Privacy

In short

Nekoia is published by FRANC MANOUCHERIE LABS, the data controller for the app and for this site. Nothing you say, type or read goes through us, and we hold no key. The only thing we keep is a support conversation, if you start one.

Your voice

Nekoia asks for the microphone and speech recognition for calls: during a call, it listens to what you dictate so it can type it into the terminal. Speech recognition and speech synthesis run on the iPhone, with Apple’s APIs; the language models they need are downloaded from Apple. No recording of your voice is sent to us.

What you dictate

The recognized text is typed, over SSH, into your agent’s terminal on your computer, like a keystroke, and nowhere else. The agent (Claude Code from Anthropic, Codex from OpenAI) runs under your own account with its provider and sends it what you dictate like everything else you type to it, under its own terms: Anthropic’s privacy policy, OpenAI’s privacy policy. We receive none of it.

On your device

• The device key is created in the Secure Enclave and used with Face ID. It never leaves the device.
• Each paired computer and the host key you verified, in the keychain, on this device only.
• Your count of free call minutes, in the keychain, on this device only.
• Your configuration (computers, agents, their folders and their commands): in the app’s private folder on your iCloud Drive when iCloud is on, on the device otherwise. It is kept by Apple under your Apple Account, never by us.

On your computer

The iPhone talks to your computer over SSH, directly, with nothing in between. Pairing adds one line per device to your ~/.ssh/authorized_keys: the device’s public key, restricted to a terminal, tagged nekoia:tty: and the device’s name. Delete it and the device is revoked.

Lines added before the app was called Nekoia are tagged passe-plat:tty:: they are still recognized, and are revoked the same way, by deleting them.

Your password is used once, to add the device’s key to your computer, and is not kept. One exception: if you write a computer into your configuration with profile.<name>.key = ssh-password instead of pairing it, its password is kept in the keychain, on this device only, and is never synced.

The Mac app’s iCloud directory

While it is open, the Nekoia Mac app writes a record of your Mac to your private iCloud database (CloudKit): its name, the addresses where it can be reached (including its .local name), its SSH port, your user name and the fingerprints of its host keys. No password, no private key, no terminal content. Only your devices signed in to the same iCloud account read it; it never goes through us. Your iPhone uses it to fill in the SSH form and recognize your Mac’s host key.

Purchases, Siri, crash reports

• The subscription is sold and managed by Apple, in the App Store (in-app purchase). We see neither your identity nor your payment method.
• If you call an agent with Siri, your request is handled by Apple under its own privacy policy. Your agents’ names are given to Siri on your device, so it can recognize them.
• Crash reports only reach us, through Apple, if you choose to share analytics with app developers in your device’s settings.

Support

If you write to us, the conversation lands in our mailbox, hosted by Google Workspace, and stays there so we can answer you and follow up on your request for as long as that account exists. You can ask for it to be erased at any time.

This site

This site sets no cookie and does not measure visits. Its host, named in the legal notice (in French), may keep technical connection logs, including visitors’ IP addresses, for its security.

Your rights

Under the GDPR, you can access the data we hold about you (in practice, your support conversations), correct it, erase it or object to its processing, by writing to us. You can also lodge a complaint with the CNIL, the French data protection authority (cnil.fr).

Children

Nekoia is not directed at children, and the app collects nothing from anyone.

Changes

Any change to this policy is published on this page, with a new date.

Contact us

matthieu@chamorot.com