Privacy

Last updated 11 November 2026.

In short

• There is no Flockbox account, and Flockbox collects no analytics, advertising IDs or tracking data.
• Your conversations, code and files stay between your phone, your own computers and the AI providers you use.
• Traffic between your phone and your computers is end-to-end encrypted. When it goes through the Flockbox relay, the relay can't read it.

The app

• The providers and computers you add, and chats with API providers, are stored on your phone only. API keys and the keys that pair your phone with your computers are kept in the phone's secure storage (iOS Keychain, Android Keystore) and are excluded from backups.
• The app sends data only to the computers you paired (directly, or through the relay) and to the API providers you add yourself.
• Camera: used only to scan a pairing QR code, when you choose to. No images are stored or sent.
• Local network: used to reach your own computers on your Wi-Fi.
• When you pair, the phone's name or model (for example "iPhone" or "Pixel 9") is sent to that computer, so it can show which phones are paired.

The agent

The Flockbox agent runs on your computer and sends nothing about you to us. It talks to your phone (directly or through the relay), to the AI tools' own services when they run, to their update sources (such as npm or the provider's installer) when it updates them, and to this website to check for a new version of itself. Its settings, keys and session records stay in ~/.flockbox on that computer.

The relay

The relay (flockbox.app/relay) passes encrypted messages between your phone and your computer when they aren't on the same network. It can't decrypt them. To route them it sees, and its server logs record for operating and protecting the service: the IP addresses that connect, the time, a computer's public key (an identifier that reveals nothing else about it), and how much data passed. These logs are rotated and are not used for anything else. You can turn the relay off on any computer with flockbox config relay off.

This website

This site uses no cookies and no analytics. The web server keeps standard access logs (IP address, time, page requested) for security and operations. The agent installer downloads Node.js from nodejs.org if your computer needs it.

AI providers

When you use Claude Code, Codex, Gemini CLI, Cursor, Grok, Hermes or an API provider through Flockbox, your prompts and their work go to that provider under your own account and its terms and privacy policy. Flockbox doesn't change what they receive or keep.

Contact

Questions about privacy: xil3.com/contact.