What we keep, and what we don’t.

Who this covers

This applies to the public site, the web console, and the iOS and Android apps. If you create an account, the same record is used on every surface.

What we collect

• Account: email, sign-in provider, and a display name you can edit.
• Devices: a push token, platform, and a name so we can reach the phone you picked.
• Agent keys: a hash of the key and which phone it is pinned to. The raw key is shown once.
• Handoffs: label, optional message, fire time, delivery mode, and delivery status.
• Usage: how many agent events you have used in the current billing period.
• Billing, if you pay: Stripe customer and subscription ids. We do not store card numbers.

We do not sell this. We do not use it to train models. We do not put a hidden inbox on these pages — use Email us if you need an operator.

Where it lives

The API and database run on our hosts (Cloudflare Workers, AWS, and Supabase). Push goes through Apple or Google so the phone can wake. Payment, if you use it, goes through Stripe.

How long we keep it

Account data stays until you delete the account. Handoff history stays with the account. A revoked agent key stops working immediately; the hash may remain until the account is removed.

Deleting your account

Settings → Delete account on the web console or in the phone apps. That removes the auth user and, with it, phones, keys, alarms, and usage. Sign-out only clears the session on that device.

Contact

Questions about this page: Email us.