Privacy Policy

Data handled by the app

• Pairing identifiers and encryption keys are created and stored on your paired devices.
• Visible agent messages, commands, questions, replies, and approval decisions are end-to-end encrypted before leaving a device.
• The relay may temporarily queue encrypted envelopes until delivery or expiry.
• The app stores local preferences, session state, and pairing details needed to operate.

What the relay can observe

Cloudflare and the GrantTap relay process operational metadata such as IP address, connection time, room identifier, sender and recipient roles, payload size, and expiry only as needed to deliver and protect the service. GrantTap does not use this metadata for advertising, profiling, or product analytics. The relay does not receive the secret keys needed to decrypt message contents.

Camera, microphone, and speech recognition

Camera access is used only to scan a pairing QR code. Microphone and speech-recognition access are used only when you choose voice reply. GrantTap requests on-device recognition when the device supports it; otherwise Apple’s speech service may process audio under Apple’s terms.

Analytics, advertising, and tracking

GrantTap does not include advertising SDKs, cross-app tracking, or product analytics. The public website may be protected and logged by Cloudflare for security and delivery.

Retention and deletion

Encrypted relay messages have explicit expirations and bounded queues and are not retained as a readable account history. Pairing blobs expire after 15 minutes and are single-use. GrantTap does not retain voice recordings. Use Settings → Forget pairing, remove the app, and delete ~/.granttap on the paired computer to remove local GrantTap state.

Questions

Contact: sergii.ziborov@gmail.com.