# Privacy policy Updated 3 November 2026. ace is an open-source app that runs coding agents on your own computers. Most of ace never talks to us at all. This policy covers the few services we run: the ace account, the hosted relay, the push gateway for iPhone and iPad, this website (acehq.dev) and the web app (app.acehq.dev). ## The short version - Your code, prompts, transcripts and files stay on your machines. We never receive them. - We never ask for, store or pass on the credentials of your coding agents (Claude, Codex, Cursor and the others). - An ace account is optional. If you create one, we keep your account id, email and name, and a short record of each machine you sign in. - Traffic through our relay is end-to-end encrypted between your devices and your machines. We can't read it. - We don't sell data, show ads, use trackers or train AI models on anything of yours. ## What stays on your machines The ace desktop app and its daemon run on your computers. Your threads, prompts, agent transcripts, code, terminals, worktrees, files and settings are stored there, and never sent to us. Each coding agent runs through its own CLI, signed in with your account at that provider. What the agent sends to its provider (for example Anthropic, OpenAI or Cursor) is governed by that provider's terms and privacy policy, not this one. ace doesn't add a copy on the way. ## Your ace account You need an ace account only to reach your machines through our hosted relay. Everything else in ace, including pairing over your local network or Tailscale and running your own relay, works without one. Sign-in is handled by WorkOS, with an email address, Google or GitHub. When you sign in, WorkOS gives us your account id, email address and name. With Google or GitHub, ace asks only for basic profile access (your name and email address), and uses it only to identify your account and show who is signed in. We don't read your repositories, contacts or anything else in those accounts. Our account database (Cloudflare D1) holds: - Your account id, email address and name. - Your ace sessions, stored only as one-way hashes, so a database copy can't be used to sign in. - WorkOS refresh tokens, encrypted, so your sessions can be renewed. - Sign-ins in progress, which expire after ten minutes and are deleted within the hour. During sign-in, our sign-in page sets one short-lived cookie that ties the sign-in to your browser. It is used for nothing else. ## Machines on your account For each machine you sign in to your account, we store its host id (a fingerprint of the machine's public key), its name, its platform (such as macOS or Linux), and when it was first and last seen. We use this to list your machines in the apps and to make sure only your account's devices can reach them. If you set a machine code on a machine, it is checked by that machine alone, inside the encrypted connection. We never see it. ## The hosted relay When a device and a machine can't reach each other directly, ace connects them through our relay on Cloudflare. The connection is end-to-end encrypted between the two ends, so the relay forwards data it can't read: never your prompts, code, transcripts, files or screens. To route a connection, the relay sees the IP addresses of both ends, the machine's host id, a short-lived signed pass (valid for five minutes) showing that the device and the machine belong to the same account, when the connection opens and closes, and the size of the encrypted messages. It keeps none of this after the connection ends, and it logs no messages, passes or addresses. ## Notifications on iPhone and iPad If you turn on notifications in ace for iPhone or iPad, your machines send alerts through ace's push gateway to Apple's push notification service. Each alert is encrypted on your machine so that only your phone can read it. The gateway sees your phone's push token, the sending machine's public key and IP address, and the time, size and urgency of each alert. It has no database, and it logs only counts and status codes. ## This website and the web app acehq.dev has no analytics, no advertising and no tracking cookies. It remembers your light or dark theme in your browser's storage. To show the newest download, your browser may ask GitHub for the latest release, and GitHub sees that request. The web app at app.acehq.dev runs in your browser and connects to your own machines. It keeps its settings, your ace session and a random device id in your browser's storage. Both sites are served by Cloudflare, which processes visitors' IP addresses to deliver pages and protect against abuse. ## Downloads and updates ace's installers and updates are published on GitHub. When you download ace or the desktop app checks for an update, GitHub receives that request under its own privacy policy. ace sends no usage statistics or crash reports. ## How we use this information Only to run the services above: to sign you in, list your machines, connect your devices to them, deliver your notifications, and protect the services, for example by limiting how many requests one address can make. We don't sell or rent personal information, use it for advertising, or use it to train AI models. ## Who processes it - WorkOS: sign-in and account management. - Cloudflare: hosting for this website, the web app, the account service, its database and the relay. - Google and GitHub: only if you choose to sign in with them. - Apple: delivering notifications to iPhone and iPad. - GitHub: downloads, updates and source code. These providers may process data in the United States and other countries. We share personal information with nobody else, unless the law requires it. ## How long we keep it - Your account and its machines: until you delete them. - Sessions: until you sign out or they expire. - Sign-ins in progress: up to an hour. - Relay connections and notifications: nothing is kept after delivery. ## Your choices You can use ace without an account. You can change your name in Settings, and sign a machine out in its Settings or with `ace logout`. Signing out ends that session at once; a removed device loses access to your machines within five minutes. To see the data we hold about you, correct it, remove machines from your account, or delete your account, email founders@acehq.dev from the address on your account. We delete your account, its machines and sessions from our database, and your user from WorkOS, within 30 days. Depending on where you live, you may have further rights under laws such as the GDPR or CCPA; write to us and we will honour them. ## Security Device-to-machine traffic is end-to-end encrypted, sessions are stored only as hashes, and refresh tokens are encrypted at rest. ace is open source, so you can read exactly what each service does on GitHub. ## Children ace is a tool for software developers and isn't meant for children under 13, or under 16 in the European Economic Area. We don't knowingly collect their information; if you believe we have, email us and we will delete it. ## Changes to this policy If we change what we collect or how we use it, we will update this page and the date at the top. For significant changes, we will also say so on this site or in the app before they take effect. ## Contact Questions about privacy, or a request about your data: founders@acehq.dev. Page: https://acehq.dev/privacy-policy/