Privacy Policy

Last updated: August 4, 2026

What we collect

Account data: your email, name, and — if you sign in with Google — the basic profile Google shares (email, name). Usage data: phones you create, session durations, and API request logs (with request IDs and IP addresses) kept for operating and securing the service.

What happens on a phone

Phones are ephemeral simulated devices. Whatever you or your agent does on a phone — screenshots, streams, typed input — passes through our infrastructure to serve your session and its live view. We don't sell it, mine it, or use it to train models. When a phone closes, its device state is destroyed.

Services we rely on

Railway (API hosting), Vercel (web hosting), Scaleway (device hosts and backups), Resend (transactional email), and Google (optional sign-in). Each receives only what it needs to do its job.

Your choices

You can rotate your API key at any time, close phones early, or delete your account by emailing us — we'll remove your account data within 30 days, except minimal records we must keep for security or legal reasons.

Contact

Privacy questions: rajmeetchandok@gmail.com