afk Privacy Policy

Last updated: 2026-08-09 · Operator: Suil Lee

afk (the “Service”) lets you remotely monitor, approve, and send requests to AI coding agents running on your computer from your phone. This policy explains what information afk collects and how it is used.

1. Information we collect

• Account information: Your email address, name, and unique account identifier when you sign in with Google, Apple, or GitHub. If you choose Apple's Hide My Email, we store the private relay address Apple provides as-is.
• Device information: The device or machine name of connected computers, app installation identifiers, and push notification tokens.
• Work content: Task requests sent from your phone (prompt text), attached images or files, AI agent output, code changes (diffs), summaries, and permission decisions. This content is stored on the server to provide the Service.
• Notification settings: Notification level and, if you configure it, a Slack Webhook URL.
• Sessions: Sign-in session tokens, stored as hashes rather than in their original form.

afk does not collect phone numbers, location, camera, microphone, or contacts data. On iOS, afk requests push notification permission only.

2. How we use information

We use collected information only to provide the Service: sign-in, relaying tasks between your phone and computer, sending notifications, handling permission approvals, and diagnosing errors.

3. Service providers

afk processes data through the following service providers.

• Google: Sign-in (OAuth) and push notifications (Firebase Cloud Messaging).
• Apple: Sign-in (Sign in with Apple) and iOS push notifications (APNs).
• GitHub: Sign-in (OAuth).
• ntfy.sh: Push notification delivery.
• Slack: Notification delivery when you configure a Webhook.
• Railway: Server hosting and database infrastructure.
• Sentry: Error diagnostics when enabled. Sensitive content such as prompts, code diffs, and tokens is masked before transmission.
• PostHog: Product analytics when enabled. Anonymized usage events (which screens and actions are used) to improve the product; message content, prompts, code, and phone numbers are never sent.

afk does not sell personal information or disclose it to third parties except as needed to provide the functions described above.

4. Retention

• Event and task records: automatically deleted after approximately 90 days. Notification delivery records: automatically deleted after approximately 30 days.
• Sign-in sessions: up to 90 days.

If you delete your account, the deletion terms below apply immediately instead of these retention periods.

5. Deletion and your rights

You can delete your account in the app or request deletion by email: [email protected].

Your account and related data stored on the server (including tasks, events, devices, and settings) will be deleted. Session revocation records may remain only as non-identifying hashes for security auditing. Deleting server data does not remove local files installed on your computers; run the uninstall command on each computer. See Support.

6. Data use and security

afk does not use your prompts, code, or other data to train AI models. Collected data is used only to provide the Service.

All communications are encrypted with HTTPS, and stored data is kept on encrypted hosting infrastructure. Session tokens are stored as hashes. Prompts, code diffs, tokens, phone numbers, and similar sensitive content are not written to logs.

7. Contact

Privacy inquiries: [email protected]

afk · Suil Lee · Support