Data choices and deletion

No GrantTap account

Pairing is device authorization, not account registration. GrantTap has no username, password, profile, subscription account, or cloud index of people. Apple's record of an App Store download or purchase belongs to your Apple Account and is controlled by Apple.

Clear the iPhone app

Clear MCP usage and the audit log before forgetting the pairing because those local histories are separate controls. Menu names can vary slightly by app or OS version.

• 1. Open MCP and skill usage in GrantTap and choose Clear local usage history.
• 2. Open Settings → Audit log and choose Clear or Clear log.
• 3. In Settings, choose Forget paired computer and confirm. This unregisters background push for the pairing, disconnects it, and removes pairing keys, task keys, local sessions, deliveries, and archives.
• 4. Remove GrantTap from the iPhone to erase any remaining data in the app sandbox. Remove the companion app from Apple Watch if watchOS does not remove it automatically.

Remove paired-computer data

Deleting ~/.granttap is destructive and cannot be undone unless you made a backup. GrantTap does not provide a remote restore of local keys or schedules.

• Stop the GrantTap background helper and any running granttap-mcp process.
• Remove the local GrantTap state directory at ~/.granttap only after confirming that exact path. It can contain pairing state, schedules, and local bridge configuration.
• Remove the GrantTap MCP entry or hooks from Codex and Claude Code if you no longer want those tools connected.

Source chat history is separate

GrantTap can display activity originating from local Codex or Claude Code sessions. Archiving a task in GrantTap does not delete that source chat. Delete or archive source history through Codex, Claude Code, or their local storage controls under the terms of the corresponding provider.

What happens at the relay

Forgetting a pairing asks the service to remove its APNs registration and makes locally deleted keys unavailable for future decryption. Pairing blobs are single-use and expire after 15 minutes. Encrypted queues are bounded and messages carry expirations. Some network or security logs can remain for the infrastructure provider's operational retention period.

The relay has no account lookup and no decryption keys. Deleting an endpoint key makes any remaining ciphertext unreadable from that endpoint, but it does not retroactively erase a copy of plaintext already exported, logged, or stored by an authorized endpoint or third-party tool.

Privacy request or correction

Depending on where you live, you may request access, correction, deletion, restriction, portability, or objection for personal data GrantTap can identify and control. Email the support address below with the minimum information needed to explain the request.

Because there is no GrantTap account index and encrypted payloads cannot be searched by identity, the developer may have no readable task record to return or delete centrally. We will explain what can be identified rather than ask for pairing tokens or encryption keys. Never send those secrets.

Apple Account and App Store data

Apple controls Apple Account, App Store purchase, receipt, and device-services data. Use Apple's Data and Privacy portal for Apple-held data or Apple's support channels for billing. GrantTap cannot delete those records for you.