Privacy policy for the equipe app

In short

The app has no account, no ads, no analytics, no crash reporting, and it does not track you. Your squad's work travels between your phone and your Mac, sealed end to end.

What stays on your phone

These are stored only on your device:

• Pairing keys. Your phone's key pair, the relay token it received when you paired, and your Mac's public key and name. They live in the iOS Keychain, or on Android in storage protected by the Android Keystore. The private key never leaves the phone; the relay token is sent only to the relay, to sign your phone in.
• Camera. Used only to scan the pairing QR code. Images are not saved or sent anywhere.
• Face ID or fingerprint. Your phone checks it before an approval is sent. equipe never receives biometric data.

What the equipe relay handles

Your phone and your Mac both connect to a relay run by equipe-labs at relay.equipe.im. Everything between them is sealed end to end with keys only the two of them hold, so the relay cannot read your tickets, messages or approvals.

• The relay can see that a connection exists, the size and timing of messages, and the random IDs of your Mac and your phone. These are not linked to your name. It keeps only a hash of each token, not the token itself.
• The relay runs on Cloudflare, which as the network provider processes the IP address of each connection.
• We do not use this information to identify or profile you, and we do not sell or share it.

Push notifications

To wake your phone when the squad needs you, the relay sends a push notification.

• Push token. The relay keeps your phone's push token (APNs on iOS, Firebase Cloud Messaging on Android), linked to the pairing and not to your name.
• The visible text says only who needs what. The details travel sealed and are opened on your phone.
• Apple and Google deliver the notification under their own privacy policies. On Android, Firebase Messaging also creates an installation ID for your phone.

Analytics and tracking

The app contains no analytics, advertising or crash-reporting tools, and does not track you across other apps or websites. This policy covers the app and the relay. The website equipe.im counts visits with PostHog without cookies or local storage and builds no person profiles.

Keeping and deleting data

You decide how long a pairing lasts:

• In the app, unpair this device. This deletes the keys from your phone, and the pairing record and push token from the relay.
• On your Mac, run equipe devices remove <name> to revoke a phone at once.
• The relay keeps the push token and pairing record only while the pairing exists.
• On Android, uninstalling the app removes its data. On iOS, Keychain items can remain after an uninstall, so unpair first.

Children

The app is not directed at children, and we do not knowingly collect personal information from them.

Changes

If this policy changes, we update the date above and this page.

Contact

Questions, or a request to delete data: write to the address below or open an issue on GitHub.