Privacy Policy
Документ англійською, оскільки саме англійська версія є визначальною. Переклади готуємо.
WHO WE ARE
Matěj Žalmánek, a natural person residing in Czechia, is the controller of the personal data described here. Contact: support@coden-app.com.
"coden" is the brand name of our software. We provide it as a private individual and free of charge.
THE SHORT VERSION
We operate no user accounts, so there is nothing to register and no profile to build. Your files, your prompts and the Agent's answers never reach us — they stay on your computer and on the phone you paired with it.
What we do handle is the little that is needed to connect the two: while your Server is reachable, our Service keeps its network address in memory only, and when a direct connection is impossible it passes encrypted bytes it cannot read.
Once a day the Server itself asks our website which version is current — that is the only thing it sends about itself, and it can be switched off.
The rest of this document says the same thing in detail, and names the three third parties involved.
WHAT STAYS ON YOUR COMPUTER
The Server runs on your machine. The working directory, the source code, the Documents, the Prompts you write and everything the Agent produces are processed there, under your operating-system account.
We receive no copy of any of it, and there is no setting that would send it to us.
WHAT OUR SERVICE PROCESSES
The Service performs two jobs: it helps your phone find your Server (rendezvous), and when the two cannot reach each other directly it passes traffic between them (relay).
For that it processes:
- a cryptographic identity of each side — a key fingerprint, not a name, an e-mail or an account;
- network addresses, including the public IP address and port your Server and your phone appear from;
- timings and volumes of the connection, and the quota already used.
Two properties of this are worth stating plainly, because they are what the design was built around:
Nothing is written to disk. The registry lives in memory, every record has an expiry, and a record that is not renewed disappears. Restarting the Service erases all of it. We keep no history of who connected when.
The content cannot be read. Traffic between your phone and your Server is end-to-end encrypted. The Service moves bytes; it has no key to them, and we do not attempt to obtain one.
The legal basis is Article 6(1)(b) GDPR — processing necessary to provide the service you asked for by pairing your devices.
NOTIFICATIONS
When the Agent finishes, your phone can show a notification.
The device token — an identifier assigned by Apple or Google to your installation — is stored by your own Server and sent to the Service only in order to deliver the notification. The credential towards Apple is held solely by the Service, not distributed to every Server.
The text of the notification is composed by the Service from the kind of the event. Nothing from your Conversation, your Prompt or your project is put into it, and therefore none of it passes through Apple or Google. What actually happened, the app fetches directly from your Server over the encrypted channel.
You can switch notifications off in your phone's settings; nothing else stops working.
THE AGENT AND ITS PROVIDER
The Agent — today Claude Code from Anthropic — is a third-party program that you install and log in to with your own account.
Your prompts and the parts of your project the Agent reads are sent by the Agent to its provider, under the contract between you and that provider, and their privacy policy governs it. We are not a party to it, do not see that traffic, and cannot exercise your rights against them for you.
THE VERSION CHECK
Once a day your Server asks coden-app.com which version is current, so that your phone can tell you an update is waiting. This is the only request the Server makes on our behalf rather than yours.
It carries no identifier and nothing about your project. What the web server sees is what it sees for anyone loading a page: your IP address, and a user agent naming the version you run (coden/0.1.0). We keep no access log, so nothing of it is stored.
Running the Server with --no-update-check stops the request; nothing else changes, and you then learn about a new version the same way as about any other program — by looking.
coden --update downloads the installer when you ask for it. It installs nothing by itself.
THIS WEBSITE
The website sets no cookies, runs no analytics, and keeps no access log.
It does load fonts from Google (fonts.googleapis.com, fonts.gstatic.com). That means your browser contacts Google's servers and Google sees your IP address and user agent. We do not receive anything from it. Google's privacy policy applies to that request.
APP STORES
The Client is distributed through Apple's App Store and Google Play. Those companies process what they process when an application is downloaded, updated or crashes, under their own privacy policies. We do not receive analytics from them, and we do not add any analytics of our own to the app.
WHERE DATA GOES OUTSIDE THE EU
Three transfers can occur and none of them carries the content of your work:
- Apple / Google — the device token and the kind of the event, in order to deliver a notification;
- the agent provider — your prompts and the parts of the project the Agent reads, under your own contract with them;
- Google Fonts — the IP address of a visitor to this website.
HOW LONG WE KEEP THINGS
Registry and relay records exist only while the connection is live and expire on their own; nothing is persisted. The device token is held by your Server and disappears when you unpair the device or remove the Server.
Since we operate no accounts, there is no dataset to retain after you stop using the Services.
YOUR RIGHTS
Under the GDPR you have the right of access, rectification, erasure, restriction, objection and portability. Write to support@coden-app.com and we will answer.
In practice the answer will usually be that we hold nothing about you: without an account there is no record that could be tied to a person, and the connection records are gone within minutes of the connection ending.
You may also lodge a complaint with the Czech supervisory authority, Úřad pro ochranu osobních údajů (uoou.gov.cz), or with the authority of your country of residence.
CHILDREN
The Services are aimed at people who write software and are not directed at children. We do not knowingly process the data of anyone under 16.
CHANGES
We may change this policy. The current version is always published here with its effective date; if a change materially affects you, we will make it apparent in the Client before it takes effect.
CONTACT
Questions about this policy, and requests concerning your rights, go to support@coden-app.com.