Privacy Policy

1. Scope

This policy applies to the Agents Anywhere iOS app (the “App”) and the Agents Anywhere service endpoint that you choose to connect (the “Service”). The App is designed for self-hosted use and lets you remotely control your local computer to complete coding tasks.

2. Information we process

• Account and authentication data, such as your account identifier, password verifier, and, when you choose an OAuth sign-in option, the identity data returned by that provider.
• Connected-device and push data, including a device name, an installation identifier, an Apple Push Notification service (APNs) token, and notification delivery records.
• Workspace and session content, including session titles, runtime settings, approvals, timeline items, terminal content, code, text, file paths, and other content you choose to send to or view through the Service.
• Attachments, including files, photos, or camera images you intentionally upload to a session, together with basic file metadata such as name, type, size, and upload time.
• Local app data: the App stores the selected Service URL in local preferences and keeps access credentials and an installation identifier in the iOS Keychain.

3. How information is used

We process this information to authenticate you, connect your devices, display and manage coding sessions and remote-control tasks, deliver requested files and terminal access, send notifications you enable, maintain security, and troubleshoot the Service. We do not use your information for advertising or sell personal information.

4. Storage and sharing

Session records and attachments are stored by the Service and its configured file backend. Depending on your deployment, attachments may be stored on the Service filesystem or an S3-compatible storage service selected by the workspace operator. Apple receives the information necessary to deliver APNs notifications. If you choose OAuth sign-in, the selected identity provider processes sign-in information under its own policy.

We do not include advertising, analytics, or crash-reporting SDKs in the iOS App. We share data only with providers needed to operate the Service you configure, or when required by applicable law.

5. Retention and deletion

Persistent account, device, session, timeline, approval, and attachment data is retained by the configured Service until you delete the relevant content, disable the associated runtime, or request deletion. Temporary mobile QR login records expire after 2 minutes; OAuth authorization codes expire after 5 minutes; mobile refresh tokens expire after 30 days.

6. Security

The App uses iOS Keychain for local credentials. Access to Service data is authenticated. You are responsible for protecting the server, storage backend, and connected devices that you configure for your workspace.

7. Changes and contact

We may update this policy when the App or Service changes. The current version will be published at this URL. For privacy questions or requests, contact ymx94yyds@gmail.com.