NodwisePrivacy policy
The short version
No account, no ads, no analytics, no tracking.
What your agents do stays between your Mac and your phone. It is end-to-end encrypted, and we cannot read it.
On your Mac
The Mac app receives events from Claude Code and Codex through their hooks: tool names, commands, file paths and the agent's last message. It processes them on your Mac.
It writes its hook entries to ~/.claude/settings.json and ~/.codex/hooks.json (backing up the originals), and keeps its settings and pairing key in ~/.nodwise.
Once a day it checks https://nodwise.app/appcast.xml for updates. That request carries your IP address and the app version, like any web request.
Between your Mac and phone
Each phone gets its own key. The QR code holds a one-time invite; your phone and Mac then agree on a key (X25519) that never leaves the two devices. Messages are encrypted with AES-GCM before they leave the device.
Our relay runs on Cloudflare Workers. For each Mac it stores a random channel ID and a hash of the Mac's relay password; for each paired phone, a random device ID, a hash of its relay password, and its push tokens and environment; and for a few minutes, a hash of each pairing invite. It forwards encrypted messages without storing them, and it has no way to decrypt them. The phone's name is kept only on your Mac.
Cloudflare keeps short-lived operational logs of requests to the relay (such as time, IP address and path) that we use only to diagnose problems.
Notifications
Notifications are delivered by Apple Push Notification service. The payload holds a generic message and the encrypted request; the iPhone decrypts it locally before showing it.
On your iPhone and Apple Watch
The camera is used only to scan the pairing QR code. Images are not stored or sent anywhere.
The pairing key is kept in the iOS Keychain and shared with your Apple Watch so it can show requests.
This website
nodwise.app is a static site. It sets no cookies and runs no analytics. Cloudflare, which hosts it, may log requests as described above.
Your choices
Removing a phone in the Mac app deletes its password hash and push tokens from the relay right away. Turning off the relay removes every phone. Push tokens are also removed when Apple reports them invalid, for example after you delete the app.
To have a channel's stored data deleted right away, write to support@nodwise.app with the channel ID shown in the pairing link.
Children
Nodwise is a developer tool and is not directed at children.
Changes and contact
If this policy changes, the new version will be posted here with a new date. Nodwise is provided by NUTPOS LIMITED. Questions: support@nodwise.app.