Privacy Policy

Effective Date: March 29, 2026 · Last Updated: May 25, 2026

The Short Version

Aight is a client application. Depending on how you use it, data flows through up to three optional or mode-specific channels: push notifications (opt-in), analytics and error reporting (opt-out), and the Channels relay (only when using Channels / Claude Code mode). All conversation data stays between your device and your own infrastructure. We never see your conversations, files, or AI interactions.

Aight ("the App," "we," "us," or "our") is published by Pangea Roads LLC. This Privacy Policy describes how the Aight iOS application handles your information.

1. Architecture — How Aight Works

Aight has four independent operating modes:

OpenClaw mode — Aight connects directly to your self-hosted OpenClaw (or compatible) instance running on hardware or cloud infrastructure you own and operate. Aight is a client, not a platform. Think of it like a web browser: we built the window, not what's on the other side.

Claude Code mode — Aight connects to your Claude Code instance via the Channels feature, using the aight-channel-plugin and the aight-channel-relay at channels.aight.cool. See §2c for full disclosure of this data flow. Claude Code is a product of Anthropic, PBC. Aight is not affiliated with Anthropic.

Codex mode — Aight connects to your Codex CLI instance via the Channels feature, using the aight-codex-plugin and the same aight-channel-relay. See §2c for full disclosure of this data flow. Codex CLI is a product of OpenAI, Inc. Aight is not affiliated with OpenAI.

Hermes mode — Aight connects directly to your self-hosted Hermes instance. Hermes is a separate open-source AI agent project. Aight is not affiliated with or endorsed by the Hermes project.

In all modes:

We do not have access to your AI model provider accounts or your conversations.
We do not generate, curate, moderate, or have any influence over AI responses or outputs.

The infrastructure we operate:

Push notification relay (push.aight.cool) — A stateless, open-source Cloudflare Worker that forwards notifications from your gateway to Apple/Google push services. Opt-in only.
Channel relay (channels.aight.cool) — A Cloudflare Worker with Durable Objects used in Channels mode to relay messages between your Claude Code instance and the Aight app. Used only when you are actively using Channels mode. See §2c.
Analytics and error reporting — Optional usage analytics (Amplitude) and crash reporting (Sentry). Opt-out via Settings → Preferences.

Everything else — chat, AI, files, voice, memory — remains direct device-to-gateway with zero involvement from us.

Third-Party AI Providers. When you send a message in Aight, it is transmitted from your device to your self-hosted gateway, which forwards it to the AI model provider you have configured (e.g., Anthropic, OpenAI, Google, or others). Aight does not control which provider you use — this is configured entirely by you on your own infrastructure. Your conversations are governed by the terms and privacy policies of your chosen AI provider. Aight does not intermediate, store, or have access to these exchanges.

2. Information We Do NOT Collect

Conversations and messages — All chat messages, AI responses, session history, and conversation metadata remain between your device and your OpenClaw or Claude Code instance. We never see them.
Voice recordings — Audio captured via push-to-talk or conversational mode is processed on-device or sent directly to your configured speech provider. We do not receive, store, or process your voice data.
Files and attachments — Photos, documents, and files you share are sent directly to your instance. We have no access to them.
AI memory and context — Your agent's memory files, personality configuration, skill data, and session context are stored on your infrastructure. We cannot access them.
Biometric data — Face ID and Touch ID are handled entirely by Apple's Secure Enclave on your device.
Message content via analytics — Even when analytics or error reporting are enabled, we never collect conversations, AI responses, files, gateway URLs, tokens, or any content from your instance.

2a. Push Notification Data

Opt-in. Push notifications are entirely optional.
What the relay receives: Device push token (APNs/FCM), notification payload (title + body in rich mode, or empty in private mode), HMAC sendKey for authentication.
What the relay does NOT receive: Conversation history, files, AI memory, user identity.
Storage: Stateless — no database, no logs, no message persistence. Payloads are forwarded and immediately discarded.
Device tokens: Stored on your own gateway (devices.json), not on our servers.
Authentication: Per-device HMAC-SHA256 sendKey prevents unauthorized sends.
Open source: https://github.com/aight-cool/aight-push-relay (MIT license).
Disabling: Settings → Notifications.

2b. Analytics & Error Reporting

Default state: Enabled by default.
Opt-out: Settings → Preferences.
What analytics collects (when enabled): Screen views, feature usage, session duration, interaction patterns — no message content, no PII, no gateway URLs or tokens.
What error reporting collects (when enabled): Crash stack traces, device model, OS version, app version — no message content.
Providers: Amplitude (analytics + Session Replay plugin); Sentry (crash and error reporting).
See §5f and §5g for links to their privacy policies.

2c. Channels Relay Data (Claude Code / Codex / Channels Mode)

This section applies when you use Channels mode to connect to a Claude Code or Codex CLI instance.

What the relay does: The aight-channel-relay (channels.aight.cool) is a Cloudflare Worker with Durable Objects that relays WebSocket messages bidirectionally between the aight-channel-plugin or aight-codex-plugin (running alongside Claude Code or Codex CLI on your machine) and the Aight app on your device.
Session pairing: A one-time 6-digit pairing code (5-minute TTL, single-use) links your phone to your Claude Code session. The relay generates HMAC-SHA256 session tokens for authentication.
Message handling: Messages are relayed in real-time. The relay does not persistently store conversation content. During brief disconnections, up to 10 messages may be buffered in volatile Durable Object memory and delivered on reconnect. These buffers are held in volatile memory only and are not written to permanent storage.
Session lifetime: Sessions are automatically cleaned up after 30 minutes of inactivity. You can explicitly revoke a session at any time.
What the relay does NOT receive: Your identity, AI model configuration, OpenClaw credentials, or any data from OpenClaw mode.
Rate limiting: 3 pair requests per 10 minutes per IP; 5 code attempts per minute per IP; 256KB per-message size limit.
Open source: https://github.com/aight-cool/aight-channel-relay (MIT license). You can self-host your own relay.
Cloudflare: The relay runs on Cloudflare Workers. For EU users, Cloudflare processes data under Standard Contractual Clauses. See §5e.

2d. Subscription Data (Aight Pro)

Processed by Apple. Aight Pro subscriptions are processed entirely by Apple via In-App Purchase. Pangea Roads LLC does not collect, store, or process payment card or banking information.
What Apple provides us: Anonymized transaction receipts and subscription status (active/expired/trial) for the purpose of unlocking Pro features, processed via RevenueCat (see §5h).
Local storage: Your subscription status is stored locally on your device via RevenueCat/StoreKit. It is not transmitted to Pangea Roads LLC servers independently of the purchase flow.
Subscription management: iOS Settings → Apple ID → Subscriptions.

3. Information Stored on Your Device

Aight stores the following data locally on your device only, using on-device encrypted storage (MMKV and iOS Secure Store):

Gateway connection details (OpenClaw mode)
Channels session tokens (Channels mode, if saved for reconnection)
Session metadata — names, star/pin status, unread indicators
App preferences — theme, voice mode, notification preferences
Cached content — temporary caches of session data
Push notification credentials — device token and sendKey (also stored on your gateway)
Subscription status — Aight Pro active/expired/trial state (via RevenueCat/StoreKit)
Analytics and error reporting preferences

This data is stored only on your device. Deleting the app deletes this data.

4. Information We May Collect

4a. Email Address

If you voluntarily contact us for support, submit feedback, or opt in to product announcements, we may collect your email address solely to respond to your inquiry or send updates you have requested. We do not sell, share, or use your email for unsolicited marketing. You may request deletion at any time by contacting us at the address in §12.

4b. Apple-Provided Data

When you download Aight from the App Store, Apple may provide us with:

Crash reports and diagnostics — Anonymized, aggregated, if you have opted in to sharing diagnostics in iOS Settings.
App Store analytics — Aggregated, anonymized download and usage statistics (not individually identifiable).
In-App Purchase receipts — Anonymized transaction data for subscription status verification, processed via RevenueCat.

This data is collected and processed by Apple under Apple's own Privacy Policy.

5. Third-Party Services

5a. Text-to-Speech (ElevenLabs)

If you enable voice responses, AI-generated text may be sent to ElevenLabs for text-to-speech conversion. In OpenClaw mode, this connection is initiated from your OpenClaw instance. Aight does not store or transmit ElevenLabs credentials. See ElevenLabs' Privacy Policy.

5b. AI Model Providers

Your OpenClaw instance (or Claude Code instance) connects to AI model providers based on your configuration. These connections are between your infrastructure and the provider — Aight does not intermediate or have visibility into them.

5c. Apple Services

Local Authentication — On-device via Secure Enclave.
Speech Recognition — On-device processing via Apple's Speech framework.
Push Notifications — If enabled, your gateway sends payloads to push.aight.cool, which forwards to APNs. Opt-in only.
Local Network Discovery — Bonjour (mDNS) for discovering OpenClaw instances on your local network. Local only, no external transmission.
In-App Purchase — Apple processes subscription payments per Apple's Privacy Policy.

5d. Push Notification Relay (Pangea Roads LLC)

Stateless Cloudflare Worker at push.aight.cool. Receives notification payloads from your gateway, forwards to APNs or FCM, immediately discards. No data stored. Open source: https://github.com/aight-cool/aight-push-relay (MIT). Opt-in only.

5e. Cloudflare

Both the push relay and the channel relay run on Cloudflare Workers. Cloudflare may process request metadata (IP addresses, etc.) per their privacy policy. For EU users, Cloudflare processes data under Standard Contractual Clauses per their Data Processing Addendum.

5f. Amplitude (Analytics)

Collects anonymous usage data (screen views, feature usage, session duration) — no message content or PII. Opt-out: Settings → Preferences → Analytics. Amplitude Privacy Policy.

5g. Sentry (Error Reporting)

Collects crash stack traces, device model, OS/app version — no message content. Opt-out: Settings → Preferences → Error Reporting. Sentry Privacy Policy.

5h. RevenueCat (Subscription Management)

Aight uses RevenueCat to manage in-app subscription state, receipt validation, and entitlement checks. RevenueCat assigns an anonymous device identifier ($RCAnonymousID) and processes subscription status, product IDs, purchase timestamps, price, currency, and device metadata on our behalf. No personally identifiable information is shared with RevenueCat. RevenueCat does not receive your conversations, messages, files, gateway credentials, or any content from your OpenClaw or Claude Code instance. Subscription payments are processed by Apple — neither Pangea Roads LLC nor RevenueCat receive your payment card or banking details. See RevenueCat's Privacy Policy.

6. Data Security

All data stored on your device uses iOS encrypted storage (Secure Store for credentials, MMKV for app data).
The channel relay uses HMAC-SHA256 session tokens, one-time pairing codes with 5-minute TTL, rate limiting, and input validation.
The push relay uses per-device HMAC-SHA256 sendKeys.
Communication between Aight and your OpenClaw instance uses the connection method you configure. We recommend HTTPS or Tailscale for remote connections.
We do not maintain a centralized database of user data.

7. Children's Privacy

Aight is not directed at children under 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children.

8. International Users

Data flows that involve our infrastructure:

Push relay: Payloads transit Cloudflare's global edge network (opt-in only).
Channel relay: WebSocket messages transit Cloudflare's global edge network (Channels mode only, not persistently stored).
Analytics and error reporting: Data may be processed in Amplitude's and Sentry's data centers (opt-out available).
Subscription: Processed by Apple and RevenueCat under their respective privacy policies.

No conversation data, files, or AI memory is transferred through our infrastructure.

9. Your Rights and Choices

Deletion — Uninstall the app to delete all locally stored data.
Email removal — Contact us to delete any email address we hold.
Push notifications — Disable in Settings → Notifications.
Analytics opt-out — Settings → Preferences → Analytics.
Error reporting opt-out — Settings → Preferences → Error Reporting.
Channels session revocation — Sessions auto-clean after 30 minutes of inactivity. Explicitly revoke via the channel plugin at any time.
Subscription management — iOS Settings → Apple ID → Subscriptions.
Apple diagnostics — iOS Settings → Privacy & Security → Analytics & Improvements.

10. Changes to This Policy

We may update this Privacy Policy. Material changes will be reflected in the "Last Updated" date and communicated through the app or website. Continued use constitutes acceptance.

11. California Privacy Rights (CCPA)

Pangea Roads LLC does not sell your personal information. We do not share personal information for cross-context behavioral advertising. The limited personal data we may hold (email address for support/inquiries; anonymized subscription data via RevenueCat and Apple) is not sold or shared. California residents may contact us at the address below.

12. Contact

Email: [email protected]
Website: https://aight.cool

Aight is a client application that connects to your self-hosted OpenClaw or Hermes instance, or to your Claude Code or Codex CLI instance via Channels mode. Aight does not provide, host, or operate any AI models, agents, or backend infrastructure. AI responses, behavior, and data handling are determined by the user's own instance configuration, model provider, and API agreements.