Privacy Policy
In short: Rudder has no accounts, no tracking and no third-party SDKs or analytics. What you do in a session travels only between your iPhone and your own computer. Our servers only pass notifications and (if you use it) relay traffic along, and they see that traffic encrypted.
1. Who we are
Rudder (the iPhone app, the rudder program for your computer, and the services below) is provided by YU ZHU. We are the controller of the personal data described here. Contact: support@rudderagents.com.
2. What stays on your devices
- Sessions, files and commands. The coding agents run on your computer with your own accounts. Their output reaches your phone directly over your local network or your own Tailscale network. We never receive it. The agents' providers (for example Anthropic or OpenAI) process what you send them under their own privacy policies.
- Pairing. Pairing keys and certificate fingerprints are kept in your iPhone's Keychain and on your computer.
- Camera, microphone and speech recognition. The camera is used only to scan the pairing QR code. Dictation uses Apple's speech recognition; depending on your device and language, Apple may process the audio on its servers under Apple's privacy policy. We never receive the audio or the image.
- Settings and caches (theme, language, recent messages for fast loading) stay on your iPhone.
3. What our services process
| Data | Why | How long |
|---|---|---|
| Push token (the address Apple gives your iPhone for notifications) | When you allow notifications, the app sends it once to our push gateway, which seals it into an encrypted ticket and returns it. The ticket is stored only on your own computer. When your computer sends a notification, the gateway opens the ticket for that one request and hands the notification to Apple. | Used during the request only. The gateway does not store or log push tokens. |
| Notification content | Encrypted end to end on your computer and decrypted on your iPhone. The gateway cannot read it. | Not stored. |
| IP address and request metadata (time, size, user agent) | Processed by our hosting provider Cloudflare to deliver requests, rate-limit abuse and keep the service secure. | Short-lived operational logs under Cloudflare's retention; we do not combine them with anything else. |
| Relay traffic (only if you turn on Rudder relay, a paid feature) | Forwards the end-to-end encrypted connection between your phone and your computer when they cannot reach each other directly. The relay sees only ciphertext and connection metadata: IP addresses, connection times, data volume and a random connection id. | Content is never stored. Metadata only for the life of the connection plus short operational logs. |
| Purchases | Payment is handled entirely by Apple; we never see your payment details or Apple ID. For relay access, the app sends an Apple-signed transaction to our token service, which checks it with Apple. | Transaction id and expiry date, kept while the purchase is active and up to 12 months after it ends (refunds, disputes). |
| Feedback (only if you send it) | The text you write, the diagnostics you choose to attach (app version, rudder version, connection type) and an optional reply email, so we can answer you. | Until resolved, at most 12 months. |
We do not sell personal data, share it for advertising, track you across apps or websites, or build profiles. The app contains no third-party SDKs.
4. Legal bases (EEA, UK)
- Contract: delivering notifications, the relay and purchases you asked for.
- Legitimate interests: security, abuse prevention and keeping the service running (IP addresses, rate limits).
- Consent: notifications and other system permissions you grant on your iPhone; in mainland China, the consent you give when you first open the app. You can withdraw it at any time in iOS Settings or by deleting the app.
5. Service providers
- Cloudflare, Inc. hosts our push gateway, token service, relay and this website (privacy policy; processing under Cloudflare's Data Processing Addendum with the EU Standard Contractual Clauses).
- Apple Inc. delivers notifications (Apple Push Notification service) and processes App Store purchases (privacy policy).
6. Where data is processed
Our services run on Cloudflare's global network, outside mainland China. If you use Rudder in mainland China, your IP address, push token and (if you use them) purchase records and relay metadata are processed outside mainland China. Transfers from the EEA and UK rely on the Standard Contractual Clauses.
7. Your rights
Depending on where you live, you may ask to access, correct, delete, restrict or port your personal data, object to processing, or withdraw consent. Because we keep almost nothing, in practice this covers feedback you sent and purchase records. Email support@rudderagents.com; we answer within 15 working days. You may also complain to your data protection authority.
California (CCPA/CPRA): we do not sell or share personal information and do not use sensitive personal information. You have the right to know, delete and correct, and we will not treat you differently for using these rights.
Mainland China (PIPL): you have the rights to know, decide, access, copy, correct, delete and withdraw consent. Write to the address above.
8. Security
Connections to your computer use TLS with a pinned certificate; notifications and relay traffic are encrypted end to end with keys that never leave your devices. Encryption uses only Apple's system frameworks.
9. Children
Rudder is a developer tool and is not directed to children under 13 (under 14 in mainland China). We do not knowingly collect their data.
10. Changes
We will post changes here with a new effective date, and tell you in the app before material changes apply.
11. Contact
YU ZHU · support@rudderagents.com