Last updated: 11 October 2026
This policy covers the AIHerd iPhone and iPad companion app and the AIHerd-operated services it uses. AIHerd connects your device to coding sessions on computers you choose. No AIHerd account registration is required in this app.
Sign-in is not mandatory. The app is usable without an AIHerd account through SSH, Tailscale or an approved pairing link. Optional sign-in lets you discover herds signed in to your account.
When you sign in, the authentication service retains your email address, an opaque account ID, your provider identifier and available display name while your account exists. These records identify your account and discover your herds; signing in does not upload terminal contents or project files. Authentication also uses key-bound credentials and short-lived security records. An Apple revocation token is stored encrypted so Sign in with Apple authorization can be revoked on deletion.
While signed in, open Account and choose Delete account. Confirming deletion removes your email, account ID, profile, provider links, account enrollments and saved account herd entries from the active authentication service, and revokes all account credentials. Restricted-access deployment backups expire after 30 days. Unlinked revoked credential IDs contain no email, account ID or provider identity. Files on your own computers and existing paired-device credentials are not deleted; you can continue using AIHerd without signing in. Signing out alone does not delete your account.
More detail: authentication privacy policy.
The app stores saved connection settings on your device and uses the iOS Keychain for connection credentials. Terminal output, commands and session details are exchanged with your connected computer. The computers, coding tools and websites you choose have their own storage and data practices.
AIHerd does not centrally archive your terminal sessions or project files. Encrypted relays transport connection traffic. Our services use operational usage and security logs, including network addresses, request times and outcomes, connection identifiers, traffic volumes and timing information. These logs help operate, troubleshoot and protect the service.
If enabled, a notification registration address is sent to your paired computer. Your computer sends notification delivery requests through AIHerd's push service to Apple Push Notification service. These requests may contain the device registration token, herd/session identifiers, notification titles and excerpts from coding-session questions or summaries. AIHerd's push service processes these requests for delivery without maintaining a notification-content archive. Apple processes notification delivery under its own policies. You can turn notifications off in device settings.
The iOS app keeps connection diagnostics locally and lets you choose to share them. If you send diagnostics or a support request to us, we process what you send to investigate and respond. Logs may include host names, network addresses, device details and error messages; review them before sharing and do not include passwords or connection secrets.
Hosting and network providers process network metadata needed to deliver and secure the services. Apple processes App Store purchases and notification delivery. AIHerd does not receive your payment-card details through this app. The app does not use advertising SDKs or collect data for advertising tracking.
Operational logs for our intake services are configured to expire after 90 days, with deletion applied as log files rotate; storage limits may remove them earlier. Older entries in shared host logs and records held by hosting or network providers follow their respective retention settings and are not covered by that limit. Relay address records use a default retention period of 90 days after their last activity. Submitted diagnostic reports become eligible for cleanup after 30 days; cleanup runs when new reports are received. Support correspondence is kept as needed to resolve your request and meet applicable obligations.
You can remove saved connections and manage notifications on your device. Remove data held on your own computer there. For privacy questions or deletion requests concerning information you sent to us, contact [email protected]. Include a diagnostic receipt identifier if you have one, but do not send credentials.
All data transmitted to AIHerd-operated services is encrypted in transit. Protected connection methods include HTTPS, SSH and encrypted relays. User-configured HTTP is intended only for testing inside your own infrastructure; that HTTP traffic is not sent to AIHerd-operated services. Notification delivery uses encrypted transport, but Apple and the delivery service necessarily process the notification payload. This is not a claim that all information stored by your computer or every service provider is encrypted end to end.
We may update this policy when the app or services change. The published policy will show its update date.