Agents Cloud privacy policy
Effective 8 October 2026. Operator: Darin Dimitrov Dimitrov, 51 Maestro Kanev St, Sofia, Bulgaria. Contact: d@spacefarm.digital.
Agents Cloud is the relay at relay.agentsapp.net that lets Agents on your iPhone and Apple Watch reach Agents on your Mac from anywhere and receive push alerts. This policy covers the relay and the Agents apps. It does not cover the AI providers you run on your Mac (Claude Code, Codex); the conversations they hold stay under their own terms, on your Mac and on your provider account.
Cloud sessions. With Show cloud sessions on my devices on (the default), Agents on your Mac also reads the sessions you run in your providers' clouds, Claude Code on the web and Codex Cloud, directly from Anthropic and OpenAI, using the sign-ins Claude Code and Codex already keep on your Mac. That traffic runs between your Mac and your provider, never through us. A cloud session then reaches your devices exactly like a session on your Mac: encrypted through the relay, with the same readable preview fields. Replies and new tasks you start in the cloud from a device go from your Mac to that provider. Agents never copies, stores, or sends those sign-ins anywhere else.
Starting cloud tasks without your Mac. If you sign in with ChatGPT in Agents on your iPhone (Settings → Cloud Accounts), your iPhone keeps its own ChatGPT sign-in in its Keychain, on that iPhone only, and uses it to list your Codex environments, start Codex cloud tasks and follow them, talking to OpenAI (auth.openai.com, chatgpt.com) directly and never through us. Your Apple Watch asks your iPhone to do this and never holds the sign-in. Signing out revokes it with OpenAI when possible and removes it from the iPhone either way; disconnecting your Mac leaves it. Agents never signs in to Claude: while your Mac cannot start a Claude cloud task, Agents opens Claude's own app or claude.ai with your prompt, repository and branch in the link, and you send it there. If that link opens in a browser, your prompt is part of the address and may stay in the browser's history. Turn the setting off in Agents on your Mac (Settings → Providers) to stop all of this.
Your account. Agents Cloud accounts are created with Sign in with Apple, on your Mac or your iPhone. We never ask for your name, phone number, or payment details, and there is no password. What Apple gives us is the identifier Apple assigns you for our apps and, if you share it, your email address (a Hide My Email address if you choose that); we also keep the sign-in token Apple returns, only so that we can revoke the authorization when your account is deleted. Pairing your devices is still a QR code shown on your Mac.
Two ways to your Mac
Agents uses both by itself, depending on where your device is.
- On your Mac's network nothing is sent to us. The relay runs inside Agents on your Mac and your devices talk to it over your Wi‑Fi only.
- Agents Cloud routes traffic through our relay when your device is anywhere else. The rest of this policy describes Agents Cloud. Your Mac registers with it when you sign in, and your iPhone signs in to the same account when it pairs with that Mac. With Agents+ on the account, your Mac gives Agents Cloud the same end-to-end encrypted updates it gives your own network. Without Agents+, Agents Cloud holds your account, your Mac's registration and its list of paired devices (their names, kinds and hashed tokens), and your Mac sends it nothing about your sessions.
What the relay stores
Encrypted, unreadable by us. Your task catalogue (the snapshot), the commands you send from a device and their results, and conversation history requests and pages are AES‑256‑GCM envelopes. The key is generated on your Mac and travels to your iPhone inside the pairing code, and from the iPhone to your Watch; it never reaches the relay. We store the ciphertext, an envelope ID, and routing metadata: which Mac, which device, which task ID, when.
Readable by us, and by Apple for delivery.
- Task previews: a title (up to 200 characters), a summary (up to 600 characters), the status (working, needs input, completed, failed, canceled, idle), the provider name, an avatar seed, timestamps, and the IDs of pending requests. The title is the session's name, which is often the start of your first prompt, and the summary is a short status line or the first 180 characters of the agent's latest reply. Either can quote whatever you or the agent wrote there, such as a command, a file path or a line of code. Previews are never built from permission requests or questions, tool output, diffs, or files.
- Push tokens: the Apple Push Notification device tokens and Live Activity tokens your iPhone and Watch register, with the topic, the environment, your Private previews setting, and whether a task is pinned.
- Identifiers: a random ID for your Mac and for each device, and SHA‑256 hashes of the bearer tokens they use; the tokens themselves are never stored. Pairing codes are stored hashed and expire after five minutes.
- Account: the identifier Apple assigns you for our apps, the email address Apple shares (if any), when you last signed in, and the Sign in with Apple refresh token kept for revocation. Your Mac record points at your account; an iPhone's sign-in is a hashed bearer token, like a device's.
- Labels: a label for your Mac (by default "Mac"; you can change it in Agents on your Mac) and the device kind ("iPhone", "Apple Watch").
- Timing: when a record was created, when your Mac last connected, when a preview last changed.
Pictures of your Mac's screen, passed on and never kept. With Let my devices see this Mac's screen on in Agents on your Mac (off unless you turn it on), your iPhone can show the Claude or Codex window of a task while you look at it. Each picture is sealed on your Mac like the envelopes above, so we cannot see it. The relay holds it in memory until your iPhone collects it, for ten seconds at most, and never writes it to its database, logs, backups or notifications. The relay sees only the routing details it sees for every envelope, which device asked and for which task ID, and passes the device's ID on so your Mac can show who is looking. Your iPhone can also ask for live video of that window. The video goes from your Mac to your iPhone encrypted end to end, with keys the two agree inside sealed envelopes. When your networks cannot reach each other directly, it passes through our TURN server, which forwards encrypted packets it cannot read and keeps none of them. While the video runs, the TURN server sees the network addresses of both ends, as the relay does for every connection. Its logs record only failed sign-ins and refused destinations, never the video.
Never sent to the relay. Provider credentials or API keys, the encryption key, the folders on your Mac, conversation text in the clear beyond the preview title and summary above, your Apple ID password or the Apple ID itself (Apple gives us an app-specific identifier and, at your choice, an email address), or anything about other apps.
Private previews
Turn on Private previews in Agents on iPhone (Settings). Notifications and Live Activities then carry only a generic title ("Agents" or "Agent task"), the status, and the task's avatar; no title or summary is sent to Apple. Your Mac still sends the preview fields listed above to the relay, where they are kept for the period below. If nothing readable may leave your Mac, use Local network mode.
Who else handles your data
- Hetzner Online GmbH (Gunzenhausen, Germany) hosts the relay, its database, and backups in EU data centres. Hetzner operates the machines and has no application‑level access.
- Apple Push Notification service receives your push tokens and, unless Private previews is on, the preview title and summary, together with status, task and request IDs, and a deep link, to deliver notifications and Live Activity updates. Apple's handling is described in Apple's privacy policy.
- Hover provides DNS for
agentsapp.netonly and does not proxy or see relay traffic.
No analytics, advertising, or tracking SDKs run in the apps or on the relay. We do not sell or share your data.
IP addresses and logs
Your IP address is used in memory to limit how often registration, pairing, and disconnect requests are accepted. It is not written to logs or to the database, and the proxy in front of the relay keeps no access logs. Relay logs contain event names, Mac IDs, and error classes, never tokens, request bodies, query strings, previews, or IP addresses. Logs are deleted after 14 days.
How long we keep data
| Data | Kept |
|---|---|
| Pairing code | 5 minutes, or until the next code is shown |
| Conversation history requests and pages | 120 seconds |
| Pictures of your Mac's screen, and the requests for them | 10 seconds at most, in memory only |
| Live video of your Mac's screen | Not kept; the TURN server passes it on as it is sent |
| Queued push notifications | 15 minutes |
| Commands and results | 1 day |
| Task previews | 7 days after the task last changed |
| Encrypted snapshot | While your Mac is paired; deleted 30 days after your Mac last connected |
| Push tokens | Until the device disconnects, Apple reports the token invalid, or the Mac is deleted. A Live Activity's token goes a day after the activity last registered, or sooner once a device has more than 16 |
| Disconnected devices | 30 days (a hash is kept so a repeated disconnect stays harmless) |
| Your Mac and everything under it | 7 days after registration if no device is ever paired; 180 days after your Mac last connected; immediately when you delete it |
| Your account | While a Mac or an iPhone sign-in refers to it; deleted with your last Mac (or last iPhone sign-out), a day after that when the Mac was removed for inactivity, and immediately when you delete the account |
| Server logs | 14 days |
| Database backups | 30 days, on the same schedule as the records they contain |
Deleting your data
- From your iPhone. Settings → Disconnect. The phone sends
DELETE /v1/device, which revokes the iPhone and its Watch, removes their push tokens and queued notifications, drops their pending commands, and clears the content stored on the devices. If you are offline, the request is queued and retried. - From your Mac. Devices → Delete from Agents Cloud. The Mac sends
DELETE /v1/host, which deletes the Mac record and everything under it: devices, snapshot, commands, previews, push tokens, queued notifications, history requests. Your iPhone then shows "Pairing needed". When that was the last Mac on your account and no iPhone is signed in, the account is deleted too. - From your iPhone. Settings → Cloud Accounts → Agents Cloud → Delete Account. The iPhone sends
DELETE /v1/account, which deletes the account and every Mac on it as above. Sign Out there ends only that iPhone's sign-in. - Sign in with Apple. Whenever your account is deleted we ask Apple to revoke the sign-in, so Agents disappears from the apps using your Apple ID. If Apple cannot be reached, you can remove it yourself under Settings → Apple ID → Sign in with Apple.
- By email. Write to d@spacefarm.digital from the address on your account, or with the Mac ID shown in Agents, so we can find your records.
Data already handed to Apple for a push cannot be recalled.
Data on your devices
Credentials live in the Keychain. The iPhone and Watch keep an encrypted copy of the snapshot, your drafts, and downloaded conversation history in the app's own container, protected by the device passcode; widgets receive only a redacted summary through the app group. The Mac keeps its credentials in the Keychain and an encrypted command journal and history index in Application Support. Disconnecting clears the device copies. Hands-free reads your AirPods' head movement on the iPhone only while it listens for a nod or a shake; the movement is never stored or sent anywhere.
Your rights
We process data to provide the service you ask for (GDPR Art. 6(1)(b)) and, for rate limiting and abuse prevention, in our legitimate interest (Art. 6(1)(f)). Data stays in the EU except for pushes, which Apple delivers under its own transfer safeguards. You can access, correct, export, or erase your data; erasure is self‑service in the apps as described above, and for anything else contact d@spacefarm.digital. You may complain to your data protection authority. Agents is not intended for children under 13.
Changes
Changes are posted here with a new effective date. Material changes are also shown in the apps.