Privacy

Last updated: [DATE]. Onetty is operated by [COMPANY NAME] ("we").

The short version

• Your coding sessions, terminals and files stay on your servers. They travel end to end encrypted between your devices and your servers; our hub forwards bytes it can't read.
• We keep the minimum to connect you: your team's member list (names, Google emails, device public keys, roles) and your servers' names and public keys.
• No ads, no tracking, no selling data, no analytics in the apps.

What we store

• Account. When you sign in with Google we receive your Google account ID, email, name and whether the email is verified. We use them to tie your account to your device when you create a team or accept an invitation.
• Team. Your team's name and its member list, signed by your admins: each person's name, email, role, which servers they can reach, and their devices' public keys. Pending invitations (email, role, servers, expiry).
• Servers. Each server's name and public keys, when it joined, and whether it's connected.
• Connection logs. Our hub logs when servers connect and disconnect, when a team is created and when an invitation is accepted (with the email). We keep these logs for [RETENTION, e.g. 30 days].

What we can't see

Session content, prompts, agent replies, terminal input and output, file names and file contents, and approval decisions. They're encrypted on your device and on your server with keys we never have (Noise protocol). The hub only routes encrypted traffic between them.

What stays on your devices and servers

• Your devices keep their private keys (in the iOS or macOS Keychain, or in the browser), your paired servers and your settings.
• Your servers keep your sessions, an audit log of who did what (never content), Face ID public keys and notification subscriptions. You control them.
• Notifications are encrypted and sent by your own servers through Apple's push service; we're not involved.

Service providers

Google (sign-in), Google Cloud (hub and downloads), Cloudflare (this website), GitHub (building the apps) and Apple (push notifications, app distribution). They process data only to provide those services.

Deleting your data

Admins can remove people and servers from the team in the app at any time; removed devices lose access immediately. To delete your team or your account entirely, write to [SUPPORT EMAIL] and we'll delete it within 30 days. Data on your own servers is yours to delete (see Uninstall).

Children

Onetty is a developer tool and isn't directed to children under 13.

Changes and contact

If this policy changes we'll update the date above. Questions: [SUPPORT EMAIL].