Privacy

Last updated: October 17, 2026

Luwu connects your phone to the terminals and coding agents on your own computers. We built it so the things you do in those terminals stay between your devices. This page explains what we do see.

What we never see

Your terminals, files, screen and forwarded ports. Connections between your devices are encrypted end to end (Noise, through libp2p). When a connection goes through one of our relays, the relay forwards encrypted bytes it can't read.
Your private keys. Each computer and phone makes its own key and keeps it. We only certify which account a key belongs to.
Your secrets on disk. Luwu never shares ~/.ssh, cloud credentials or .env files, even with your own devices. See Files.

What we keep, and why

What	Why
Your account: email address, username, and the name you give us (or your name from Google or Apple, if you sign in with them; with Sign in with Apple you can hide your email behind Apple's relay address).	To sign you in and show who you are.
Your devices: each computer's and phone's name, platform, app version, public key, and when it was added and last seen.	To list your computers, issue their certificates and remove devices you revoke.
Network details: the IP address a device or the app last used, the city and country it maps to (from Cloudflare), and the network addresses a computer publishes so your phone can reach it.	To connect your devices, to keep the service secure and to spot abuse.
Usage: per device and day, the bytes our relays carried for you, the number and length of terminal sessions, and how long computers were online.	To show you your usage and, when paid plans start, to bill for it. We count bytes; we can't read them.
Prompts you save in the app.	To sync your prompt library across devices.
Shares: which window you shared, when, for how long, and the name a friend gave when joining.	To let friends in and to end their access on time.
Notification tokens for your phones.	To send push notifications when an agent finishes or needs you.

Notifications are the exception to end-to-end encryption. A notification carries the computer's or window's name and what the agent said or asked, up to a few hundred characters. It passes through our server, which doesn't store it, and through Apple's push service, or Expo's for some builds. If you'd rather keep that text off these services, don't install the hooks (luwu hooks install), or turn notifications off.

Notes you write or save in the app are stored with your account by our account and notes service, and are shown only to you.

Who processes it

Cloudflare runs our API, database and websites, and counts visits to luwu.dev with Cloudflare Web Analytics (no cookies).
Apple delivers push notifications and distributes the app. Expo delivers notifications for some builds.
Hosting providers run our relays in Los Angeles, Hong Kong, Shanghai and Frankfurt. Relays carry encrypted traffic only.
Our account and notes service handles sign-in (email codes, and Apple or Google when you choose them) and stores your notes.
Apple and Google sign you in when you choose Sign in with Apple or Google sign-in.

We don't sell your data or use it for advertising.

How long we keep it

Device records are kept until you remove the device or delete your account.
Usage is kept for billing and your usage history.
Detailed relay samples are deleted after 8 days.
Shares are kept after they end, so you can see your share history.

Your choices

Remove a device in the app (Me → Devices) or with luwu devices. Its certificate stops working within minutes.
Turn notifications off in iOS Settings.
Delete your Luwu data in the app: Me → Settings → Delete account. It removes your computers, devices, prompts, shares and usage at once; your account and notes are then deleted from the account service's settings.
To get a copy of your data, or for help deleting anything, email hello@luwu.dev.

Changes

If we change this policy, we'll update this page and the date at the top. For significant changes, we'll tell you in the app.

Questions: hello@luwu.dev.