RelayKit Privacy Policy

Effective 2026-05-21. Publisher: Schalliol Automation LLC.

The short version. Schalliol Automation does not collect, transmit, or sell any personal data. There are no RelayKit servers, no analytics, no third-party trackers. All RelayKit traffic flows directly between your iPhone and your paired Mac over your local network or a VPN you control. Keys stay in each device's Keychain. The optional AI features in 1.2.0 invoke the Claude command-line tool that you have installed on your Mac, which uses your Anthropic subscription — Anthropic's privacy policy governs that activity.

What RelayKit stores on your devices

Pairing keys. A private key on your iPhone and its public counterpart on your Mac, in each device's Keychain, so your phone can re-authenticate without rescanning the QR code.
Last-known Mac endpoints. Host names and IPs from the pairing QR, stored in the iPhone Keychain so reconnects work when Bonjour is unavailable (e.g. over a VPN).
Preferences. UI choices (push toggles, last-selected tab) in standard iOS UserDefaults.

All of the above stays on your device. None of it is transmitted to us.

Network behavior

RelayKit only communicates with the RelayKit helper running on your own Mac. Every payload is encrypted end-to-end with Apple CryptoKit — X25519 pairing, HKDF-SHA256 session-key derivation, ChaCha20-Poly1305 framing — before it leaves the phone. There is no relay server, no cloud sync, and no telemetry.

Two embedded web views (the Chat and Co-work tabs) load claude.ai and claude.ai/code in standard WKWebView components. When you use those tabs, Anthropic's privacy policy governs that activity. We do not inject scripts, proxy, or observe that traffic.

AI features added in 1.2.0

RelayKit 1.2.0 introduced four features that augment the session list with content produced by the Claude command-line tool that you, the user, have already installed on your Mac and authenticated to your own Anthropic account. The iOS app never contacts Anthropic directly. The Mac helper invokes your local claude -p subprocess, which transmits to Anthropic under your existing subscription. Anthropic's privacy policy governs that traffic.

Smart Titles. Sends the helper a batch containing each session's first user prompt (truncated to ~240 characters), its project folder name, and the backend type (Claude / Codex). Returns a short generated title per session.
Suggested Prompts. Sends the last few transcript turns of one session (user/assistant/tool roles, each text snippet truncated to ~400 characters) to generate three short follow-on prompt suggestions.
AI Smart Groups. Sends a single line of metadata per session — id, first user prompt (truncated to ~200 characters), project folder name, backend, last-message timestamp, message count — to cluster sessions by topic. Full transcripts are never sent.
Daily Digest. Once per day (when enabled in the Mac helper's settings), sends the tail of the busiest few sessions' transcripts to produce a one-paragraph summary of the day's work.

None of these features sends data to Schalliol Automation. They reuse the Anthropic subscription already configured on your Mac. The Daily Digest can be disabled from the Mac helper's settings window; the AI Smart Groups background pre-compute can be disabled by setting the RELAYKIT_BG_SMART_GROUPS UserDefaults key on the Mac helper to false. Smart Titles and Suggested Prompts currently run whenever the iOS app requests them; a user-facing toggle is planned.

Cross-Session Search (also added in 1.2.0) is a pure local feature. The Mac helper greps across the session transcripts stored on your Mac and returns matching snippets to your iPhone over the same encrypted WebSocket as all other RelayKit traffic. No network call leaves your Mac for this feature.

Permissions RelayKit requests

Camera. Scanning the pairing QR displayed by your Mac. Images are never saved or transmitted.
Local network. Discovering and talking to your Mac over Bonjour / direct IP.
Push notifications. Optional. Used only to alert you when a Claude Code turn completes while the app is backgrounded. The push payload contains a short summary — no source code, prompts, or personally identifiable content ever leaves your Mac.

Children

RelayKit is a developer tool, not directed at children under 13, and we do not knowingly collect information from anyone.

Third parties and trackers

None. No analytics SDKs, no advertising networks, no crash reporters beyond Apple's opt-in TestFlight / App Store Connect diagnostics that you control in iOS Settings → Privacy & Security → Analytics & Improvements.

Data retention and deletion

Because no data leaves your device, there is nothing for us to retain. To remove every trace of RelayKit from your iPhone: delete the app. Pairing keys are wiped from the Keychain automatically at uninstall. On your Mac: quit and delete RelayKit.app, then remove any keys in ~/Library/Keychains entries named "RelayKit" if desired.

Your rights

We do not hold any personal data about you, so typical data-subject requests (access, rectification, erasure) are self-service — delete the app. If you believe we've overlooked something, email us and we'll respond.

Changes to this policy

If this policy changes, we'll update the effective date at the top. Material changes will be noted on the RelayKit marketing page and in the next app update's release notes.

Contact

Privacy questions: relaykit-privacy@schalliol.com
Support: relaykit@schalliol.com