Summary
The data Foreman works with is stored only on your computer, your devices and your cloud account (your iCloud or an app-only folder in your Google Drive). The developer cannot receive or see it.
- There is no sign-up. We don’t ask for your name, email address or phone number.
- No advertising identifiers, analytics or tracking SDKs.
- All data travels between your devices end-to-end encrypted, and the developer stores and reads nothing.
Information the developer collects
None. The developer runs no relay, logging or account servers, so none of your information is sent to the developer.
Data the app handles and where it is stored
The app needs the data below to work. All of it is stored only in places you control.
- Session output and history (an agent’s terminal output, conversation and changes): on the computer where the agent runs (the host). Only when your device can’t reach the host directly is your cloud account used as a mailbox.
- Cloud mailbox: your iCloud (CloudKit private database) for iPhone, iPad, Mac and Apple Watch; an app-only folder in your Google Drive for the Android and Windows apps. The app-only folder holds only files Foreman created; Foreman does not see your other files. What passes through the mailbox is end-to-end encrypted too.
- Approval requests and questions: on your computer and devices, and in the cloud mailbox above.
- Pairing details and API keys: in the keychain (or the operating system’s secure storage) of your devices and computer. Agent API keys stay on the computer where the agent runs. Your phone issues the host’s access and hands it over through an encrypted channel; it does not depend on the host computer’s iCloud sign-in.
- Settings and approval rules: on your devices and in your cloud account.
Data stored in your cloud account is subject to that service’s terms and privacy policy (Apple iCloud, Google Drive).
Communication with other services
- Apple: iPhone, iPad, Mac and Apple Watch use iCloud (CloudKit), push notifications and App Store payments. Notifications on Apple devices are sent by Apple directly, through a subscription registered in your iCloud.
- Google: the Android and Windows apps use an app-only folder in your Google Drive as the mailbox. Payments in the Android app are processed by Google Play.
- Microsoft: the Windows app is distributed and paid for through Microsoft Store.
- Public STUN servers (stun.cloudflare.com, stun.l.google.com): used only to learn your public IP address while finding a direct route between your devices. No session content is sent. Each operator’s own policy applies.
- Agent providers: agents such as Claude Code, Codex and Gemini CLI run on your computer because you start them, and they talk to their own services under their providers’ terms and privacy policies. Foreman does not intercept their traffic or send data on their behalf.
Crash reports and diagnostics
The app contains no crash-reporting tool of its own. The only crash information the developer receives is what each store (App Store, Google Play, Microsoft Store) provides by default, and only if you agreed in your device settings to share it with developers. It does not identify you.
Payments
Subscriptions are processed by the store you subscribe through (App Store, Google Play, Microsoft Store). The developer receives no payment or billing details. The directly downloaded Mac app checks your subscription by reading the App Store–signed record from your iCloud.
Retention and deletion
Data stays on your computer, your devices and your cloud account until you delete it. On the Free plan, session history older than 7 days is deleted automatically. Deleting the app removes its data from that device. Data left in iCloud can be removed on iPhone: open Settings, tap your name, then iCloud and Manage Account Storage, and choose Foreman. The app-only folder in Google Drive is removed under Manage apps in Google Drive settings, by deleting Foreman’s hidden app data. Session history on the host is deleted in the host app’s settings.
This website
This website is served by GitHub Pages. It uses no cookies, no analytics and no external font services. GitHub may process access logs (such as IP addresses) to operate its service, under the GitHub General Privacy Statement.
Children
Foreman is a tool for software developers and is not directed at children under 13. The developer collects no personal information from anyone, including children.
Changes to this policy
If this policy changes, the new text and its effective date will be posted on this page. You can see every change in the GitHub repository.
Contact
For questions about privacy, open an issue on GitHub Issues. Please don’t put personal information in a public issue.