Privacy Policy

1. Local by default

Codz is a macOS application that reads agent activity already on your machine. On the Free tier nothing leaves your Mac: usage is collected, stored, and displayed locally, and we receive none of it.

Provider credentials are never transmitted to us. Claude, Cursor, and Codex keep their own CLI sign-ins on your machine, and OpenRouter and DeepSeek keys are held in the macOS Keychain and reachable only as a finished authorization header.

2. Account information

Creating an account stores your email address and an account identifier, and each session you sign in with records the IP address and browser or device it came from. Sign-in runs on our own service, and these records are kept in our database. There are no passwords: Codz signs in with a six-digit code sent to your email, or with Google, Apple, GitHub, or ChatGPT where available.

If you sign in with Google, Apple, or GitHub, we keep what that service returns at sign-in: your account identifier there, the permissions you granted, which cover only your basic profile and email address, and an access token and a refresh token, both encrypted before they are stored. Google and Apple also send a signed identity token carrying your name and email address; we read it to sign you in and then discard it. Codz does not use the stored tokens to read from or act on your Google, Apple, or GitHub account. They are removed when your Codz account is deleted, and you can revoke Codz's access at any time from that service's security settings.

You may optionally set a display name and username. These are private unless you choose to make your profile public.

ChatGPT account sign-in shares your basic profile and email address. We verify and discard OpenAI's identity token, keeping the account identifier and profile needed for your Codz session. We do not retain OpenAI access or refresh tokens for account sign-in. Connecting your ChatGPT plan to power AI requests is a separate authorization in Models & providers; account sign-in alone does not authorize that usage or share your ChatGPT conversations or memory.

3. Usage data on Pro

With a Pro or Team subscription, Codz syncs a daily summary of agent usage so it is available across your devices. Each record covers a day, a provider, and a model, and includes token counts and provider-reported costs.

• We do not receive your prompts, your agent conversations, or the contents of your files.
• We do not receive your source code, diffs, terminal output, or repository names beyond what you choose to display.
• Usage totals keep their source and fidelity, so account-reported figures are never mixed with estimates.

4. Public profiles and community stats

Your usage profile is private by default. If you turn on a public profile, the pages you choose to publish become readable by anyone with the link.

Community statistics aggregate only the accounts that have explicitly opted in to sharing. The aggregate carries no account identifiers, and turning sharing off removes you from it.

5. Remote control

Pairing an iPhone or iPad creates an encrypted connection to your Mac. Your Mac stays authoritative: paired devices reach only the workspaces you approve, and provider credentials and permission enforcement never leave the host.

Message payloads are end-to-end encrypted. We relay them; we cannot read them.

6. Feedback

When you send feedback from Codz, we receive what you write, the kind of report you choose, any screenshot you attach, and the details the form lists before you send it, such as your Codz and operating-system versions, your device, your plan, the page you were on and, from a Mac, the agent CLIs you have installed. A report never carries your prompts, your conversations, your files, or your keys.

Reports are kept with your account so we can follow up, and a copy goes to our support inbox. Deleting your account deletes them.

7. Payments

Subscriptions are billed by Stripe, or by Apple if you subscribe through the App Store. We never see or store your card details.

We store the identifiers those providers give us — a customer id, a subscription id, its status, and its renewal date — so we know whether your account is entitled to Pro.

8. Service providers

We share data only with the providers needed to run the service: PlanetScale for the database that holds accounts, synced usage, and feedback, Stripe and Apple for payments, and Cloudflare for hosting, delivery, the Remote relay, and transactional email such as sign-in codes, team invitations, and the feedback you send us.

We do not sell your data, and we do not use it for advertising.

9. Retention and deletion

Synced usage is retained while your account is open. You can request account deletion from the iOS app or by emailing us; deleting your account removes your profile, your synced usage, your feedback reports, and your organization memberships.

Cancelling a subscription does not delete your data — it stops the sync and returns you to the local-only tier.

10. Your rights

You can request access to, correction of, or deletion of your personal data at any time by emailing support@codz.com. Depending on where you live you may have additional rights under laws such as the GDPR or the CCPA, and we honour those requests regardless of where you are.

11. Changes

If we change this policy we will update the date above, and we will tell you directly when a change materially affects how your data is handled.