Privacy Policy

Scope

This policy covers the Asyncly website, account and licensing services, macOS desktop app, and iPhone and iPad companion app. Asyncly does not sell personal information or use product data for cross-app advertising.

Data Stored On Your Devices

The desktop app stores workspace configuration, UI preferences, task and thread history, local diagnostics, provider readiness, and activation state on your Mac. The mobile app stores a limited cache of workspace and task state, drafts, and settings on the device. Mobile account credentials are stored in iOS Keychain. Source code, provider credentials, and complete local workspaces are not uploaded to Asyncly by default.

Account And Service Data

Asyncly services receive data needed to create and secure accounts, provide trials and subscriptions, issue licenses, deliver releases, connect devices, and provide support. This may include your email address and name, account and subscription status, app version, device type, hashed device identifiers, sign-in and security events, notification preferences, and Stripe customer or subscription identifiers.

Sign-In Methods

When you choose Google or Apple sign-in, Asyncly receives a provider account identifier, your email address, its verification status, and your name when the provider shares it. We use these details to create or connect your Asyncly account and authenticate you. If you choose Apple's Hide My Email, we receive and use the private relay address Apple supplies. Choosing Google sign-in does not give Asyncly access to Gmail, Google Calendar, or Google Drive.

Google and Apple process sign-in under their own privacy policies. Asyncly does not receive your Google or Apple password. If you create an Asyncly password, we store a salted password hash rather than the password. Session cookies keep you signed in; emailed codes and password reset links help you recover access.

Website Measurement

We do not use browser analytics, session recordings, heatmaps, advertising trackers, or analytics cookies on the public website. We do not create a visitor identifier, collect campaign or referral information for marketing attribution, or connect public page visits to your account. No analytics consent banner is needed for this configuration. Essential account and security storage continues to work when you use those services.

We measure public page requests using our hosting service's delivery logs. Before reporting these statistics, we combine requests into hourly totals for a fixed list of public pages. Only the page path, reporting hour, and request count are sent to PostHog (EU Cloud), without visitor identifiers, IP addresses, user agents, query strings, or referrers. These statistics count page requests, not unique visitors or individual browsing journeys. PostHog describes its processing in its privacy policy.

Raw hosting logs are separate from these aggregate statistics. They can include IP addresses, user agents, and request URLs; they expire after 30 days, and cookie logging is off. We also use delivery logs to confirm installer transfers. When you request an installer through your account, a temporary download label lets us confirm delivery; it does not track your visits to public pages. Account, sign-in, billing, and download records are handled as service data, separately from public website measurement.

Previous analytics choices no longer enable tracking. We remove the old website analytics identifiers from this browser where browser settings permit, while preserving account sessions and your saved opt-out. For questions about these statistics or hosting logs, contact support@asyncly.ai.

Desktop Installation And Product Metrics

When the desktop app launches, it registers a random installation identifier and reports operational facts such as app version, update status, platform, first and last seen time, and whether the installation is linked to an Asyncly account. Product metrics are enabled by default and include counts and performance facts such as submitted prompts, task outcomes, runtime, provider selection, token counts, and changed-file counts. Asyncly does not receive prompt text, responses, source files, file paths, attachments, or provider credentials through this metrics channel.

You can turn product metrics off in desktop Account settings. Asyncly will continue receiving the limited operational installation, version, and update information needed to deliver and support the app.

Desktop And Mobile Supervision

When you connect the mobile app to your Mac, Asyncly exchanges reduced workspace, task, thread, and visual validation state needed for the features you choose. A same-network connection travels directly between your devices. When hosted relay access is used, encrypted requests and responses pass through Asyncly's relay in transit. The relay does not persist repository contents, provider credentials, full prompts, attachments, or screenshots by default. It records limited delivery metadata such as message type, size, status, and time for reliability and abuse prevention.

Microphone, Photos, And Visual Captures

Asyncly requests microphone access only when you start a voice command or dictation. Current mobile voice audio is sent to OpenAI Realtime for transcription after you choose to start listening; Asyncly receives the resulting text needed to route your command. Camera and photo-library access are used only when you select an image to attach. Selected attachments and Mac-generated visual captures may pass through the relay in transit so they can reach your other device, but Asyncly does not retain them in the hosted platform by default.

Third-Party Services

Coding-agent requests are handled by the provider you select, such as OpenAI Codex or Anthropic Claude, under that provider's account and privacy terms. OpenAI handles Realtime voice transcription when that feature is used. Stripe processes checkout and billing data. Apple provides App Store distribution, iOS Keychain, push notification, and device platform services.

Support And Diagnostics

If you contact support, Asyncly receives the message and any logs, screenshots, or attachments you deliberately share. Do not send secrets, provider credentials, private source code, or customer data unless a secure support path has been agreed with you.

Retention And Deletion

Account and device records are kept while your account is active and for only as long as needed to provide and secure the service. Short-lived presence and relay-session records expire automatically. Operational metadata is retained only as needed for reliability, security, fraud prevention, and legal obligations. You can permanently delete your account in the mobile app or at the direct account deletion page. Deletion removes your Asyncly identity, sessions, registered devices, notification settings, and associated product-support data. Limited billing, transaction, fraud-prevention, and security records may be retained when required by law, with personal fields removed or minimized where possible.

Your Choices

You may disable microphone, camera, photo, notification, or Local Network permission in system settings. You may sign out, revoke device access by deleting the account, and choose what diagnostics or attachments to share with support. Asyncly does not track you across other companies' apps or websites.

Children

Asyncly is a professional developer tool and is not directed to children under 13.

Contact

For privacy or data questions, email support@asyncly.ai or visit the support page.