Privacy Policy

1. Controller and contact

Controller: jahirtrap

2. Scope

This policy covers the CConnect app for Android, desktop and the browser, and the backend you install on your own machine

3. Data storage

No server of ours sits in between. The Claude Code CLI keeps the conversations in ~/.claude, and what the app adds on top lives in ~/.cconnect/data on your machine: settings, accounts, the shared folder, the trash and the keys. Neither we nor a third party receive a copy, unless you turn on the backup to your own Google Drive

4. Data we do not collect

It does not collect, share or transmit personal data to servers of ours or to third parties. It carries no advertising, analytics, telemetry or tracking SDK, and there are no accounts of ours and no purchases inside the app

5. Permissions

To do its work it asks for system permissions: files and photos to attach, the microphone to dictate, notifications. What those permissions reach is handled on your device and on your own backend

6. Third-party services

CConnect drives Claude Code, and Claude Code talks to Anthropic. This is what leaves, and only this

Anthropic

Your messages and the files Claude reads go to api.anthropic.com under the account you sign in with, subject to Anthropic's own terms and privacy policy

Updates

The backend asks PyPI and the app asks GitHub whether there is a newer version, and reads the release notes. Those services see your IP address

Service status

The app reads status.claude.com to warn you when Anthropic is down

Tailscale

Only if you use the expose tailnet or expose tailscale modes. The traffic crosses Tailscale's infrastructure under their own terms

Your own providers

If you configure a provider account, your messages go to the address you give it, be it Ollama on your machine or a gateway

Discord

Off by default. Turned on, your activity shows on your Discord profile: the action, the elapsed time, the model, the environment, the project or the chat title, following what you leave enabled. The content of the messages never goes out

Google Drive

Off until you connect an account. The app then keeps the last ten copies of your settings in your own Drive, with your notes if you ask for them, and asks Google for permission over the files it creates there alone, never over the rest of your Drive. A copy carries the tokens, the passwords and the security keys of your environments and of your SSH hosts, so put a password on it: that seals it with AES-GCM before it leaves your device

Dictation

Your system's or your browser's own recogniser transcribes it, under the terms of whoever provides it

Browser

The pages you open see the IP address of the device or of the server, depending on where you open them, and on the device what you type in the bar that is not an address is searched on Google. With the blocker on, the device downloads its lists from easylist.to and ublockorigin.github.io once a day

7. Backend access

The backend is yours and you decide who reaches it: your machine alone, your tailnet alone, or published on the internet behind a token. Publish it and anyone holding that token is in, and the security key opens the terminal and the files git ignores. Keep both the way you would keep the password to the machine

8. Children

The app is meant for a general audience. We do not collect personal data from children

9. Security and retention

We store none of your conversations and none of your files on any server of ours. Should a cloud feature ever arrive, this policy will be updated before it is switched on

10. Your rights and contact

Write with any question about this policy

11. Changes to this policy

We may update this policy for changes in the app or for legal requirements. The version in force is published at this same address, with its date above