Your data goes to your desktop, not to us.

This policy applies to Redac Remote, our iPhone and iPad app on the App Store (it shows as “Redac” on your Home Screen). Redac Remote is a remote for the Redac desktop app: it shows your desktop’s chats, apps, activity, and live browser view. It does not cover Redac Marker, which has its own policy. The Redac app and service are made by Your AI LLC (“we”).

• You sign in with the email address of your Redac account. The app does not make accounts; the Redac desktop app does.
• Your chats, files, and photos go from your phone to your own paired desktop, end-to-end encrypted. Our servers forward the encrypted data and cannot read it. We do not store it.
• To answer a chat, your desktop sends it to the third-party AI service that you connected on that desktop (for example OpenAI or Anthropic). The app asks for your permission first. See AI services.
• We keep only what we need to connect your phone to your desktop: account and device records, described below.
• The app has no analytics, no advertising, no tracking, and no crash-reporting SDKs. We do not sell your data, and we do not share it with anyone other than the AI service that you allow.
• The demo mode uses sample data on your device. It does not connect to anything, and nothing goes to an AI service.

Your email address. When you sign in, the app sends your email address to our sign-in provider, Supabase, which emails you a sign-in link. The email address is the one on your Redac account. The app does not keep it after the link is sent.

Account and device records.Our Access API keeps a record for each signed-in phone and each desktop: a random device ID, your account ID, the device role (phone or desktop), a hash of the device’s credential, its status, and dates. For each pairing, it keeps a fingerprint of the phone’s public key and dates. It does not keep your phone’s name, model, location, contacts, or IP address. Short-lived records (pairing invitations and rate-limit counters) are deleted automatically within about one day.

After you pair, the app talks to your desktop over a secure channel that is end-to-end encrypted (the Noise protocol). Our relay server forwards the encrypted frames between the two devices. It cannot read them, and it does not log or store them. This channel carries:

• Your chat messages and the desktop’s answers.
• Photos and files that you choose to add to a chat, including photos that you take with the camera.
• The live viewof your desktop’s browser. This video uses WebRTC with standard encryption (DTLS-SRTP). When a direct connection is not possible, Cloudflare’s relay (TURN) forwards the encrypted packets.

Redac answers your chats with an AI service. The AI service is a third party. It is the one that you connected in Redac on your desktop, with your own account or API key. Your AI LLC does not run an AI service and does not receive your chats.

What is sent. When you send a chat from the app, your paired desktop sends this data to that AI service:

• The messages that you write in Chat, and the earlier messages of that chat.
• The photos and files that you add to a chat.
• Your answers to requests in a chat.
• Data that the agent reads on your desktop to do the task that you asked for (for example, a web page or a file).

Who receives it. Only the AI service that you connected on your desktop. Redac can use these services:

• OpenAI (ChatGPT, Codex, and the OpenAI API): privacy policy
• Anthropic (Claude and the Anthropic API): privacy policy
• Google (Gemini API): privacy policy
• xAI (Grok): privacy policy
• Meta (Muse): privacy policy
• GitHub (Copilot): privacy statement
• Moonshot AI (Kimi)
• OpenRouter: privacy policy
• Radius

How it is used. The AI service uses the data only to make the answer to your chat, under its own terms and privacy policy for your account. We do not use your chats for advertising, analytics, or training, and we do not sell them. We list only AI services whose terms give your data protection that is the same as or equal to this policy.

Your permission. At first launch, the app shows what is sent and who receives it, and asks you to allow it. If you do not allow it, the app does not send chat messages, photos, or files, and you can still use apps, schedules, alerts, and the live view. To stop after you allow it, sign out and delete the app. You can also disconnect the AI service in Redac on your desktop.

• Camera: to scan your desktop’s pairing code, and to take a photo for a chat.
• Local Network: to connect to your paired desktop for the live view.

Each permission is optional. You can change it at any time in iOS Settings.

The app keeps its sign-in session and pairing keys in the iOS Keychain. When the app goes to the background, it stops its connections and destroys the session keys.

• Supabase: sign-in and the sign-in email.
• Cloudflare: hosts the Access API, the encrypted relay, and the live-view TURN relay.

Sign out in Settings removes the session from this device. Remove this desktop ends the pairing. To delete your Redac account and its device records, email privacy@redac.ai from the account’s email address. We delete them within 30 days.

Redac Remote is not directed to children under 13, and we do not knowingly collect personal information from them.

If we change how Redac Remote handles data, we will update this page and the Last updated date above. We will describe material changes in the App Store release notes for that version.

Questions about this policy or about your data: privacy@redac.ai.