Privacy policy

Your project files and source code, terminal sessions and their history, Git repositories, and Claude Code or Codex conversation files are stored on your PC. wyro does not upload them to its servers.

When your phone is connected, the terminal screen and your keystrokes travel between the two devices through the tunnel described below. They are not stored by wyro along the way.

wyro uses Supabase for sign-in and a small database. Each table is protected by row-level security, so only your account can read your rows. We store:

• Account: your email address and the basic profile your sign-in provider shares, such as your name and user ID (Google, GitHub), or your email-and-password account.
• Computers: each PC's name (its hostname unless you rename it), operating system, last-seen time and current tunnel address, so your phone can find it.
• Guest access, only while you use it: the share code, the guest's access token and the tunnel address.
• Backups, only if you turn them on: encrypted archives of your Claude/Codex transcripts, memories and project list (and settings if you opt in), with their sizes and file counts. They are encrypted on your PC with AES-256-GCM using a recovery key that is never sent to us, so we cannot read them.

Some features rely on third-party services. Each receives only what that feature needs:

• Cloudflare — carries the HTTPS connection between your phone and your PC. Encryption ends at Cloudflare's network, so this traffic is not end-to-end encrypted.
• Google Firebase Cloud Messaging — delivers push notifications. A notification contains the project name and a short excerpt: Claude's last answer, or a summary of its question or permission request.
• Sentry — receives crash and error reports from the desktop and phone apps: the error, app version, operating system, device hostname, memory figures and a short trail of recent app events.
• Anthropic — using your own Claude sign-in, the app checks your usage limits about once a minute and, if automatic session names are on, sends short excerpts of a conversation to Claude to write a title. You can turn naming off in Settings.
• OpenAI — if you use Codex, the app reads your Codex rate limits with your own sign-in. If configured, OpenAI Whisper is a fallback for voice transcription.
• Groq — when you use voice input, the recording, its transcript and your recent terminal commands (as context) are sent for speech recognition and correction.
• Expo — delivers over-the-air updates to the Android app, which checks for them when it starts.
• Google and GitHub — if you sign in with them, under their own privacy policies.

The Android app asks for these only when you use the feature that needs them:

• Notifications — to tell you when Claude finishes or asks something.
• Microphone and speech recognition — for voice input, only while you are recording.
• Photos — to attach an image to a prompt.
• Camera — to scan a guest-access QR code.

To show which sessions are busy and to send notifications, wyro adds hooks to Claude Code's settings file (~/.claude/settings.json). They run locally with Node.js and report only to the wyro app on the same PC.

Preview and tunnel links you create are public addresses: anyone who has the link can open them until you stop them or the tunnel restarts.

This site uses no advertising or tracking cookies. It stores two preferences in your browser: your language choice (a cookie named NEXT_LOCALE) and your theme (local storage). Our hosting provider may keep standard server logs, such as IP address and browser type, for security and operations.

To see in aggregate how often pages are visited, we use Vercel Web Analytics. It uses no cookies and does not track you across other sites. For each page view it records the page address, referring site, country- or city-level location, device type, operating system and browser, only as aggregate statistics. Visitors are told apart by a hash derived from the request that is discarded automatically within 24 hours; the statistics are not linked to your identity or IP address.

Account and computer data is kept while your account exists. You can remove a computer from My Computers, regenerate the guest code to cut off a guest immediately, and turn backups off at any time.

Depending on where you live — for example under the GDPR in the EU or KVKK in Türkiye — you may have the right to access, correct or delete your personal data, or to object to its processing.

wyro is a developer tool and is not directed at children under 16.

When the apps start handling data differently, this page changes with them and the date at the top is updated.