose to send.

What stays on your devices

Your computers: agent conversations, projects, settings, the list of paired phones, and the sign-ins and API keys for your agent accounts. On a Mac, API keys are in the Keychain; on Linux, in a file only your user can read.
Your phone: the keys that reach your computers (system keychain), recent conversation text, preferences, and crash reports waiting to be sent.
Your browser: the browser client’s keys and your computers’ names, in the browser’s storage. Unpairing deletes them.

The relay

The relay runs on Cloudflare and connects your devices when they are not on the same network.

Sees and passes along, cannot read: conversations, terminals, files, screen sharing and account keys, which are end-to-end encrypted.
Before E2E is set up: a phone’s app requests go through the relay protected by HTTPS only. The relay can technically read them and does not log or store their content.
Stores: each computer’s random ID and name; a random account ID grouping your devices; hashed device keys; which phones are paired with which computers and whether each is owner, member or guest; a message of at most 5 minutes while pairing a browser; a 30-day note that a removed phone may no longer connect. No email address, name or contacts.
IP addresses: used in memory for abuse limits, not stored or logged by the relay. Cloudflare, as host, processes them.
Metadata: the relay sees routing, pairing and push metadata, and when connections happen.

Notifications

Through Apple’s push service. Notification text is encrypted with a key shared only between your iPhone and that computer. The relay and Apple can see the push token, the time, the kind (a session needs you, a session is done, or a join request), an identifier that groups notifications by session, and the size of the sealed text. Live Activities carry only counts and a random computer ID and are not encrypted this way.

Feedback and crash reports (optional)

Asked on first launch. Sent only after you continue, and feedback only when you tap Send, showing you everything first. Turning sharing off deletes reports still waiting on your devices.

This website

This website sets no cookies, loads nothing from third parties and runs no analytics. Your colour-theme choice is stored in your browser’s local storage and never sent anywhere. If analytics are ever added, this section changes first.

Not yet described

The planned team plane and any hosted service will hold different data. Retention, subprocessors, deletion and administrator access for those will be written before they exist. Until then, nothing on this page covers them.

Providers and deletion

Providers: Cloudflare hosts the relay and this website; Apple provides push notifications, TestFlight and the App Store. Beta feedback and crash reports you choose to send are filed in Linear. A full subprocessor list is not yet published.
Removing a phone from a computer deletes its pairing on the relay; the phone deletes its keys for that computer.
Asking us to delete a computer’s relay record or your feedback: support@fightingsmartcyber.com.

No system is perfectly secure. See the threat model.