# Droidex Privacy Policy

Droidex connects an Android device to a Mac Codex instance through a Mac sidecar and an encrypted relay.

## Data Handled

Droidex may handle:

- Pairing credentials, including relay URL, realm id, Mac device id, and pairing secret.
- Project names and paths received from the paired Mac.
- Thread titles, prompts, responses, tool output, settings, and account or rate-limit summaries received from the paired Mac.
- Optional images or project files that the user explicitly attaches to a Codex request.
- Relay routing metadata, including realm id, device id, IP address, connection timing, and encrypted frame sizes.

## Storage

The Android app stores the saved pairing payload locally with Android Keystore-backed AES-GCM encryption. Background relay status, notification state, and a generated background device id are stored locally in app-private storage. Pairing and relay state are excluded from Android backup and device transfer rules.

The Mac sidecar stores its relay URL and pairing secret in user-only files when installed as a LaunchAgent. Sidecar project aliases, hidden projects or threads, and per-thread mobile settings are stored locally on the Mac.

## Transmission

Prompts, responses, settings, tool output, and attachments are sent between Android and the Mac sidecar inside end-to-end encrypted envelopes. The relay routes these envelopes and does not need access to plaintext Codex contents.

The relay operator may still see operational metadata such as source IP address, connection times, realm ids, device ids, and encrypted message sizes. Users should run the relay themselves or use a relay operator they trust.

## Third Parties

The current app build does not include advertising SDKs or third-party analytics SDKs. Droidex does not sell personal data.

Codex requests are ultimately handled by the user's installed Codex environment and whatever model provider or account that environment is configured to use. Those provider relationships are controlled by the user's Codex setup, not by Droidex.

## User Controls

Users can:

- Remove the saved Android pairing with the Forget saved pairing action.
- Disable background relay listening without deleting the saved pairing.
- Rotate the Mac sidecar pairing secret and re-pair Android.
- Stop or uninstall the Mac LaunchAgent.
- Delete the app to remove local Android app-private data.

## Support

For production publishing, use the same support contact shown in the Play Store listing.