OpenDucktor mobile privacy policy

Your computer and your providers

The mobile app connects directly to the OpenDucktor computer that you add. We do not provide a hosted project service. You do not need an OpenDucktor cloud account.

The app sends your instructions, task changes, permission responses, terminal input, and selected attachments to that computer. Your computer keeps the project files, tasks, and agent sessions. Your coding agent can send prompts, code, and attachments to the model provider that you set up. That provider's terms and privacy policy apply to its service.

Data on your phone or tablet

The app saves the host addresses and names that you add. It also saves drafts, the selected workspace, and interface settings on your device. Pairing credentials use the operating system's secure storage. Files opened from a host can be stored temporarily on your device.

The app uses the camera to scan a host pairing QR code. The app does not record audio. When you select a photo or file to attach, the app sends that item to the connected computer. It does not upload your photo library. Saving or sharing an item uses the operating system's controls and the destination that you choose.

Your operating system may include app files in device backups, according to its backup settings.

Android QR scanner diagnostics

The Android QR scanner uses Google ML Kit. Google's SDK collects device and app information, an installation identifier, performance measurements, scanner events, API settings, input and output sizes, and error codes for diagnostics and usage analytics. Google states that this data uses HTTPS in transit. These diagnostics are separate from the projects and messages sent to your OpenDucktor computer.

Read Google's ML Kit data disclosure and Google's privacy policy for details about Google's handling of this data. OpenDucktor does not include ads or an advertising SDK.

Connections, retention, and deletion

Use HTTPS or an encrypted private network to connect to a remote computer. The app also supports HTTP for hosts on a protected network. HTTP alone does not encrypt your traffic. A pairing code authorizes access; it does not encrypt the connection.

Removing a saved host clears its pairing credentials and its local drafts and settings. This does not delete the projects or tasks on that computer. The computer's operator controls those records and can revoke a paired device's access. Model providers and Google control the retention of data that their services receive under their own policies.

For questions or requests about data that the publisher holds, email contact@openducktor.dev. For records on a host or in a model provider's service, use that host's or provider's data controls.

Audience and changes

OpenDucktor mobile is intended for adults aged 18 and over. We do not market it to children.

We will update this page when the app's data practices change. The date above identifies the current policy.