Privacy Policy

This privacy policy applies to the Opencode app for mobile devices, together with any related services operated by Alvaro Lorente (collectively, the “Application”). Alvaro Lorente is hereby referred to as the “Service Provider”.

OpenCode Mobile is a client for an OpenCode server that you choose and control (for example, your own computer or a server you set up). Where your data goes depends on which connection you use, as explained below.

Independent project

OpenCode Mobile is an independent, community-built project. It is not built by the OpenCode team, is not endorsed by them, and is not affiliated with them in any way. “OpenCode” is used only to describe the software this app works with. OpenCode and its trademarks belong to their respective owners.

Where your data goes

There are two separate paths, and they are handled differently:

1. Your OpenCode server. Prompts, chat content, source code, files, attachments, session content, provider credentials (such as API keys you configure), and other normal OpenCode workspace traffic are sent directly from the app to the OpenCode server you selected. They are not proxied, stored, or processed by OpenCode Mobile infrastructure. That data lives on your server, under your (or your server operator’s) control.

2. OpenCode Mobile / Cloud Link infrastructure. Only the optional Cloud Link subscription service sends data to infrastructure operated for OpenCode Mobile, as described in the next section. If you do not use Cloud Link, the Application sends nothing to OpenCode Mobile infrastructure beyond normal network protocol data (such as your ephemeral IP address) needed to establish a connection, which is not retained or used for tracking.

Cloud Link (optional paid service)

Cloud Link lets you access your own OpenCode machine remotely without configuring your own network tunnel. Product details, downloads, and platform support are available on the OpenCode Cloud Link website. To provide the service, Cloud Link processes the minimum data needed to verify your subscription and securely pair your device:

• Purchase or transaction proof used to verify an active subscription: on Google Play this is the store purchase token; on the App Store this is the signed StoreKit transaction. It is sent to the Cloud Link service so it can confirm the purchase with the store.
• Pseudonymous service and session identifiers required to associate your subscription entitlement and Cloud Link access, such as the account/session identifiers, authentication token, entitlement list, and expiry times issued by the Cloud Link service.
• Device and connection identifiers required to securely pair and authorize access, such as the pairing identifier and token from your connector QR code, the device name you provide, and the device, machine, and connection identifiers and secrets issued when pairing succeeds.

Payments are handled entirely by Google Play or Apple. OpenCode Mobile does not receive or store credit card numbers, bank account details, or other payment-card information.

Device identifiers (Android)

On Android, bundled Google/Firebase components may generate or process an app or device installation identifier required for app functionality (for example, store billing and core platform services). This identifier is used for app functionality only.

What the Application does not do

• The Application does not use collected data for advertising, behavioral tracking, or marketing profiling.
• Third parties do not receive your data for advertising or tracking. Store purchases are verified with Google Play or Apple under their own policies.
• This Application does not collect precise information about the location of your mobile device.

Task-completion alerts use local notifications on your device only. Notification records (server URL and username, never the password) and server passwords stay in on-device storage, including secure device storage where supported.

Data deletion

• To request deletion of data held by OpenCode Mobile / Cloud Link (for example, your Cloud Link session or pairing data), email [email protected].
• Data stored on your self-hosted OpenCode server (prompts, sessions, files, credentials) must be deleted from that server by you or your server operator. OpenCode Mobile does not control that infrastructure and cannot delete it for you.

Uninstalling the Application removes it from your device but does not delete data on your OpenCode server or cancel a store subscription (cancel through Google Play or the App Store).

Children

The Application is not intended for children under 16 years of age, or such higher age as required by applicable law. The Service Provider does not knowingly solicit data from children or market to them. If you believe a child has provided personal information in connection with Cloud Link, contact [email protected] to request its deletion.

Security

The Service Provider implements reasonable safeguards to protect systems and any data it holds. However, no security system is completely secure, and the Service Provider cannot guarantee absolute security. Protect your device, keep your server credentials private, and use authenticated, encrypted connections to your OpenCode server.

Data breach notification

If a breach occurs involving data held by OpenCode Mobile / Cloud Link, the Service Provider will notify you as required by applicable law. Breaches affecting only your self-hosted OpenCode server are the responsibility of you or your server operator.

Changes

The Service Provider may update this Privacy Policy from time to time. The Service Provider will notify you of material changes by posting the updated Privacy Policy with an effective date. Where required by law, the Service Provider will seek your consent to material changes before they take effect.

Previous versions of this Privacy Policy will be maintained and made available upon request by contacting the Service Provider at [email protected].

This privacy policy is effective as of 2026-10-06

Your consent

By using the Application and, where applicable, the Cloud Link service, you consent to the processing described in this Privacy Policy. If processing is based on consent, you may withdraw that consent at any time without affecting processing carried out before withdrawal. Withdrawing consent for Cloud Link processing means you can no longer use Cloud Link, though direct connections to your own OpenCode server remain available.

Contact us

If you have any questions regarding privacy while using the Application, or have questions about the practices, please contact the Service Provider via email at [email protected].

This privacy policy page was generated by App Privacy Policy Generator