Origami Remote · iPhone app
Privacy Policy
Origami Remote collects nothing. This page says what that means in detail: what stays on your phone, what the relay in the middle can and cannot see, what its operator logs, and what reaches Origami Labs, which is nothing that identifies you.
Effective 8 September 2026 · applies to Origami Remote for iPhone and to the phone page served by the hosted relay
What the app is
Origami Remote mirrors a live Origami Coder session from VS Code on your own computer onto your phone. You read the chat, send a prompt, stop a turn and answer a permission request. All the work happens on your computer. The phone only shows what your computer sends it, through a relay that cannot read any of it.
What the app collects
Nothing. The app has no account, no sign-in, no analytics, no crash reporting, no advertising and no third-party software development kit. It never asks for your name, email address or any identifier, and it sends none.
What stays on your phone
- The pairing secret. When you scan the pairing code from your computer, the phone stores the secret in the iPhone Keychain. Your computer stores its copy in the VS Code secret store. It is never sent to the relay or to Origami Labs. "Forget this pairing" in the app's settings deletes it.
- Chat transcripts. The app keeps a cache of recent chat rows so the transcript is on screen the moment you open it. The cache lives on the phone only and is wiped by "Forget this pairing".
- Device key. The app makes a key inside the phone's Secure Enclave to sign your approvals and mode changes. The private half never leaves the phone. Face ID has two optional uses, both switches in the app's settings: unlocking the app when it opens or returns, and confirming approvals. Both are checked by the phone itself; the app never sees your face data.
Permissions, in plain terms
- Camera: used once, to scan the pairing code your computer shows. No picture is stored or sent.
- Face ID: optional, to unlock the app when it opens or returns and to confirm an approval. Evaluated on the device only.
- Network: the app talks to exactly one host, the relay named in the pairing code. It contacts nothing else.
What travels, and how
Every message between your computer and your phone is encrypted end to end before it leaves either device, with a secret delivered once inside the pairing code, combined with a fresh key exchange on every connection. Messages are padded to fixed sizes so their length reveals little. The relay forwards sealed bytes between the two ends and cannot open them. The pairing id the relay uses is derived from the secret, so the relay cannot work backwards to it.
What the relay sees and what its operator logs
The default relay, relay.origamilabs.nl, is a server run by Origami Labs. You can point the app and the extension at a relay you run yourself instead; the relay page explains how. This is the complete list of what the hosted relay handles and keeps:
| Item | Handled | Kept |
|---|---|---|
| Message content, file names, prompts, replies, model names, who you are | Never visible to the relay: it forwards sealed bytes | No |
| The random pairing id | Held in memory while both ends are connected | No. Never written to a log file, by design |
| Sealed messages | Held in memory for at most 90 seconds so a phone that drops off a mobile network can catch up | No. Gone after 90 seconds or a restart |
| Your IP address | Needed to hold the connection open while you are connected | No. Web-server access logging is turned off and the relay program never records it |
| Totals: how many connections, messages and bytes the whole relay carried today | Counted in memory, with no per-user or per-pairing breakdown | Only while the relay runs; reset on restart |
| Service messages ("refused a connection, at the cap") | Written to the server's system log, without a pairing id or address | System logs are rotated by size and kept for a limited time |
The hosting provider of that server (Hetzner Online GmbH, Germany, data centre in Finland) may keep its own network-level records under its own terms, as any hosting provider does. Origami Labs does not receive them.
What Origami Labs receives
Nothing that identifies you. There is no sign-in, so there is nothing to join a pairing id to a person. Origami Labs sees only the relay's aggregate totals described above.
Data sharing and sale
Origami Labs does not sell, rent or share personal data, because it holds none. There is no advertising and no tracking.
Children
The app is a companion to a developer tool and is not directed at children. It collects no data from anyone of any age.
Changes to this policy
If the app ever collects anything, this page changes first, with a new effective date at the top, and the App Store listing points here.
Contact
Origami Labs (eenmanszaak, the Netherlands). Questions about this policy or a request about your data: support@origami.gratis. The general Origami Labs privacy policy covers the desktop products.