privacy
Void has no accounts, no ads, no analytics and no tracking. Your sessions are encrypted end to end between your phone and your Mac: the servers we run pass them along and cannot read them.
what stays on your phone
The pairing token for your Mac and the keys your phone made when you paired it, kept in the iOS Keychain. The Mac's name. Your settings, which sessions you have opened, the numbers the widget shows, and whether you have Void Pro. None of this is sent to us.
what stays on your Mac
The helper, voidd, keeps a hash of each paired phone's token and the public key it made, its own keys, its configuration and a log. The log never contains tokens, keys, pairing codes, screens or transcripts. If you use Concierge, the Mac also keeps the conversation with it (the last 30 days) and the notes it remembers, and the keys you gave it for the voice services below. You can see and remove paired phones at any time, from the app or with voidd devices.
how your phone reaches your Mac
Your phone and your Mac connect through Void's connection relay, a service we run on Cloudflare at void.elalw.com. When you pair them, each device makes its own keys, and the code you scan lets the phone check that it is talking to your Mac. From then on everything between them (conversations, terminals, screenshots, files, what you type and say) is encrypted on one device and opened only on the other, with the Noise protocol. The relay passes the sealed bytes along. It cannot read them and keeps no copy.
Like any server, the relay sees connection metadata: the network addresses of your phone and your Mac, when they connect, for how long and how much data passes, and an identifier for your Mac's connection, made from its key, that does not name you. It keeps short-lived counters to limit abuse. Cloudflare, as our host, processes request metadata such as network addresses and times under its own policies.
If you use Tailscale, your phone can reach your Mac over your own tailnet instead. We do not run that network, and Tailscale's privacy policy covers what Tailscale processes.
alerts
Alerts are part of Void Pro. When an agent needs you or finishes, your Mac sends the alert to a small relay that we run on Cloudflare. The relay checks your purchase and forwards the alert to Apple's push service, which delivers it to your phone.
The relay receives your phone's push token, a proof of purchase signed by Apple, the kind of alert (needs you, or done) and an encrypted message. The text of the alert, and the identifiers that open the right session, are encrypted on your Mac with a key that only your phone has, so the relay cannot read them. With alert detail set to generic, no session text is sent at all.
The relay does not store any of this. It keeps counts to limit abuse. Apple processes push messages under Apple's policies.
asked first
Before any feature sends your words to OpenAI, Anthropic or TypeSafe, Void shows which service gets what and through what, and asks. Nothing is sent until you allow it. You can withdraw it in Settings, ai services, and the features that use it stop until you allow it again.
voice, part of Void Pro
Void uses the microphone only while you hold or tap the voice bubble, and while a conversation with Concierge is open. iOS shows its orange dot then. Void does not save recordings. In Demo Mode no microphone is used.
Quick commands and dictation (the round bubble at the edge of the screen): your phone's own speech recognizer, which Apple provides, turns what you say into text on the phone. That sound does not leave the phone. Dictated words go into your message box and are sent only when you send them. For a command, the sentence (at most 300 characters), the screen you are on and your sessions' titles, workspaces, agents and states go to your own Mac. If you set up the optional command router on your Mac with your own TypeSafe key, your Mac sends those words to TypeSafe to work out which command you meant. A sentence the Mac cannot place is handed to Concierge, below. A voice can open screens and change a session's model or effort. It can never approve, run, close or send anything: those still need a tap.
Talking to Concierge: while a conversation is open, your phone streams your voice to your Mac, and your Mac sends it to OpenAI's realtime voice service with the OpenAI API key you set on your Mac, then plays the answer back. Your Mac also gives OpenAI what Concierge needs to answer: the recent part of your conversation with it, the notes it remembers, and what its tools look up for you, such as session names, states and short excerpts of a chat. Void asks OpenAI not to store the session; OpenAI processes it under its own terms for API customers. Messages you type to Concierge are answered by Claude Code on your Mac, under your own Anthropic account.
AI on your Mac
Void has no AI service of its own. A few features ask the Claude Code installed on your Mac, under your own account, and they count toward that account's usage: marks on the sessions that wait for you, finding a session by description, names for background shells, suggested replies, and a side question you ask about an agent's words. They are off until you turn them on or ask. Each sends only what it needs, such as a session's last messages or the words you selected, and Void writes down none of what they read.
switching Claude accounts, on your Mac
If you set up account switching in the Void Mac app, your Mac keeps the Claude Code logins you save in its own Keychain, and a list of your accounts (names, email addresses, account identifiers, usage limits and when they reset) with a log of each switch, in your home folder. Logins never leave your Mac: not to your phone and not to us. Your phone shows the accounts, their usage and the switch your Mac suggests, and asks you before your Mac makes it.
purchases
Apple handles every purchase and every payment. We never see your card, your name or your Apple ID. Void asks the App Store whether you have Pro, on your phone.
what Void asks your phone for
- Camera: to scan the pairing code that your Mac shows. Nothing is saved.
- Face ID: if you turn on the lock. iOS does the matching. Void never sees biometric data.
- Photos: only to save a screenshot or video when you choose save. Void cannot read your library.
- Notifications: to deliver alerts, if you allow them.
- Microphone: only while you hold or tap the voice bubble, and while a Concierge conversation is open. See voice, above.
- Speech model: a download from Apple that you start yourself, so that quick commands and dictation are understood on the phone.
what Void never collects
Your name, email, contacts, location, advertising identifier or usage analytics. Void contains no third-party analytics, advertising or crash-reporting code.
your choices
Unpair a phone in Settings and the Mac forgets it. Leave voice and the AI features off, or turn them off again in Settings. Delete the app and everything on the phone goes with it. There is no account to delete because there is no account. To ask about anything else, write to support@loopware.app.
If you are in the European Economic Area or the United Kingdom, Loopware LLC is the controller for the connection relay and the alert relay. We process connection metadata only to connect your devices, and the push token and the proof of purchase only to deliver the alerts you asked for. You can ask us to access, correct or erase anything we hold about you, and you can complain to your data protection authority.
children
Void is a developer tool and is not directed at children.
changes
If this policy changes in a way that matters, the date at the top changes and the app says so on its next update.