Privacy Policy

Effective 2026-05-27 · Clayrune Android app · v1.x

Short version: The Clayrune Android app collects nothing. It's a thin client to a server you run yourself. No Clayrune backend observes your activity, ever.

1. What you provide to the app

To connect on first launch (typically by scanning a QR code from your own Clayrune dashboard), you supply:

Tunnel URL: the address of your self-hosted Mission Control server (e.g. https://yourname.clayrune.io).
Cloudflare Access service-token credentials (Client ID + Client Secret), used by the app to authenticate every request to your server.

These values are stored locally on your device using Android's EncryptedSharedPreferences, backed by the Android Keystore. They never leave your device except as HTTP headers sent to the tunnel URL you configured.

2. What the app sends, and where

Every request the app makes goes to the tunnel URL you configured. That URL points at a Cloudflare Tunnel that you (or the Clayrune control plane on your behalf) provisioned, which forwards traffic to your own Mission Control server.

The app does not send data to:

Clayrune (us). We do not run a backend that the app talks to.
Analytics services (Firebase Analytics, Google Analytics, etc.).
Advertising networks.
Crash reporting services.

3. Permissions

INTERNET: required to reach your tunnel URL.
POST_NOTIFICATIONS (Android 13+) , used only if you opt in to push notifications from your own server.

The app does not request:

Camera: the QR scanner is provided by Google Play Services in a separate process; the app itself never accesses the camera.
Location, Contacts, Storage.
Microphone, except for the optional dashboard voice-input feature, which is gated behind a runtime prompt; recordings are processed by Android's on-device speech recognizer and never sent to us.

4. Third-party services

The app depends on the following Google Play Services modules that run in their own sandboxed processes outside the app:

Google Play Services Code Scanner (play-services-code-scanner), used only when you tap "Scan QR" on the setup screen. The scanner runs in a separate process; the QR's contents are returned to the app but no image data is transmitted off the device.
Firebase Cloud Messaging (firebase-messaging), used only if you opt in to push notifications. Your device's FCM token is sent to your Mission Control server (the tunnel URL you configured), not to us.

5. Data deletion

You can fully remove all data the app stores by any one of:

Long-pressing the top-left corner of the dashboard for 1.5 seconds to surface the reset dialog and clearing your credentials.
Android Settings → Apps → Clayrune → Storage → Clear data.
Uninstalling the app.

Any of these completely wipes the locally stored tunnel URL and CF Access credentials. There is no off-device data to delete; you control your own server.

6. Children

The app is not directed at children under 13. Because the app collects no data, no special handling for children is needed beyond this disclosure.

7. Changes to this policy

If we ever start collecting data (we don't plan to), we'll publish a new version of this policy at the same URL and bump the "Effective" date above. There is no in-app mechanism to notify you of changes. This is consistent with the no-backend posture.

8. Contact

Questions or concerns: [email protected].