Privacy Policy

Last updated: 11 July 2026

Shubat is a mobile client for the OpenCode coding agent. It connects your phone to a server that you run and control. This policy explains what the app does and does not do with your data.

What the app stores

Connection settings — the address of your server or relay and the pairing token you provide are stored locally on your device (in the OS keychain / app storage) so you don't have to re-enter them. They are used only to connect to your own server.
No account. Shubat has no sign-up, no user profiles, and no login to our services.

What travels over the network

The app communicates with the OpenCode server you point it at. Your prompts, the agent's output, and file contents flow between your phone and your machine.
If you use the optional relay, it forwards the encrypted tunnel between your phone and your machine so you can connect without exposing your machine directly. The relay is a transport: it does not run agent logic, and it is not designed to store your session contents. You can self-host the relay to remove it from the path entirely.
All connections use TLS/HTTPS in transit.

What we do not do

We do not sell or rent your data.
We do not use third-party advertising or ad-tracking SDKs.
We do not collect your source code, prompts, or agent output for our own use.

Diagnostics

The app may report anonymous crash information provided by the operating system (Apple / Google) to help fix bugs. This contains no source code or session contents. Beta builds are distributed through Apple TestFlight and Google Play, whose own privacy terms apply to the distribution.

Your control

Deleting the app removes the locally stored connection settings and pairing token from your device. Because your data lives on your own server, you control its retention there.

Contact

Questions about this policy: fnc12345@gmail.com.