There is no Remotly server.
Remotly is built so that there is nothing for us to collect. This page says exactly what the apps and the bridge store, where, and which third parties are involved.
Last updated 7 September 2026. Applies to the Remotly apps for iOS and Android and the remotly-bridge software, published by Inference Aftermath Private Limited, Bengaluru, India.
What we collect
Nothing. Remotly has no accounts, no sign-in, no analytics, no crash reporting of our own, no advertising identifiers and no telemetry. We operate no server that the apps talk to. Apple and Google may report crashes and installs to us through their developer consoles under their own policies and your device settings.
What stays on your phone
- The address of your bridge and the bearer token it issued when you paired, kept in the platform’s protected storage (Keychain on iOS, encrypted app storage on Android).
- Your settings (text size, scroll modes per pane, notification preferences) and, on Android, the FCM registration token.
- Terminal frames are held in memory while you look at a pane and are not written to disk by the app.
What stays on your bridge
The bridge runs on your own computer. Its state directory (~/.config/remotly) holds:
- A record per paired device: a name you chose, its platform and app version, the SHA-256 hash of its token (never the token itself), its push token, and which panes it asked to be told about.
- The TLS key and certificate, and the push credentials you placed there.
- Photos you attach from the phone, saved under
~/.local/share/remotly/uploadsso the tool on the desktop can read them. - Logs in your system journal. At the default level they contain no terminal text and no tokens.
What travels, and to whom
- Between your phone and your bridge: terminal frames, keystrokes, prompts, approvals and photos, over TLS WebSockets across your Tailscale tailnet or LAN. Nothing else sees this traffic.
- To Apple (APNs) and Google (FCM): push notifications sent by your own bridge. A notification carries the agent’s name, the pane title and a one-line summary of the dialog or of the agent’s last words. You can turn the summary off (
push.include_excerpt: false); the notification then says only “Approval needed” or “Finished”. Notifications never carry tokens. - To Tailscale: only what Tailscale itself needs to give your bridge a certificate and route your traffic, under Tailscale’s own privacy policy.
Third parties
Apple (TestFlight, App Store, APNs), Google (Google Play, Firebase Cloud Messaging) and Tailscale. Their handling of the data above is governed by their respective policies. We use no other processors.
Children
Remotly is a developer tool and is not directed at children under 16.
Your choices
Everything Remotly stores is yours to delete: uninstall the app, run remotly-bridge devices revoke, or remove the bridge’s state directory. Because we hold no data about you, there is nothing to request from us; write to us anyway if anything here is unclear.
Changes
If the apps ever start talking to a service of ours, this page will say so before that version ships, and the date above will change.
Contact
Inference Aftermath Private Limited, Bengaluru, India · contact@inferenceaftermath.com