RemoudePrivacy Policy
Last updated: 11 July 2026
The short version: Remoude has no accounts, no analytics, and no tracking. Your messages are end-to-end encrypted — the developer and the relay only ever see ciphertext they cannot read. In App Store terms, Remoude is Data Not Collected.
Who this covers
This policy applies to the Remoude iPhone app and the hosted relay/push service operated by the developer. Remoude is an independent companion app for Claude Code and is not affiliated with, or endorsed by, Anthropic.
What we don’t collect
- No account or sign-up, and no email or name required to use the app. There is nothing to log in to.
- No analytics, telemetry, advertising identifiers, or third-party trackers.
- No access to your files, source code, or Mac beyond the specific tool calls you choose to route to the phone.
What is transmitted, and how
When you pair a device, Remoude carries a small amount of operational data between your Mac and your iPhone so that permission requests and replies can reach you:
- Permission requests, verdicts, instructions, and turn summaries. These pass through a message relay and a push service, but every payload is sealed with ChaCha20-Poly1305 authenticated encryption using a key derived from your pairing secret via HKDF. The relay and the push service transport only ciphertext they cannot read.
- Device push token. Apple Push Notification service (APNs) requires a device token to wake your phone. Your token is itself encrypted before it leaves the device; the push service uses it only to deliver notifications to your device.
- A derived topic id. The relay routes messages using a one-way derived identifier, so it never learns your pairing secret.
The pairing secret and the encryption key derived from it never leave your Mac and your iPhone. No relay and no push service — including ours — can read a message or forge an approval.
On-device data
Conversations, remembered approval rules, and pairing information are stored on your devices. Demo mode runs entirely on-device with no network access. Remembered approval rules on the Mac live in ~/.remoude/approvals/ and can be reviewed or cleared at any time with remoude approvals list / remoude approvals clear.
If you contact us
If you email us or use the contact form on the support page, we receive the email address and message you choose to send. The form sets no cookie, runs no analytics, and loads no third-party script — the message is delivered straight to our inbox and used only to reply to you. It is not added to any mailing list or profile.
Apple Push Notification service
Notifications are delivered through Apple’s APNs, which is subject to Apple’s Privacy Policy. Apple handles delivery metadata (such as your device token and timing) but the notification content is encrypted and decrypted on-device by a notification service extension.
Self-hosting
You can run your own message relay (and, if you build the app yourself, your own push service), so that no infrastructure operated by the developer is in the path at all. The hook, the relay, and the cryptography are open source and auditable. See the self-hosting guide.
Children
Remoude is a developer tool and is not directed at children under 13.
Changes
If this policy changes, the “Last updated” date above will change with it. Material changes will be noted in the app’s release notes.
Contact
Questions about privacy? Email info@remoude.com or open an issue on GitHub.