This policy explains how the Apporo smart apps (the "App") handle your data. The App is offered under the brand of APPORO UNION INC. ("Apporo", "we" or "us"); Apporo is the App's brand and service provider and is responsible for data processing at the App level. The App is developed for Apporo by WOOW TECH CO., LTD. (the "Developer"), which publishes it on the App Store and Google Play under its own developer account and operates the App's online services on Apporo's behalf.

This policy applies only to Apporo smart. Other Apporo products and web services have their own privacy policies.

1. How the App works

Apporo smart lets you control AI coding tools ("agents") that run on your own computer, from your phone or from the desktop app. Your computer runs the Apporo smart daemon, which is built into the desktop app, and the App connects to it directly. When you are not on the same network, the App can connect through a relay server operated for Apporo (relay.apporo.ai).

There are no accounts: you never sign up or log in. The App pairs only with computers that run Apporo smart.

2. Your content goes only to your own computer

The text you send to agents, the photos and files you attach, your dictation audio and terminal content go only to the daemon on your own computer:

• On the same local network, the App connects to your computer directly, not through us.
• Through the relay, the content is end-to-end encrypted. The relay only forwards encrypted data; we cannot read it and we do not store it. While connected, the relay sees the IP addresses of your computer and phone and the server ID used for pairing; we keep no connection logs for it.

How the agents on your computer (for example Claude Code or Codex) handle that content depends on the agent services you set up and their terms; it does not pass through us.

3. Push notifications

When you allow notifications, the App gets this phone's push token from Google's Firebase Cloud Messaging (FCM) and gives it to the daemon on your computer. When an agent finishes or needs your permission, the daemon sends the following to our push relay (www.apporo.ai/api/smart/v1/notify), which delivers the notification through FCM (and, on iOS, Apple's push service):

• The push token, the App's language (English or Traditional Chinese), the reason for the notification (for example "finished" or "needs permission"), and IDs that the daemon generated for the screen a tap opens.
• None of your content: no agent replies, project or folder names, file names or paths. The relay picks a fixed sentence for each reason.

The push relay runs on Cloudflare and on Google Cloud's us-west1 region (Oregon, USA). To cap how many notifications a phone gets per day, it keeps a hash (SHA-256) of the push token until the end of that day (UTC), when the hash is deleted automatically. Cloudflare sees the connection's IP address to limit abuse; the relay's logs contain neither push tokens nor IP addresses.

4. Google Firebase

Notifications use Google's Firebase. Apporo smart uses a Firebase project of its own, separate from other apps, and embeds only Firebase Cloud Messaging and the Firebase Installations component it relies on; there is no analytics, advertising or crash-reporting component. To deliver notifications, the Firebase SDK collects and sends to Google: the Firebase installation ID, the push token, device model, language, time zone, operating system version, the App's identifier and version, and Firebase SDK version information. As stated in Google's SDK privacy disclosures, Google may use this data to operate its services, for analytics and to improve its products; it is not used for advertising. Google handles this data under its terms: https://firebase.google.com/support/privacy

On iOS, the App does not ask Firebase for a push token until you allow notifications and the App connects to your computer. On Android, Firebase may get a push token when the App starts.

5. Reporting AI content

The App shows a "Report" button under each AI reply. The replies come from the agent running on your own computer (for example Claude Code or Codex). If one is offensive, dangerous or deceptive, you can report it to us from inside the App, without leaving it.

When you press "Send report" we receive:

• The reason you picked (harassment or hate, sexual content, violence or self-harm, dangerous or deceptive, or other).
• The App version, the platform (iOS, Android or desktop), the App's interface language, and a random report ID the App generates for each report. The ID is not used to identify you or your phone.
• The text of that AI reply, only if you turn on "Include this message" and look at the editable preview first. We receive the text you keep, up to 8 KiB. It is off by default. The text was written by the agent on your computer and may contain your project or code, so check it and remove anything you do not want to share before you send.

We do not receive: what you typed to the agent, the messages around that reply, attachments, tool output, project or file names or paths, the address of your computer or daemon, pairing details, or any account or credential.

The report travels over HTTPS to our report service (www.apporo.ai/api/smart/v1/ai-content-reports). It runs in Google Cloud's us-west1 region (Oregon, USA) on Cloud Run and Firestore, behind Cloudflare, which rate-limits abuse and sees the connection's IP address while doing so, under Cloudflare's own privacy statement. Our service does not store IP addresses: they are not in the report records, and the service's logs hold only the receipt number, never the content. When a report is stored, Google Cloud's monitoring service sends fixed-text notification emails to the people who handle reports for Apporo at the Developer. They contain only the receipt number, with no reason, version or content.

We use reports to handle content safety and product problems. We do not use them for advertising or tracking and we do not share them with third parties; the Developer, Google Cloud and Cloudflare process data on our behalf. Reports are kept for 30 days and then deleted automatically (usually within a day after that); there are no backups. Because there are no accounts and we do not collect your email address, we cannot reply to individual reports. The receipt number the App shows only means the report was saved, not that it has been reviewed.

To have a report deleted sooner, email [email protected] with the receipt number the App showed, and we will find and delete it.

6. Other connections

The App's "What's new" page reads a public changelog from GitHub, and the desktop app checks for and downloads updates from GitHub. These connections go directly to GitHub, which handles them under its privacy statement. The connections for reporting AI content are described in section 5.

7. What we do not do

• We do not collect your name, email address, phone number, location or contacts (except AI reply text you choose to include in a report, see section 5).
• The App has no ads and no analytics or tracking tools, and we do not sell or share data with third parties for advertising.
• We do not track your activity in other companies' apps or websites.

8. Permissions

The App asks for permissions only when you use the related feature: camera (to scan the pairing QR code), microphone (dictation), photos (attaching images), local network (iOS, to reach a computer on your network) and notifications (push). The desktop app asks for the microphone only for dictation. Photos, recordings and scan results go only to your own computer or are processed only on your phone.

9. Keeping and deleting data

• The push token hash is deleted automatically at the end of each day (UTC).
• AI content reports are kept for 30 days and then deleted automatically (usually within a day after that), with no backups (see section 5).
• When you turn off the App's notifications, the App asks the daemon to revoke the push token the next time it connects to your computer. After you uninstall the App, its push token stops working, and the daemon deletes it when the next notification gets an invalid-token answer; the daemon also stops using a push token the App has not renewed for 48 hours.

Apart from AI content reports (section 5), we hold no data that can be linked to you personally. For questions or deletion requests, email [email protected].

10. Your rights

Depending on where you live, you may have the right to ask what personal data we hold about you, to have it corrected or deleted, and to object to or restrict its processing. Because the App has no accounts, the only records we can find are AI content reports, by their receipt number. Email [email protected]; we reply within 5 business days and complete requests within 30 days. We will not discriminate against you for exercising these rights.

11. Children

The App is not directed to children under 13, and we do not knowingly collect personal data from them.

12. Additional information for California residents

If the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), applies to our handling of your personal information, the following additional information applies to California residents:

• Categories of personal information collected: identifiers (push token, Firebase installation ID, device model); technical diagnostic data sent to Google by the Firebase components (such as the App and SDK versions); and, only when you choose to include it, the text of an AI reply in a report.
• Sources and purposes: provided by you and your device, used to deliver notifications and to handle reports of AI content; never for advertising.
• Sale and sharing: we do not sell personal information and do not share it for cross-context behavioral advertising. We have no actual knowledge of selling or sharing the personal information of consumers under 16.
• Sensitive personal information: we do not collect it.
• Retention: see section 9.
• Your rights: to know, delete and correct, to opt out of sale or sharing, and not to be discriminated against for exercising them. Email [email protected]; you may also use an authorized agent.

13. "Do Not Track" signals

The App does not track you across third-party websites or apps, and does not allow third parties to collect personal information about your activity across websites through the App. We therefore handle your data the same way whether or not your browser or device sends a Do Not Track or Global Privacy Control signal.

14. Availability and languages

The App is distributed in the United States, Taiwan, Hong Kong, Singapore, Malaysia, Thailand, Indonesia and the Philippines. This policy is available in English and Traditional Chinese; if the versions differ, the English version prevails.

15. Changes to this policy

If this policy changes, we will update the effective and last-updated dates on this page. For material changes (for example new data categories, new recipients or new purposes), we will announce them on this website before they take effect.

16. Contact us

APPORO UNION INC.
Address: 10050 Garvey Ave Suite 207, El Monte, CA 91733, USA
Email: [email protected]
Website: www.apporo.ai

App development and store publishing: WOOW TECH CO., LTD. Please send every privacy question about the App to the email address above.