OpenCastor — Privacy Policy
Effective 2026-07-16
Data Not Collected
OpenCastor is local-first. Nothing about you or your robot is collected. OpenCastor sets up a home robot and keeps the receipts on your iPhone. There is no account, no analytics, and no server owned by us in the path. The app finds and commands robots directly over your own local network, and every receipt it stores — including refusals — stays on your device.
What stays on your device (never uploaded)
- Your receipts and audit journal — the signed record of every command and refusal, in a hash-chained journal in local storage.
- Your signing key and settings, generated and stored on the device.
- Robot addresses and pairing details you enter or scan.
What leaves your device, and why
- Direct local-network traffic to your robot. To pair with and command a robot, the app talks to the robot's gateway directly on your local network (by Bonjour discovery or by the address you provide). This goes to your robot, not to us, and carries only the commands you approve.
- Nothing else by default. There is no first-party analytics endpoint, no crash reporting, and no third-party SDK.
The optional organization on-ramp
If you run an organization and already have an ingest key, you may choose to push your own signed journal to your organization's atlas in one explicit step. This is optional and off by default: it happens only when you paste your own key and tap to send, delivering the journal you already hold to the host you named.
No tracking, no analytics, no ads
OpenCastor does not track you, contains no third-party analytics or advertising SDKs, and builds no profile of you. No data is used for tracking as Apple defines it. There is no advertising identifier and no App Tracking Transparency prompt.
Permissions
- Local Network — to find and talk to robots on your own network.
- Camera — only if you scan a robot's pairing QR code; images are processed on-device to read the code and are not stored or uploaded.
Children
OpenCastor is rated 4+ and collects no personal information from anyone, including children.
Data deletion
Because your data lives only on your device, deleting the app removes it.
Contact
Questions about privacy: craigm26@gmail.com