Privacy

What this policy covers

This policy covers the Agentero website (this site), the Agentero desktop app (macOS, Windows, Linux), and the Agentero iOS app. The CLI is a sub-tool of the desktop app and follows the same rules.

What we do not collect

We do not collect, store, transmit, or analyze any of the following on any of our servers:

• Your Vault contents: papers, PDFs, notes, annotations, highlights, translations
• Your library catalog, tags, or bibliographic metadata
• Your search queries, reading history, or notes editor contents
• Your Agent prompts, replies, or session history
• Your account, sign-in credentials, or personal profile (we do not run an account service)
• Crash logs, telemetry, analytics, advertising identifiers, or any device fingerprint

Agentero iOS app

The iOS app is a remote client for the desktop Agentero. It cannot create a Vault on the device, does not run the ACP Agent on the device, and does not store Vault content locally beyond a temporary PDF page cache that is evicted automatically.

• Network: the only network destination is wss://relay.philfan.cn:443. The relay sees opaque X25519 + XSalsa20-Poly1305 frames; it does not decrypt Vault or Agent content. There is no fallback server, no CDN, and no analytics endpoint.
• Camera (NSCameraUsageDescription): the camera is requested only after the user taps Scan QR code to pair with a desktop. A paste-link fallback is always offered, and the camera is not used for anything else.
• Keychain: pairing credentials (X25519 private key, Ed25519 device identity) are stored in iOS Keychain. They never leave the device unencrypted.
• Local network (NSLocalNetworkUsageDescription): declared for use during local development (pnpm tauri ios dev over http://localhost:1420); the production App Store build does not contact the local network.

Agentero desktop app

The desktop app stores your Vault as ordinary files and a local SQLite catalog in the folder you choose. There is no Agentero-hosted sync, backup, or analytics endpoint. The desktop app does contact a small, fixed set of third-party services for the features you opt into:

• Magic import: arxiv.org, doi.org, and any DOI redirector (Crossref, etc.) when you import a paper by URL or identifier. These are standard academic metadata lookups.
• PDF download: the original publisher or preprint server hosting the PDF you are importing.
• Translation: the translation provider you configure under Settings > Translation. Agentero itself does not proxy or store your translation requests.
• ACP Agent: when you invoke an Agent (Claude, Codex, OpenCode, etc.), your prompts and the Vault context you opt into are sent to that Agent over ACP. The Agent is installed and authenticated by you on your own machine; Agentero does not relay them through our infrastructure.
• Bridge (mobile pairing): when the desktop Bridge is enabled, the desktop opens an outgoing WebSocket to wss://relay.philfan.cn:443 and routes the same end-to-end encrypted frames as the iOS app.
• Cloud sync (optional): if you enable Settings > Sync, your Vault is synced directly from your machine to the S3-compatible object storage you configure yourself (AWS S3, Cloudflare R2, MinIO, Alibaba OSS, etc.). Agentero does not host, proxy, or see this traffic; storage credentials stay on your device and transfers require HTTPS. Synced objects are not end-to-end encrypted by Agentero — at rest they are protected by your storage provider's access controls.

This website

The Agentero marketing site does not set first-party cookies and does not run first-party analytics. The Clerk authentication widget used by the /sign-in page may set its own cookies; see Clerk's privacy policy for details. Microsoft Clarity is loaded on the home page for anonymous session replay; see Microsoft's privacy policy.

Children's privacy

Agentero is a research tool. It is not directed at children under 13 and we do not knowingly collect any data from children.

Your rights and your data

Because we do not collect your data, there is nothing for us to delete or export. Your Vault is yours: you can back it up, copy it, move it, or delete it at any time using ordinary file tools. To revoke a mobile pairing, open the iOS app sidebar > Disconnect and on the desktop open Settings > Remote Access > Revoke device.

Changes to this policy

If we change this policy in a material way, we will update the date at the top of this page and post a release note. Non-material changes (typo fixes, clarifications) may happen without a release note. A future release may add on-device crash logs and anonymous usage telemetry, but only to diagnose issues and improve app stability. Such data will never be used for advertising, user profiling, or third-party sharing, and we will update this policy before enabling collection.

Contact

Questions, complaints, or privacy requests: open an issue at https://github.com/poco-ai/agentero/issues, or contact the maintainers through the GitHub organization page.