CrookPrivacy Policy
Crook for Herdr (the "App")
Crook connects only to your own Mac. The developer runs no accounts, analytics or ads and does not collect your data. When the encrypted relay is used, it passes data it cannot read.
1. What the App sends, and where
- The App exchanges terminal screens, agent conversations, your instructions, photos you attach and settings only with the Mac you paired (where the Crook plugin runs).
- It connects over Tailscale, your local network, or the relay described below. On the local network and the relay, data is end‑to‑end encrypted with your Mac's key.
- Pairing keys are stored in the iOS Keychain on this device only. On the Mac, only a hash of each key is stored.
2. The relay (crook-relay.algorist.jp)
- When Tailscale and the local network are not available, the App and your Mac connect through a relay run by the developer on Cloudflare.
- The relay only forwards encrypted data. It cannot read and does not store the content.
- To enforce fair-use limits, the relay keeps per-Mac usage counts (minutes, bytes, messages) for the current day and briefly counts connections per IP address. Cloudflare processes IP addresses to run the service (Cloudflare Privacy Policy).
3. Notifications
- When the App is in the background, your Mac sends notifications directly through Apple Push Notification service. The notification title (for example the workspace and conversation title) passes through Apple. Terminal content is not sent.
- The developer does not receive your device token or notifications.
4. Permissions
- Camera: to scan the QR code shown by Herdr and to take photos you choose to send to an agent.
- Microphone and speech recognition: to turn your speech into text. Recognition runs on the device.
- Local network: to connect to your Mac on the same Wi‑Fi.
- Notifications: to tell you when an agent is waiting for you or has finished.
5. Data the developer collects
- None. The App has no accounts, analytics, advertising or tracking.
6. On your Mac
- Photos you send are saved on your Mac (in
~/.config/crook/uploads) so the agent can read them, and are deleted after one week.
7. Contact by email
- If you email us, we use your address and message only to reply.
8. Children
- The App is not directed at children.
9. Changes
- We will announce changes to this policy on this page.
10. Contact
- Algorist
Email: support@algorist.jp
Effective: November 8, 2026