Cetus

Privacy Policy

Last updated November 13, 2026

This policy covers Cetus, the Mac app, and Cetus Remote, its iPhone companion. In short: we don't collect your data. There are no accounts, no analytics and no advertising, and we can't read what passes between your phone and your Mac.

What we collect

Nothing. Neither app has a sign-in, and neither sends usage statistics, crash reports or identifiers to us or to any analytics or advertising service.

What stays on your devices

How the phone reaches your Mac

Cetus Remote connects to the Cetus app on your own Mac through a relay at relay.cetus.run, hosted on Cloudflare. Everything sent between the two is end-to-end encrypted with the Noise protocol; the keys exist only on your phone and your Mac, so the relay forwards data it cannot read.

The relay stores one thing per paired Mac: a hash of that Mac's relay key, so no one else can claim its address. It keeps no messages and no conversation content. Like any internet service, the relay and Cloudflare see the IP addresses that connect to them.

Permissions on iPhone

Services you connect yourself

Cetus on the Mac runs the agents and models you set up, such as Claude Code, Codex or a model provider you add an API key for. What you send to those services is governed by their own privacy policies. The Mac app also checks GitHub for new versions of Cetus.

Children

Cetus is a tool for software developers and is not directed at children under 13.

Changes

If this policy changes, the new version will be posted on this page with a new date.

Contact

Questions about privacy? Open an issue at github.com/william-jin-cmu/cetus.