cozychat privacy.

cozychat.

CozyChat is an iPhone and iPad client for AI agents. Connect directly to a compatible Hermes server or qualified OpenClaw Gateway, or use CozyAgents and its embedded gateway. You choose and operate that server or runtime. CozyLabs does not host it or ask for an account, email address, or password. A CozyAgents pairing creates a device credential for that gateway, not a CozyChat account.

on your iphone.

CozyChat stores your connection address, display name, credential, certificate trust information, and notification keys. Secrets use the iOS Keychain; preferences and conversation cache stay on your iPhone or iPad.

Forgetting a gateway deletes its local record, credential, trust record, and notification key. When you forget your final gateway, CozyChat asks the push relay to delete its ordinary notification registration. Local removal still completes while either service is offline.

messages, agents, and photos.

Messages, photos, conversation state, and agent replies go to the server or runtime you choose. You choose and operate it, including its AI models, providers, services, and any embedded gateway. Those services handle information under their own settings and policies. CozyLabs does not host your Hermes server, OpenClaw Gateway, or CozyAgents runtime, and does not receive, host, or retain ordinary messages, photos, media, conversation state, agent replies, or agent state.

The iOS photo picker shares only the image you select. CozyChat prepares it on your iPhone, strips location metadata, and sends it to your selected server or runtime.

optional notifications.

If you enable notifications, CozyChat sends Apple Push Notification service device tokens to the CozyLabs push relay, which returns an opaque registration identifier for each. A paired CozyAgents gateway, or a direct Hermes connection whose CozyChat companion plugin was installed through SSH and reports shared-v1, uses push.cozylabs.ai, a hosted service operated by CozyLabs. Apple delivers the pushes. You choose whether to allow alerts in CozyChat and iOS Settings, and chat works without them. Direct OpenClaw connections do not use this relay. Setup and delivery.

Ordinary notification bodies remain end-to-end encrypted: your gateway or SSH-installed, shared-v1 Hermes companion plugin encrypts them before they reach the relay, which has no decryption key. The relay forwards the ciphertext to Apple and does not retain it.

APNs registration

Device token, opaque registration identifier, platform/environment and creation time. Active for up to 30 days; CozyChat refreshes ordinary alert registrations after 21 days.

delivery metadata

Routing identifiers, notification category and request timing, handled to deliver and limit pushes.

daily counts

Stored by opaque registration identifier and UTC date; pruned after 7 days.

source IP

Held in memory while rate limits apply.

ads and tracking

Never used.

Live Activity relay requests are different. A gateway or SSH-installed shared-v1 Hermes companion-plugin request exposes only bounded generic lifecycle fields: phase, tool count, generic short status, and approval identifier. It does not include the prompt, draft, tool arguments or results, or reply content. The relay forwards the request rather than storing its payload. The relay and Apple can see these fields; the ordinary notification encryption does not cover them.

Live Activities use their own activity tokens and controls. CozyChat's Live Activity setting is on by default and respects iOS Live Activities permission. Declining ordinary alerts does not disable Live Activities or their relay updates.

use of information.

CozyChat uses this information to pair and authenticate your device, send conversations and notifications, perform requested actions, and restore local state. CozyLabs uses support-request details to answer you.

CozyChat includes no advertising or third-party analytics SDK. CozyLabs does not sell personal information or track you across apps and websites. Apple processes the technical information required to deliver notifications. Your selected server or runtime and its configured services use their own settings and policies.

retention and your choices.

• You control messages, photos, agent history, and logs through the server or runtime and services you operate.
• CozyChat keeps local data until you forget a connection, clear the applicable data, or remove the app. iOS may keep Keychain items across reinstalls; forget the gateway before uninstalling to delete them.
• The optional push relay retains active APNs registrations for up to 30 days. It deletes an ordinary notification registration when the app unregisters a notification-enabled connection.
• You can decline ordinary notifications or turn them off later in iOS Settings. Live Activities have a separate control in CozyChat and iOS. Turning off alerts does not delete a relay registration; it stays until unregistered or expired.

security.

CozyChat stores gateway credentials and notification keys in the iOS Keychain. It uses the secure transport and certificate trust your selected server or runtime supports. A CozyAgents gateway or an SSH-installed shared-v1 Hermes companion plugin encrypts ordinary notification previews for your iPhone or iPad to decrypt. The server or runtime that runs your agent must read chat content, so CozyLabs does not describe chat content as end-to-end encrypted.

No system removes every risk. Keep credentials, pairing codes, notification keys, and private transcripts out of support email.

children.

CozyLabs designed CozyChat for adults. Agents connected through your selected server or runtime may produce responses that do not suit every age. A parent or guardian should supervise a minor who uses the app.

changes and contact.

CozyLabs may update this policy when CozyChat, the notification relay, or legal requirements change. The effective date at the top marks the current version.

Privacy questions about CozyLabs relay data: [email protected]. For your server's data, contact its operator.