Privacy Policy

1. Introduction

This Privacy Policy explains how Broski, operated by Muzammil ("we," "us," or "our"), collects, uses, stores, and protects information when you use the Broski mobile application ("App") and related services. By using the App, you agree to the practices described in this Privacy Policy.

Broski is a mobile application that allows you to remotely control AI coding agents running on your personal computer from your mobile device. The App connects to a bridge server you run on your own machine. There is no cloud account or paid subscription.

2. Information We Collect

2.1 Account Information

The App does not require an account. There is no Google Sign-In, Apple Sign-In, or cloud user profile.

2.2 Subscription & Payment Information

Broski is free and open source. It does not use RevenueCat, Stripe, or App Store / Google Play billing.

2.3 Device & Machine Information

• •Device ID — Random UUID generated by us (not a hardware identifier)
• •Machine ID (hash only) — Irreversible hash for license enforcement
• •Platform type & device name — e.g., "iOS", "iPhone"

2.4 Data Stored Locally Only

The following is stored only on your device using encrypted storage and is never sent to our servers:

• •Bridge connection credentials (IP, port, auth token) — iOS Keychain / Android EncryptedSharedPreferences
• •Cached chat sessions and messages (max 50 per session)
• •App settings and preferences
• •TLS certificate fingerprints

3. What We Do NOT Collect

4. How Data Flows

Your code, conversations, and AI interactions flow directly between your devices and the AI providers you configure — they do not pass through our servers.

5. Third-Party Services

• AI Providers (user-configured) — Anthropic, OpenAI
• Tailscale (optional) — Privacy Policy

We do not use any analytics, advertising, crash reporting, or user tracking SDKs.

6. Your Rights

• •Clear local data — Settings > Clear Cache
• •Revoke machines — Remove registered machines from your account
• •Clear local data — Clear cached data via Settings > Clear Cache
• •Uninstall — Removes all app data from your device

GDPR (EU/EEA): You have rights to access, rectification, erasure, portability, restriction, and objection. Our legal bases are performance of contract and legitimate interest.

CCPA (California): You have rights to know, delete, and opt-out of sale. We do not sell your personal information.

7. Children's Privacy

Broski is rated 17+ and is not intended for children under 17. We do not knowingly collect information from children under 13. If we learn we have collected such information, we will delete it promptly.

8. Data Security & Retention

Device data is encrypted via iOS Keychain or Android EncryptedSharedPreferences (AES-256). Server data is encrypted in transit (TLS 1.2+) and at rest. Account data is retained until you delete your account. Locally cached data is retained until you clear it or uninstall.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the date above and providing notice in the App. Your continued use after changes constitutes acceptance.

10. Contact Us

If you have questions about this Privacy Policy or your data:

broskiappp@gmail.com

We will acknowledge requests within 48 hours and respond within 30 days.

App Store Privacy Label Summary