Privacy policy

When you sign in with Google, ghosthand.dev stores your name, email address and profile picture URL, the sessions of your browsers and Macs, and when you signed up. If you subscribe, we store your Stripe customer and subscription ids, status and number of paid Macs. Stripe processes payments; we never see card numbers.

For the plan limits we store a one-way hash of the ids of your free iPhone and your paid Macs, with their names, so the dashboard can list them. The raw iPhone and Mac ids never leave your Mac. If you ask for source access, we store the GitHub username and user id you entered, and GitHub receives an invite for that account.

Screenshots, screen text, typed text, passcodes and phone data are never stored on our servers. The ghosthand daemon on your Mac sends your session token to ghosthand.dev, to check your plan when an agent takes a lease on an iPhone (with the hashed iPhone and Mac ids and their names), and usage telemetry (below).

The exception is the remote MCP server (https://ghosthand.dev/mcp): while your Mac is signed in, the daemon keeps a connection to ghosthand.dev, and MCP calls and their results, including screenshots, pass through it without being stored. We keep only each Mac's name, the tool list (so MCP clients can connect while the Mac is offline), and which MCP clients you allowed.

The daemon and ghosthand.dev send errors and usage events to Strada, so we can fix bugs and see which features are used. Sent: your account id, name and email (with sign-in events), a random install id, ghosthand and macOS versions, command names and counts, lease durations, unexpected error messages and crash stacks. The website also records installer download starts with the release version. Never sent: screenshots, screen text, typed text or file contents.

To turn it off on a Mac:

12touch ~/.ghosthand/telemetry-off
ghosthand daemon restart

Run ghosthand account logout to remove the session from your Mac. To delete your account and its data, email t.de.rossi.01@gmail.com.