01
How Infinitus Works
Infinitus is a local-first application. The Mac menu bar app, the desktop app, the Linux tray and the iOS app run on hardware you own. Your prompts, source files, agent responses, command output, diffs and conversation history are stored on your own machine and sent to the coding-agent providers you configure — not to the publisher.
There is no hosted Infinitus web application, and using Infinitus does not require an account. A phone connects to a machine you run, over your own local network, your own Tailscale network, or a tunnel you enable. In that default configuration the publisher receives nothing about your work.
Some features cannot work purely on-device — push notifications to a phone that is asleep, for example, must pass through Apple. Those features are optional, described in Section 03, and off until you turn them on.
02
Information Infinitus Handles
Stored on Your Device
Infinitus stores your projects and threads, agent transcripts, checkpoints, connection settings, preferences, drafts and cached file, branch and server metadata locally. Credentials and session tokens use platform-provided protected storage — the macOS and iOS Keychain — where the platform supports it. Information stored only on your device is not collected by the publisher unless a feature you enable transmits it.
Sent to Your Coding-Agent Providers
When you send a prompt, the prompt, the files and attachments you include, and the context the agent requests are transmitted to the provider you selected — Anthropic for Claude Code, or whichever other harness you configure. Those providers process that content under their own terms and privacy policies. The publisher is not a party to that exchange and does not receive a copy of it.
Device Permissions
- Camera. Requested only when you scan a pairing QR code. Frames are processed on your device and are not transmitted or retained.
- Photos and files. Items you pick are read only to preview them or attach them to a request you initiate.
- Notifications. Requested only if you enable agent-status notifications or Live Activities.
- Local network. Used to discover and connect to Infinitus environments reachable from your device.
03
Optional Connected Services
The features below reach infrastructure the publisher operates at infinitus.run. Each is optional. Declining them leaves Infinitus fully usable over a direct connection.
The infinitus.run Site
The website and its download and pairing endpoints run on Cloudflare. As with any website, the server and its provider log request information — IP address, user agent, path and timestamp — to serve traffic and resist abuse. The team invite page carries its payload in the URL fragment, which browsers never transmit to a server.
Sign-in and the Relay (Optional)
If you choose to sign in, an account is created through Clerk, which supplies an identifier,
your email address and any profile information from the sign-in method you select. Signing in
enables the relay at relay.infinitus.run, which exists to deliver push
notifications and to link devices to environments. With it enabled, the relay stores:
- Your account identifier, and the device identifiers, platform and app version of devices you register;
- Apple push tokens for the devices that are to receive notifications;
- Environment links — the label you assigned, the environment's public key, its connection endpoints, and your per-environment notification preferences;
- For each notification delivered: the thread and project titles, the model name, and a short status headline, retained so a phone that reconnects can show current state. This is metadata about a session, not its contents — your prompts, code and agent responses never pass through the relay;
- Delivery records for troubleshooting, and short-lived proofs that secure the connection.
Without sign-in, none of the above exists. Notifications then either come from your own Mac directly, or not at all.
Managed Tunnels (Optional)
If you enable a managed tunnel so a device can reach your machine from outside your network, the connection is carried by Cloudflare. Traffic through the tunnel is encrypted between your client and your own machine.
Diagnostics
Operational traces from the relay go to Axiom, and are used to keep it running and to investigate faults. The mobile app can send traces too, but only when a dataset and token are configured in the build; in the published app both are unset, so it sends none.
App Distribution and Updates
The desktop and Mac apps check GitHub for new releases. The iOS app is distributed through the App Store and may receive updates through Expo. Those providers see the request information that any download involves.
04
How Information Is Used
Information reaching publisher-operated infrastructure is used only to:
- Authenticate you and keep your account secure, if you created one;
- Link your devices and environments, and deliver the notifications you asked for;
- Operate, troubleshoot and secure the site and the relay;
- Investigate abuse, and comply with applicable law.
No Advertising, No Profiling, No Sale
Your information is not sold, not shared for advertising, and not used to build a profile of you. Infinitus carries no analytics SDK and no advertising identifier.
No Training of AI Models
The publisher does not use your information, source code, prompts or agent responses to train artificial-intelligence models. What your chosen provider does with what you send it is governed by that provider's terms — review them.
06
Your Choices
Use Infinitus Without an Account
Local and direct connections need no sign-in. This is the configuration in which nothing about your use reaches the publisher.
Turn Features Off
You can sign out, disconnect environments, disable notifications and Live Activities, turn off managed tunnels, and clear local caches from Settings. Camera, photo, local-network and notification permissions are granted and revoked in your device settings. On the phone, cache controls are under Settings → App → Client Storage.
Your Privacy Rights
Depending on where you live, you may have the right to access, correct, delete or obtain a portable copy of your personal information, or to object to or restrict its processing. Write to the address in Section 13 and those rights will be honored after your identity is verified.
07
Retention and Deletion
Account, device-registration, environment-link and notification records are kept while your account and the relevant feature are active, and for as long as reasonably needed to operate the service, resist abuse and comply with law. Diagnostic traces expire automatically.
To delete your account and the relay data associated with it, email deathemperor@gmail.com from the address on the account. Deleting it does not touch anything held on your own devices or by a coding-agent provider you use — remove that directly or contact those providers.
08
Security
Network connections use encrypted transport. Credentials and session tokens use platform-provided protected storage where available. Connection flows use scoped, proof-bound tokens designed to resist reuse, and authorization headers are redacted from diagnostics. The Security Policy describes this in more detail.
No method of transmission or storage is completely secure. Because most of Infinitus runs on your hardware, securing your devices, environments, credentials and networks is largely in your hands.
09
International Users
The publisher is located in Vietnam, and the service providers listed above operate in the United States, the European Union and elsewhere. Using the optional connected features means information may be transferred to and processed in those countries, whose data-protection laws may differ from those where you live. Where required, lawful safeguards are used for such transfers.
10
Children
Infinitus is not intended for children under 13, and you must be at least 13 to use it. Personal information is not knowingly collected from children under 13. If you believe a child under 13 has provided information, please make contact so it can be removed.
11
Do Not Track
Browser “Do Not Track” signals are not currently answered, because nothing here tracks you across sites in the first place: Infinitus uses no personal information for advertising or cross-context behavioral purposes.
12
Updates to This Policy
This Policy may be updated as Infinitus changes. Revisions are posted at this URL with the dates above updated. Where a change materially affects your rights, additional notice will be given if practicable or where the law requires it. Changes take effect when posted unless stated otherwise.
13
Contact
For privacy questions, deletion requests or anything else about this Policy:
Loc Truong (“deathemperor”)31 Nguyen Van Dau, Binh Loi Trung
Ho Chi Minh City, Vietnam