Wrist Agent privacy policy

No developer collection through the app

The watch app and PC companion have no developer account, advertising, analytics, telemetry, automatic crash reporting or hosted relay. They do not send us your chat content, prompts, usage history, network addresses or device identifiers. No Firebase or cloud push service is used. We do not sell app data.

Data processed on your devices

After you approve pairing, the companion reads your existing local Codex project names, chat metadata, saved messages and task status. It sends this information directly to your paired watch over encrypted local-network connections. The watch stores connection settings, an encrypted pairing token and a local chat cache. The PC stores imported chat events, project/session metadata, delivery receipts, paired-watch token hashes and its TLS certificate/private key in a separate local folder. Local network addresses are used to make the connection. We do not operate a server receiving this data.

When you separately enable watch replies in PC setup, your chosen instruction is entered into the selected existing Codex desktop chat. Codex processes that instruction using its own services and account. We do not read Codex login credentials, perform account sign-in, or provide inference services. Do not include information you are not authorised to process using Codex.

Optional monitoring and permissions

When you choose Start monitoring, the watch receives task events while the app is closed, shows completion alerts and maintains an ongoing service notification with a Stop action. Notification and foreground-service permissions support this feature. Network permissions connect your devices. No advertising identifier, contacts, location, microphone or camera permissions are requested. A paired PC must remain awake on the same network. Sleep, network changes and operating-system restrictions may delay or prevent alerts.

Retention, removal and security

Local caches remain until you clear or remove them; we do not receive them and cannot erase them remotely. On the watch, Forget PC and clear cache removes this app's saved connection and cached chats. Uninstalling removes the watch app's data. In PC setup, Remove revokes a watch's access but does not erase previously cached watch data or PC history. To erase the companion's local data, stop it and remove the complete %LOCALAPPDATA%\WatchAgentPrivate folder, including database sidecar files, configuration and keys. This does not erase original Codex histories. Those remain subject to Codex's controls.

The app uses TLS with a pinned PC certificate after you compare and approve pairing codes. Pairing credentials are stored using Android Keystore encryption on the watch and token hashes on the PC. Your Windows account and filesystem access controls protect the PC state. Anyone with access to your unlocked devices or local operating-system account may be able to view data. Backups, system diagnostics and notifications are controlled by your operating systems; the app disables Android app backup.

Independent services and website

Google Play handles purchasing and distribution under Google's terms and privacy policy. Your Codex installation and OpenAI services, Wear OS, and your chosen keyboard or dictation provider operate independently. Optional system dictation may send audio to its provider. This policy does not promise that these services keep data only on your devices. Visiting our website creates ordinary requests to Cloudflare. Downloading the PC ZIP creates requests to GitHub, which handles them under its privacy statement. These Wrist Agent pages contain no analytics scripts and are excluded from our website visit collector. Other website pages have a separate notice. Hosting and download requests are not app telemetry.

If you contact support

If you voluntarily email us, we receive your email address, message and any attachments you choose to send. Please do not send private chat histories, pairing tokens or login credentials. We use that information to respond to and resolve your request, relying on our legitimate interests in supporting the product. Cloudflare Email Routing forwards support email to a Gmail mailbox. Cloudflare and Google handle service data under their respective privacy notices. This is separate from the app's direct device connection. No automated marketing or profiling is performed.

Email and hosting providers operate internationally, including in the United States. Their published transfer arrangements include the UK Extension to the EU–US Data Privacy Framework and contractual safeguards where applicable; see Google's transfer notice and Cloudflare's privacy notice for details. This does not mean support email is stored only in the UK or that the app sends chats to those providers.

We delete support correspondence from our mailbox within 90 days after resolution unless a complaint, dispute or legal obligation requires longer retention. Provider backups and security records follow the providers' own retention rules. No purchases are processed in the preview. A future Google Play purchase is handled by Google; this app does not request payment details or include a billing or receipt collection SDK. We will update this notice before introducing different business-record processing.

Your UK data protection rights

For personal information we actually hold through support or necessary business records, you may request access, correction, erasure or restriction, object to processing based on legitimate interests and request portability where applicable. These rights are subject to the conditions in UK law. Contact privacy@defamation.dev. We cannot access data stored solely on your devices. You may complain to the Information Commissioner's Office. The app does not perform automated decisions about you.

Changes

We will update this notice when functionality or data practices change. Any future telemetry, hosted service or different data use would require its own disclosure and review; it is absent from this MVP.