PocketAgent 由 Hainan Xinzhihai Technology Co., Ltd.（以下称“我们”）开发和运营。PocketAgent 让你用 iPhone 给自己 Mac 上的编程助手（例如 Claude Code、Codex）派发任务、批准操作、查看改动，并查看或控制 Mac 屏幕。
| 数据 | 用途 | 保存在哪里 |
|---|---|---|
| 邮箱地址、可选昵称 | 创建和登录账号，让同一账号下的 iPhone 和 Mac 互相找到 | 我们的服务器 |
| 密码 | 登录验证。服务器只保存经过 Argon2id 加盐处理的哈希值，不保存明文 | 我们的服务器（仅哈希） |
| 设备信息：设备名称、型号、系统与 App 版本、设备公钥、最近在线时间 | 显示你的设备列表、建立配对、端到端加密 | 我们的服务器 |
| 推送令牌 | Mac 需要你批准操作或任务完成时，给你的 iPhone 发通知 | 我们的服务器 |
| 登录凭证（访问令牌、刷新令牌） | 保持登录状态。服务器只保存刷新令牌的哈希值 | 你的设备钥匙串；服务器保存哈希 |
| 服务器运行日志：IP 地址、请求时间、请求结果 | 防止滥用（例如限制暴力登录）和排查故障 | 我们的服务器 |
以下内容在你的 iPhone 和 Mac 之间端到端加密（X25519 密钥协商 + ChaCha20-Poly1305），密钥只存在你的设备上，我们的服务器无法读取：
当接收方设备暂时离线时，服务器会暂存这些密文，送达后立即删除，最长保留 7 天。屏幕画面和网页预览数据从不暂存。推送通知的正文同样是密文，由你的 iPhone 在本地解密后显示。
服务器能看到的只有转发所需的信息：哪台设备发给哪台设备、消息类型、大小和时间。
所有网络传输都在端到端加密之上进行；密码使用 Argon2id 哈希；登录令牌会定期轮换，检测到令牌被盗用时会自动吊销整个登录会话。配对时两台设备会显示相同的 4 位校验码，用来确认没有中间人。
PocketAgent 面向开发者，不面向 13 岁以下的儿童，我们不会有意收集儿童的个人信息。
如果本政策有实质变更，我们会更新本页的生效日期，并在 App 内提示。
对隐私有任何问题，请通过本页同站点的支持页面联系我们。
Your code, conversations, files and screen images travel end-to-end encrypted between your own devices; our server only relays ciphertext it cannot read. We keep only the data needed for accounts and pairing. No ads, no third-party analytics or tracking, and we never sell data.
Tasks, agent replies, approvals, diffs, project files, attachments, live screen images, remote input and web-preview traffic are encrypted between your devices (X25519 + ChaCha20-Poly1305). If the receiving device is offline, the server holds the ciphertext until delivery, for at most 7 days. Screen and web-preview data is never stored. Notification text is also encrypted and decrypted on your iPhone.
Code, project files and session history stay on your Mac. Saved “Memory” items stay on your iPhone. The camera is used only to scan the pairing QR code. Only photos you pick are sent (encrypted) to your Mac. Voice input uses Apple’s speech recognition, governed by Apple’s privacy policy; we don’t keep recordings.
Screen Recording and Accessibility are used only so iPhones you paired and allowed can view and control your Mac. Coding agents run with your own accounts at their providers (e.g. Anthropic, OpenAI) under those providers’ policies; PocketAgent does not provide AI models. The optional Claude usage feature (off by default) reads Claude Code’s local sign-in read-only to query your usage from Anthropic; it is never sent to our server.
We use Apple Push Notification service to deliver encrypted notifications. We do not sell or rent personal data. Account data is kept while your account exists. Delete your account in the iPhone app under Settings → Account → Delete Account; your account, devices, pairings and any held ciphertext are then removed from our server. You can revoke any device at any time.
PocketAgent is intended for developers and not for children under 13. We will update the effective date above when this policy changes. For questions, use the contact details on our support page.