Privacy Policy

To operate your account we store your email address, a salted hash of your password (never the password itself), and the devices signed in to it. If you sign in with Google or Apple we store the identity those providers assert, not your credentials with them.

Chat content between your devices travels through our relay end-to-end encrypted; the relay only routes ciphertext and cannot read it. Your code stays on your machines.

If you allow website analytics, we use PostHog Cloud in the EU to measure public-page visits, referring websites, campaign labels, browser and device information, approximate location derived from your IP address, and download-link clicks. PostHog stores a random browser identifier in local storage to distinguish visitors and sessions. We do not attach your account email or account identity to these events.

The same optional choice enables session replay of public pages: their visible layout, clicks, scrolling, and navigation. Form inputs are masked before capture. We exclude login, account, billing and device-link pages, as well as the embedded product demo. Console logs, network request bodies and headers, and canvas recordings are disabled. Page URL queries and fragments are removed from analytics and replay location metadata; only selected campaign labels are collected separately.

Analytics and replay remain off until you choose “Allow analytics & replay”. Choose “Decline” to keep them off. Use “Analytics settings” in the footer to change or withdraw your choice; withdrawal stops further collection and clears PostHog's browser storage, but does not delete data already sent. Your preference is saved locally. See PostHog's privacy policy for information about the provider.

We don't sell your data or use third-party advertising trackers. A complete Privacy Policy will be published here before general availability.