Privacy policy

Last updated 2026-09-30. Applies to the Privvy apps for Windows, macOS and iPhone, Privvy Cloud, and this website. Privvy is made by Grimado Global Group LLC.

The short version

• The computer app works without an account and sends nothing anywhere. Your unlock password is stored hashed, on your computer.
• A Privvy account is needed only for the iPhone app. It stores your email, a hashed password, the names of your devices, and your settings encrypted on your computer before upload.
• Screen frames and voice between your computer and your phone are relayed and never stored.
• Camera guard captures sent to your phone are deleted from Privvy Cloud after 24 hours. The originals stay on your computer.
• We do not sell data, show ads, or use tracking in the apps.

The computer app (Windows and macOS)

Without an account, Privvy makes no network connection except to check for its own updates. Everything it keeps lives on your computer: your settings, your unlock password (hashed with scrypt and a random salt, never in plain text), the agent API key, and any camera guard photos and clips in your captures folder. The Telegram feature, if you set it up, sends messages and photos through your own Telegram bot to your own chat.

Privvy account and the iPhone app

When you create an account (from the computer app or the phone app) Privvy Cloud stores: your email address, a hashed password, a name and platform for each signed-in device, the time each device was last seen, and push notification tokens so the phone can be told about an alarm. Your synced settings (unlock password hash, Telegram bot, API key, preferences) are encrypted on your computer with a key derived from your account password before they are uploaded; Privvy Cloud holds only ciphertext and cannot read them.

While your phone watches a computer's screen, frames pass through Privvy Cloud to your phone and are not stored. The same is true for voice in both directions. Remote control input from your phone is relayed and not stored.

Camera guard captures (a photo and a low resolution clip) are uploaded only if you turn on "Send captures to my phone". They are stored for up to 24 hours so your phone can fetch them, then deleted automatically. The full quality originals never leave your computer.

Face ID or your passcode is checked by iOS on your phone. Privvy never receives biometric data.

You can remove a device or delete your whole account, with everything above, from the phone app (Account) or the computer app (Settings, Account & phone). Deletion is immediate.

Where data is kept

Privvy Cloud runs on Cloudflare (Workers, D1 and R2). Data may be processed in any Cloudflare location. Push notifications are delivered through Expo's push service and Apple.

What we never do

• Record you without the camera light on. The light is controlled by the hardware and Privvy does not try to defeat it.
• Let a phone listen without the cover saying so. A notice is shown on the covered screen for the whole time.
• Sell or share your data with advertisers. There is no advertising and no analytics inside the apps.

This website

privvyapp.ai sets no cookies and loads nothing from other companies except Cloudflare, which hosts it. We count how many times each installer is downloaded per day; the count holds the file name and the date, nothing about you. If we add web analytics it will be Cloudflare's cookie-free kind, which does not identify visitors.

Children

Privvy is not directed at children under 13 and we do not knowingly collect their data.

Changes and contact

Changes to this policy are posted here with a new date. Questions: support@privvyapp.ai.