Privacy

What the hosted parts of Mobdev keep, in plain words.

The Mac app

The app has no account and no telemetry. Screens, text recognition and settings stay on your Mac. What your agent sends to its model is up to the agent.

Your account

Sign-in is handled by WorkOS. We store your WorkOS user ID and email address, the names and SHA-256 hashes of your access tokens, and when each was last used.

The relay

The relay records which Macs are connected: a name you choose, when it connected and disconnected, and an ID derived from your Mac’s key. For each Mac it also keeps the iPhones and iPads it last reported: their name, model, iOS version, a device ID and whether they are ready. Agent requests and responses, including screenshots, only pass through memory and are never written to disk or logs. Cloudflare, which runs the relay, may keep standard request metadata such as IP addresses for security.

Plans and payments

Autumn keeps track of your plan and usage, and Stripe handles payments. Autumn receives your user ID and email address and, per Mac connection, how many requests the relay forwarded and how long the Mac was busy with them, never their content. Card details go straight to Stripe; we never see them.

Deleting your data

Revoking an access token deletes it. “Delete account” in the dashboard removes your account, tokens and Mac records at once, disconnects your Macs and deletes your record at Autumn. A paid plan has to be cancelled first. Stripe keeps invoices as long as tax law requires.

If you used the hosted relay that month, we keep one thing until your monthly allowance renews: a SHA-256 hash of your WorkOS user ID with how many requests and active seconds you used. If you sign up again before then, that usage counts toward your new account, so deleting and re-creating an account does not reset the free allowance. After the renewal we delete it.