Privacy Policy

1. Who is responsible

Uniscale GmbH is responsible for personal data processed to operate Foreman's website and hosted account service. This policy explains the different roles of the Hub, your phone, your machine and external providers. Swiss data protection law applies; GDPR rights and obligations also apply where relevant.

Company identification number: CHE-283.568.747. Commercial register: Canton of Zurich.

Support: support@foreman.pm
Privacy requests: privacy@foreman.pm

Do not send passwords, private keys or source code.

2. The important distinction

The Hub is not a conversation store. It keeps account, machine-directory, integration and billing information rather than your source code, message bodies or artifact files. Conversations are read from the agent on your machine. This does not mean all data stays on your machine or that every connection is end-to-end encrypted.

Your configured model and tool providers receive requests needed for agent work. Connectivity providers can process traffic between your phone and machine. Apple receives push-notification payloads. If you contact support, information you choose to include is also received by us.

3. Information we process

• Accounts and security: name, email, verification state, password hash where password sign-in is used, session records, IP addresses, browser/device information and security events.
• Machines and pairing: machine identifiers, names, addresses, public keys, last-seen times, activation/enrolment records, phone names and public keys, decisions and encrypted device-token handoffs.
• Integrations: GitHub installation and account/organization identifiers, repository metadata processed for listing and access, and connectivity resource identifiers. Repository names may appear in operational logs.
• Billing: an account-correlation UUID, Apple product and transaction identifiers, environment, subscription status, expiry and renewal/revocation information. Apple handles payment; Foreman does not receive your payment-card details.
• Operations and support: request/error information, email-delivery metadata and support correspondence. Hosting and network providers also process technical connection logs.

4. Data on your phone and machine

The phone stores credentials in Keychain, remembered machines and preferences, recovery state for pending actions, and cached images. The companion stores paired-device records, notification preferences, events, notification history, artifact files/notes and uploads. The agent stores its own conversations and workspace data separately.

Dictation is processed on the device; Foreman does not upload the recording for transcription. If you send the resulting text, it becomes a prompt. Selected or captured photos may upload to your connected machine as soon as you select them, before you tap Send. The app re-encodes photos to remove embedded metadata and reduce size. Submitted images can also be retained in the agent's conversation store.

Camera and microphone access are controlled through iOS permissions. The system photo picker gives the app the photos you choose rather than general access to your library. Notification preferences and iOS settings let you limit notifications; notification and Live Activity payloads can contain task titles, questions, requested actions and progress.

5. Why information is used

We process information to authenticate accounts, authorize pairing, maintain your machine directory, deliver requested integrations and notifications, verify subscriptions, provide support and protect the service against abuse.

Where GDPR requires a legal basis, providing requested account and subscription services relies on performance of a contract; security and necessary diagnostics rely on legitimate interests balanced against your rights; legally required records rely on legal obligations. Where processing requires consent, you can withdraw it without affecting prior lawful processing. Device permission controls do not by themselves describe the legal basis for every associated processing activity.

Foreman's current website and app do not include advertising trackers or third-party behavioral analytics SDKs. We do not sell personal data. This does not eliminate necessary authentication, hosting or security logs.

6. Service providers and destinations

• Vercel: website and Hub hosting, delivery and operational logs.
• Neon: hosted account and service database.
• Amazon Web Services / SES: delivery of account emails, including recipient addresses and message contents.
• Cloudflare: DNS and managed tunnel connectivity where configured. Tunnel traffic includes phone-to-machine requests and responses, not just directory information.
• Apple: app distribution, purchases, subscription verification and push notifications. The machine sends notification payloads to Apple; the Hub provides signing authorization rather than relaying those payloads.
• GitHub: optional repository integration. The Hub brokers scoped read-only repository tokens; the machine retrieves source directly.
• Your selected agent, model, tool and hosting providers: receive information according to the features you use and their configuration. Their retention and training policies are their own. Explicit agent sharing may publish a conversation through a separate sharing service.

We may also disclose information where necessary to comply with law, protect rights or investigate abuse. Information may be processed outside Switzerland or your country, including in the United States. Applicable transfers require the safeguards prescribed by data protection law. Contact us for information about the arrangements relevant to your data; we do not promise Swiss-only or EU-only storage.

7. Retention and deletion

Hosted account and service records are retained as needed to provide the service, protect security, handle disputes and meet applicable legal record-keeping requirements. Billing-record obligations can outlast account closure. Expiration of a session, pairing code or entitlement is not a promise of immediate record deletion. Infrastructure logs and backups have separate lifecycles.

Data on your machine depends on your configuration and the agent's own retention. Deleting a conversation does not necessarily delete its artifact versions, notification history, backups or copies already sent to providers. Artifact storage limits are not a universal automatic deletion deadline. Normal companion uninstall preserves local data.

Signing out of the Hub does not unpair devices. Removing a machine from the Hub directory does not revoke every credential on that machine or remove its files. Contact us for hosted-account deletion requests; local machine and provider data require separate action. We may need to verify your identity before acting. Account deletion does not cancel Apple renewal.

8. Cookies and security

The public legal and landing pages do not set authentication cookies or require sign-in. Browser account features use essential authentication/session cookies. Native API clients use credentials rather than browser cookies. These pages do not use advertising cookies.

We use access controls, encrypted transport and protected credential storage. Device-token handoffs are sealed to the requesting phone's key; that safeguard does not make all conversation traffic application-layer end-to-end encrypted. No security mechanism guarantees absolute protection. Protect the machines and provider credentials to which you grant your agent access.

9. Your choices and rights

Depending on the law applicable to you, you may request access, correction, deletion, restriction, portability, or object to processing based on legitimate interests. You can withdraw consent where processing relies on it. Contact our privacy address above and identify Foreman as the service concerned. We will handle requests within applicable legal time limits and explain any lawful restrictions.

You may complain to the Swiss Federal Data Protection and Information Commissioner, or an applicable authority in your country, including your EU supervisory authority where GDPR applies.

Foreman is designed for people administering coding agents and computers, not directed at children. If you believe a child has provided personal information without appropriate authorization, contact us.

10. Policy updates

We may update this policy as the service changes. The revision date identifies this version. Material changes will be communicated as required by applicable law; we will obtain consent where required rather than treating continued use as blanket consent to new processing.