Privacy Policy
Last updated: March 16, 2026
1. Introduction
CodeAgent Mobile ("we", "our", or "us") operates the CodeAgent Mobile application (the "App") and the website at www.codeagent-mobile.com (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
2. Information We Collect
2.1 Account Information
When you create an account, we collect:
- Email address
- Display name
- Encrypted password
2.2 Session & Pairing Data
When you pair your mobile device with an IDE plugin, we collect:
- Session identifiers (randomly generated UUIDs)
- Plugin identifiers for session isolation
- IDE type (e.g., VS Code, WebStorm, Cursor)
- Agent type (e.g., Copilot, Claude, Windsurf)
2.3 Prompts & Output Data
When you send prompts through the App, the text of your prompts and the AI agent's responses are temporarily relayed through our servers to enable real-time streaming. This data is:
- Ephemeral — stored only in memory (Redis) during active sessions
- Automatically deleted — cleared when the session ends or expires
- Not persisted — never written to permanent storage or databases
2.4 Device & Usage Information
We may automatically collect:
- Device type, operating system, and version
- App version
- Anonymous usage analytics (via Vercel Analytics)
- Crash reports (via Sentry, if enabled)
3. How We Use Your Information
We use the collected information to:
- Provide and maintain the Service
- Authenticate your identity and manage sessions
- Relay prompts and responses between your mobile device and IDE
- Improve the Service and fix bugs
- Communicate with you about updates or issues
4. Data Storage & Security
We take the security of your data seriously:
- Account data is stored in a secure database with encrypted passwords (bcrypt)
- Session data uses randomly generated identifiers and plugin-level isolation
- Prompt and output data is ephemeral and never permanently stored
- All communications between the App, plugins, and our servers use HTTPS encryption
- Sessions are validated with both session ID and plugin ID to prevent cross-session data leakage
5. Data Sharing & Third Parties
We do not sell, trade, or rent your personal information to third parties. We may share limited data with:
- Vercel — hosting and analytics (Privacy Policy)
- Sentry — error monitoring and crash reporting (Privacy Policy)
- Upstash (Redis) — ephemeral session data relay (Privacy Policy)
6. Camera Permission
The App requests camera access solely for scanning QR codes during the device pairing process. No images or video are captured, stored, or transmitted. The camera is only activated when you explicitly open the QR scanner screen.
7. Data Retention
- Account data — retained until you delete your account
- Session data — automatically deleted when the session ends or after 24 hours of inactivity
- Prompt/output data — ephemeral, cleared immediately after session completion
- Analytics data — retained per third-party provider policies
8. Your Rights
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your account and associated data
- Withdraw consent for data processing at any time
- Export your account data
To exercise any of these rights, please contact us at the email address below.
9. Children's Privacy
Our Service is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last updated" date at the top of this page. Your continued use of the Service after any changes constitutes your acceptance of the new Privacy Policy.
11. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at: