Stillchat privacy
Stillchat is an iPhone and iPad app that controls the coding agents on your own Mac. This page says what leaves your device, who gets it, and what we keep.
The short version
- No account with us, no ads, no tracking across apps, and no third-party analytics or crash-reporting tools.
- Your iPhone talks only to your own Mac, through our relay. Every message is end-to-end encrypted, and the relay cannot read it.
- Your AI subscriptions are signed in on your Mac. Your iPhone never holds a model key or a password.
- The app sends us anonymous usage counts with a random install number, never your name, instructions, answers or code. You can turn them off.
How the link works
You pair the iPhone with the Stillchat runner on your Mac by scanning a QR code the runner shows. Each side makes its own keys on the device and keeps the private halves there; on the iPhone they stay in the Keychain for this device only.
Instructions, agent answers, requests to approve, diffs and commands travel between your devices in sealed envelopes (X25519 key agreement and XChaCha20-Poly1305). Our relay at relay.openkrill.app passes the envelopes on and never holds a key that opens one.
What the relay keeps
- A sealed envelope waits in the relay's queue until the other device takes it, at most 7 days, then it is deleted.
- The relay knows the public keys of your paired devices and when an envelope arrived. It cannot see what an envelope holds.
- A pairing offer lives for at most 10 minutes.
- Unpair in the app removes the keys from the iPhone and tells the relay to drop the link.
What stays on your devices
- Your code, your files and what the agents change in them stay on your Mac.
- Your sign-ins to Claude Code, Codex, ChatGPT or OpenRouter stay on your Mac, in files only your Mac user can read.
- The iPhone keeps the pairing keys and the agent runs it has seen. Deleting the app removes them.
What leaves your Mac, and to whom
When you start an agent, the runner on your Mac sends your instruction and the files the agent reads to the AI service you chose: Anthropic for Claude Code, OpenAI for Codex and ChatGPT, or OpenRouter for OpenRouter and Grok. That service's own privacy policy covers this data. We are not part of that connection and see none of it.
Usage counts
Unless you turn them off, your iPhone tells our server when the app opens and when you start an agent. Each count holds only its kind, the time and a random install number made on your device.
- The install number is a random UUID made on your device the first time Stillchat opens. It is not your device's identifier and is not shared with other apps. Deleting Stillchat removes it.
- Our server stores each count with its day and keeps no IP address. We keep counts for up to 13 months, then delete them.
- To stop them, open About and turn off Anonymous Usage Counts. Counts not yet sent are deleted on your device.
- To have counts already sent deleted, write to us with the install number shown under About.
We do not sell or share data with anyone else. We do not use it for advertising.
Children
Stillchat is not made for children under 13, and we do not knowingly collect data from them.
Your rights
Most of your data never reaches us, so you control it on your devices. For anything we hold, write to support@openkrill.app to ask what we have, or to ask us to delete it. We answer within 30 days.
When this page changes, the date at the top changes too.