Tailscode Privacy Policy

Who we are

Tailscode is published by Midgar Oy, a company in Finland, which is the controller of the information described on this page. You can reach us at support@midgarcorp.cc.

What we never collect

Your conversations, prompts, answers, diffs, code and files travel directly between your device and the machines you run, over your own WireGuard-encrypted Tailscale network. They never reach us, and we run no server that sits between you and your machines.

• No chats, prompts, code, files, pictures or clips.
• No server addresses, passwords or API keys: they stay in the Keychain on your device and are sent only to the servers you configure.
• No location, contacts, browsing or search history, health data or financial information.
• No diagnostics: the log stays on your device (see Diagnostics below). The app never starts MetricKit collection and contains no third-party analytics or crash-reporting software.

No tracking, no advertising

Nothing Tailscode collects is used to track you, to show advertising or to build a profile of you, and nothing is sold or shared with a data broker. The app does not ask for tracking permission, its privacy manifest declares no tracking and no tracking domains, and it has no advertising.

Which copies collect

The App Store apps, the iPhone and iPad app and the Mac App Store app (and their TestFlight builds), create the Midgar ID, the App Attest key and the purchase reports above, because they sell Pro and the tips. The widget and the notification extensions hold no Midgar ID and send nothing.

The Linux app and the direct Mac build, which is not on the App Store, collect nothing. They sell nothing, create no Midgar ID and start none of Midgar’s services.

The Midgar ID and App Attest

The first time an App Store copy starts, it asks our server at api.midgarcorp.cc for a Midgar ID: a random identifier, and a random secret that proves the ID is yours. The server keeps the ID, a hash of the secret and the date it was created. The app keeps the ID and the secret in your iCloud Keychain, so the same ID follows you across your own devices and across Midgar’s other apps.

When the ID is created or joined, the app asks Apple’s App Attest service to confirm that the request comes from a genuine copy of Tailscode. We receive Apple’s attestation and keep its key id with the Midgar ID, and learn nothing else about you or your device. The ID is never sent with your conversations, code or files.

Purchases

Pro and the tips are bought through Apple In-App Purchase. Apple handles payment and billing, and we never receive your card details or your Apple Account details. When you buy or restore, the app sends the Midgar ledger the signed transaction record Apple has already issued (which product, the price, the dates, whether it was refunded, the order identifiers and your App Store country) together with your Midgar ID. The ledger keeps these records so that Pro is recognised on your iPhone, iPad and Mac, and so that Midgar can keep its financial records for as long as the law requires.

If our servers cannot be reached, StoreKit alone decides, so a purchase still completes and Pro still unlocks.

Your Midgar and More Apps

Settings has a screen that shows what you own in Midgar’s other apps and suggests our other apps. Opening it downloads the app list from a catalogue service we run on Cloudflare, and the artwork and current prices from Apple’s servers; your App Store country is sent so prices are right for your region. The Midgar ID is sent as a sign-in token only with the request that lists which Midgar apps you already use.

The app also reports which tiles were shown and tapped, as the anonymous counts described above. That report carries no identifier of any kind and not your Midgar ID. Like any web service, Cloudflare may keep standard request logs, such as your IP address, for a limited time. We use them for nothing else.

Your servers and your network

Server passwords are stored in the Keychain and sent only to the servers you configure. The optional Tailscale API token, used for server discovery, is stored in the Keychain and sent only to api.tailscale.com to list your own devices.

Your agent still talks to its own model provider the way it always did; that part is between you and them. If you enter your own keys to read usage or quota from Ollama or DeepSeek, or to use Google’s services, the app calls those providers directly from your device. We do not see those requests or the keys. If you use Game Center trophies, Apple keeps them under Apple’s policy.

Push notifications and Live Activities

Live Activity push tokens are registered only with your own claude-bridge server. If that server holds an Apple push key, it sends Lock Screen updates through Apple’s push notification service (APNs), carrying the conversation’s title, its phase and tool counts. Nothing about this passes through Midgar.

When a turn ends while the app is closed, the notification is raised on your device after a background request answered by your own server over your tailnet, not through Midgar or Apple.

Diagnostics

A diagnostic log file, tailscode.log, stays on your device. It leaves only if you export it, share it or mail the diagnostic summary yourself. Read it first: nothing is sent unless you send it. If you have chosen in iOS to share analytics with app developers, Apple may give us anonymous crash and usage reports, which contain nothing we can link to you.

How long we keep data

• Your conversations, code and files: not kept by us at all. They live on your machines and in your device’s own storage.
• The Midgar ID record, its App Attest key id and your purchase records at Midgar: until you ask us to delete them.
• Purchase records at Apple: kept under Apple’s policies.
• The anonymous More Apps and purchase counts: kept as running totals, as long as they are useful for measuring our own promotion. They are not linked to you, so they cannot be deleted per person.

Deleting your data

Delete the app to remove everything stored on that device. The Midgar ID itself is kept in your iCloud Keychain, so it can outlive the app. To have your Midgar ID and the purchase records tied to it erased from our server, email support@midgarcorp.cc, tell us the app and the approximate date of your first purchase, and we will help you do it. We delete the server records, but we cannot change Apple’s own records, and we cannot refund a purchase: do that through Apple.

Your rights

Where privacy law, such as the GDPR, gives you rights to access, correct, erase, restrict or move information about you, or to object to its use, contact us and we will help. We process the Midgar ID, the App Attest key id and the purchase records to provide, account for and support the purchases you make and to recognise Pro on your devices, and the anonymous counts in our legitimate interest in measuring our own promotion. Processing takes place in the European Union and the United States, by Cloudflare as our hosting provider. You may complain to your local data protection authority; in Finland that is the Office of the Data Protection Ombudsman (tietosuoja.fi).

Children

Tailscode is a tool for developers and is not directed at children. We do not knowingly collect personal information from anyone, including children.