最后更新:2026 年 9 月 9 日
Sextant(以下简称「本 App」)是一款把你自己电脑上的 AI 编程助手(Claude Code、OpenAI Codex CLI 等)接到手机上远程操控的工具。本 App 本身不内置任何 AI 模型或 AI 服务,也不会直接连接 AI 服务商;真正与 AI 服务商通信的,是你自己电脑上、由你自己安装并登录的命令行工具。
本页说明:我们收集什么、怎么收集、用途,以及你的内容会不会被交给第三方 AI 服务。
本 App 不收集、不上传、不存储你的个人信息、代码、对话内容或使用记录到我们的服务器。我们没有账号体系,没有分析后台,没有埋点统计,不做用户画像,也不把你的内容用于任何模型训练。
当你的手机与电脑不在同一局域网、且你使用了我们的可选中转服务时,中转服务器会转发手机与电脑之间的通信 —— 这部分是已加密密文:中转没有密钥,无法解密,也不记录消息内容。
一个例外:「外网访问」与「分享对话」。当你主动把电脑上的某个本地端口(或某个对话的网页版)开成公网链接时,访客与你电脑之间的这条流量不是端到端加密的:两段线路本身都有 TLS(访客到中转走 HTTPS,中转到你电脑走守护进程那条 wss 长连接),但中转看得到内容本身:它解开访客那一侧的 TLS,再重新包起来转给你的电脑。也就是说,和聊天内容不同(那些中转只看得到密文),这里中转经手的是明文。中转不解析、不落盘、不记录,但技术上它有能力看见 —— 所以只分享你愿意让「任何拿到链接的人」看到的东西。分享随时可以关闭,并且最长 24 小时自动过期。
这是本 App 的核心功能,请务必了解。你在本 App 里发出的内容,最终会由你所选择的 AI 服务商处理。我们在 App 内首次发送前会明确告知并征求你的同意。
取决于你在 App 内为该会话选择的引擎:
| 你选择的引擎 | 接收方 | 对方的隐私政策 |
|---|---|---|
| Claude Code(默认) | Anthropic | anthropic.com/legal/privacy |
| Codex CLI | OpenAI | openai.com/policies/privacy-policy |
设置 → AI 数据使用 查看已同意的服务商并撤回同意;撤回后再次发送会重新征求同意;这些服务商如何处理、保留你的数据,以及是否用于模型改进,取决于你与该服务商之间的协议和你在其账号中的设置,请以上表中各自的隐私政策为准。
就我们与之共享数据的第三方而言:上述两家 AI 服务商均已公开承诺对用户数据提供不低于本政策所述的保护水平,其隐私政策见上表链接。除这两家(且仅在你明确同意后)之外,我们不与任何其他第三方共享你的数据 —— 没有分析工具、没有广告网络、没有第三方 SDK。
使用远程桌面功能时,电脑的屏幕画面、系统声音、剪贴板内容,以及你的触控操作,只在你的手机与你自己的电脑之间传输,同样端到端加密。这些内容不会发送给任何 AI 服务商,也不会经过我们的服务器落地。
专业版为一次性买断,云中转为可选订阅,均通过 Apple / Google 的应用内购买完成。交易由平台处理,我们不接触你的支付信息。
本 App 的服务端与中转代码开源,任何人都可以审计上述「零收集」的承诺,甚至自行搭建中转服务器。
本 App 不面向 13 岁以下儿童,也不会有意收集儿童的任何信息。
设置 → 存储 里清除;卸载 App 会一并删除。设置 → AI 数据使用 撤回对某家 AI 服务商的同意,撤回后不再向其发送任何内容。若本政策有更新,我们会修改本页面并更新顶部日期。涉及数据共享方式的重大变更,App 内会重新征求你的同意。
有任何隐私相关问题,请邮件联系:[email protected]
Last updated: September 9, 2026
Sextant ("the App") lets you remotely operate the AI coding assistants (Claude Code, OpenAI Codex CLI, and others) running on your own computer from your phone. The App itself contains no AI model or AI service and never connects to an AI provider directly; the software that actually talks to an AI provider is the command-line tool on your own computer, which you installed and signed in to yourself.
This page explains what we collect, how we collect it, what it is used for, and whether your content is shared with a third-party AI service.
The App does not collect, upload, or store your personal information, code, conversations, or usage data on our servers. We have no accounts, no analytics backend, no telemetry, we build no user profiles, and we never use your content to train any model.
When your phone and computer are not on the same local network and you use our optional relay, the relay forwards the traffic between them — and that traffic is already-encrypted ciphertext: the relay holds no keys, cannot decrypt it, and does not log message contents.
One exception: External access and Share chat. When you deliberately expose a local port on your computer (or the web view of one conversation) as a public link, the traffic between the visitor and your computer is not end-to-end encrypted: both legs are themselves carried over TLS (visitor to relay over HTTPS, relay to your computer inside the daemon's wss connection), but the relay can see the content itself: it terminates the visitor's TLS and re-wraps the bytes for your computer. So unlike your conversations — where the relay only ever sees ciphertext — here what passes through it is plaintext. The relay does not parse it, write it to disk, or log it, but technically it is able to see it. So only share what you are willing to let anyone holding the link see. A share can be closed at any time and expires automatically within 24 hours.
This is the App's core function; please read it carefully. What you send in the App is ultimately processed by the AI provider you choose. The App discloses this and asks for your consent before the first send.
It depends on the engine you selected for that conversation:
| Engine you chose | Recipient | Their privacy policy |
|---|---|---|
| Claude Code (default) | Anthropic | anthropic.com/legal/privacy |
| Codex CLI | OpenAI | openai.com/policies/privacy-policy |
Settings → AI data use; after withdrawal, the next send asks again;How those providers process and retain your data, and whether they use it to improve their models, is governed by your agreement with that provider and the settings in your account with them. Please refer to their privacy policies linked above.
Regarding the third parties we share data with: each of the two AI providers above publicly commits to protecting user data to a standard no lower than the one described in this policy; their privacy policies are linked in the table. Apart from those two — and only after your explicit consent — we share your data with no other third party: no analytics tools, no ad networks, no third-party SDKs.
When you use the remote desktop feature, your computer's screen, system audio, clipboard contents and your touch input travel only between your phone and your own computer, also end-to-end encrypted. That content is never sent to any AI provider and never lands on our servers.
The Pro version is a one-time purchase and the cloud relay is an optional subscription, both via Apple / Google in-app purchase. Transactions are handled by the platform; we never see your payment details.
The App's server and relay code are open source, so anyone can audit the zero-collection promise above or self-host the relay.
The App is not directed at children under 13 and does not knowingly collect information from them.
Settings → Storage, and uninstalling the app removes them all.Settings → AI data use; after that, nothing further is sent to them.If this policy changes, we will update this page and the date at the top. For material changes to how data is shared, the App will ask for your consent again.
For any privacy questions, email [email protected]