隐私政策

最后更新:2026 年 9 月 9 日

Sextant(以下简称「本 App」)是一款把你自己电脑上的 AI 编程助手(Claude Code、OpenAI Codex CLI 等)接到手机上远程操控的工具。本 App 本身不内置任何 AI 模型或 AI 服务,也不会直接连接 AI 服务商;真正与 AI 服务商通信的,是你自己电脑上、由你自己安装并登录的命令行工具

本页说明:我们收集什么、怎么收集、用途,以及你的内容会不会被交给第三方 AI 服务

1. 我们(Sextant)收集什么

本 App 不收集、不上传、不存储你的个人信息、代码、对话内容或使用记录到我们的服务器。我们没有账号体系,没有分析后台,没有埋点统计,不做用户画像,也不把你的内容用于任何模型训练。

当你的手机与电脑不在同一局域网、且你使用了我们的可选中转服务时,中转服务器会转发手机与电脑之间的通信 —— 这部分是已加密密文:中转没有密钥,无法解密,也不记录消息内容。

一个例外:「外网访问」与「分享对话」。当你主动把电脑上的某个本地端口(或某个对话的网页版)开成公网链接时,访客与你电脑之间的这条流量不是端到端加密的:两段线路本身都有 TLS(访客到中转走 HTTPS,中转到你电脑走守护进程那条 wss 长连接),但中转看得到内容本身:它解开访客那一侧的 TLS,再重新包起来转给你的电脑。也就是说,和聊天内容不同(那些中转只看得到密文),这里中转经手的是明文。中转不解析、不落盘、不记录,但技术上它有能力看见 —— 所以只分享你愿意让「任何拿到链接的人」看到的东西。分享随时可以关闭,并且最长 24 小时自动过期。

2. 你的内容会交给第三方 AI 服务处理

这是本 App 的核心功能,请务必了解。你在本 App 里发出的内容,最终会由你所选择的 AI 服务商处理。我们在 App 内首次发送前会明确告知并征求你的同意。

会发送什么

发给谁

取决于你在 App 内为该会话选择的引擎:

你选择的引擎接收方对方的隐私政策
Claude Code(默认)Anthropicanthropic.com/legal/privacy
Codex CLIOpenAIopenai.com/policies/privacy-policy

怎么发送的

  1. 手机 → 你自己的电脑:端到端加密(X25519 密钥协商 + AES-256-GCM)。若经过我们的中转服务器,它只转发密文,看不到内容。
  2. 你的电脑 → AI 服务商:由你自己在该电脑上安装并登录的命令行工具发出,使用你自己的账号或 API Key。Sextant 不代理、不经手、不留存这一步的明文内容。

你的控制权

这些服务商如何处理、保留你的数据,以及是否用于模型改进,取决于你与该服务商之间的协议和你在其账号中的设置,请以上表中各自的隐私政策为准。

就我们与之共享数据的第三方而言:上述两家 AI 服务商均已公开承诺对用户数据提供不低于本政策所述的保护水平,其隐私政策见上表链接。除这两家(且仅在你明确同意后)之外,我们不与任何其他第三方共享你的数据 —— 没有分析工具、没有广告网络、没有第三方 SDK。

3. 你的数据在哪里

4. 远程桌面

使用远程桌面功能时,电脑的屏幕画面、系统声音、剪贴板内容,以及你的触控操作,只在你的手机与你自己的电脑之间传输,同样端到端加密。这些内容不会发送给任何 AI 服务商,也不会经过我们的服务器落地。

5. 系统权限

6. 支付

专业版为一次性买断,云中转为可选订阅,均通过 Apple / Google 的应用内购买完成。交易由平台处理,我们不接触你的支付信息。

7. 开源与可验证

本 App 的服务端与中转代码开源,任何人都可以审计上述「零收集」的承诺,甚至自行搭建中转服务器。

8. 儿童

本 App 不面向 13 岁以下儿童,也不会有意收集儿童的任何信息。

9. 数据保留与删除

10. 政策变更

若本政策有更新,我们会修改本页面并更新顶部日期。涉及数据共享方式的重大变更,App 内会重新征求你的同意。

11. 联系我们

有任何隐私相关问题,请邮件联系:[email protected]


Privacy Policy

Last updated: September 9, 2026

Sextant ("the App") lets you remotely operate the AI coding assistants (Claude Code, OpenAI Codex CLI, and others) running on your own computer from your phone. The App itself contains no AI model or AI service and never connects to an AI provider directly; the software that actually talks to an AI provider is the command-line tool on your own computer, which you installed and signed in to yourself.

This page explains what we collect, how we collect it, what it is used for, and whether your content is shared with a third-party AI service.

1. What we (Sextant) collect

The App does not collect, upload, or store your personal information, code, conversations, or usage data on our servers. We have no accounts, no analytics backend, no telemetry, we build no user profiles, and we never use your content to train any model.

When your phone and computer are not on the same local network and you use our optional relay, the relay forwards the traffic between them — and that traffic is already-encrypted ciphertext: the relay holds no keys, cannot decrypt it, and does not log message contents.

One exception: External access and Share chat. When you deliberately expose a local port on your computer (or the web view of one conversation) as a public link, the traffic between the visitor and your computer is not end-to-end encrypted: both legs are themselves carried over TLS (visitor to relay over HTTPS, relay to your computer inside the daemon's wss connection), but the relay can see the content itself: it terminates the visitor's TLS and re-wraps the bytes for your computer. So unlike your conversations — where the relay only ever sees ciphertext — here what passes through it is plaintext. The relay does not parse it, write it to disk, or log it, but technically it is able to see it. So only share what you are willing to let anyone holding the link see. A share can be closed at any time and expires automatically within 24 hours.

2. Your content is processed by a third-party AI service

This is the App's core function; please read it carefully. What you send in the App is ultimately processed by the AI provider you choose. The App discloses this and asks for your consent before the first send.

What is sent

Who receives it

It depends on the engine you selected for that conversation:

Engine you choseRecipientTheir privacy policy
Claude Code (default)Anthropicanthropic.com/legal/privacy
Codex CLIOpenAIopenai.com/policies/privacy-policy

How it is sent

  1. Phone → your own computer: end-to-end encrypted (X25519 key agreement + AES-256-GCM). If it passes through our relay, the relay only forwards ciphertext and cannot see the content.
  2. Your computer → the AI provider: sent by the command-line tool you installed and signed in to on that computer, using your own account or API key. Sextant does not proxy, handle, or retain the plaintext of this step.

Your control

How those providers process and retain your data, and whether they use it to improve their models, is governed by your agreement with that provider and the settings in your account with them. Please refer to their privacy policies linked above.

Regarding the third parties we share data with: each of the two AI providers above publicly commits to protecting user data to a standard no lower than the one described in this policy; their privacy policies are linked in the table. Apart from those two — and only after your explicit consent — we share your data with no other third party: no analytics tools, no ad networks, no third-party SDKs.

3. Where your data lives

4. Remote desktop

When you use the remote desktop feature, your computer's screen, system audio, clipboard contents and your touch input travel only between your phone and your own computer, also end-to-end encrypted. That content is never sent to any AI provider and never lands on our servers.

5. Permissions

6. Payments

The Pro version is a one-time purchase and the cloud relay is an optional subscription, both via Apple / Google in-app purchase. Transactions are handled by the platform; we never see your payment details.

7. Open source & verifiable

The App's server and relay code are open source, so anyone can audit the zero-collection promise above or self-host the relay.

8. Children

The App is not directed at children under 13 and does not knowingly collect information from them.

9. Data retention and deletion

10. Changes to this policy

If this policy changes, we will update this page and the date at the top. For material changes to how data is shared, the App will ask for your consent again.

11. Contact

For any privacy questions, email [email protected]