HerdrChat · last updated 17 September 2026
HerdrChat has no accounts, no back end, and no analytics. We do not operate a server, so there is no system of ours for your data to reach. The app talks over SSH to a computer you own and administer, using credentials you supply.
Nothing. HerdrChat collects no personal data, transmits nothing to us, and
contains no analytics, advertising, tracking or crash-reporting SDKs. The
app's Apple privacy manifest declares NSPrivacyTracking = false
and an empty set of collected data types, which matches the “Data Not
Collected” label on the App Store.
About this website, which is a separate thing from the app: it does count
visits. Pages here load a self-hosted analytics script from
oa-c.cobanov.run, a server we run ourselves rather than a
third-party service. It records the page address, its title, a coarse device
class (desktop, mobile or tablet), the referring page, and named clicks on a
few links — for example the one to the source repository. It does not
receive anything you type, and there is nothing here to type into.
That script is on this page too, so the sentence above applies to the policy you are reading. Cloudflare's own Web Analytics, which would otherwise be injected automatically, is switched off for this hostname. None of this touches the app: HerdrChat itself ships no analytics and makes no request to us at all, which is what the section above describes and what the “Data Not Collected” label on the App Store reflects.
All of this stays on your phone and is never sent to us:
Removing a host deletes its saved credentials and pinned fingerprint. Use Settings → Erase all data before uninstalling if you want to remove all saved credentials: iOS Keychain entries can survive uninstalling and reinstalling the app. Settings → Clear cached messages clears cached conversations, last-message previews and transcript cursors, without touching your credentials or anything on your machines.
HerdrChat sends your input directly to the machine you configure over SSH. Use a private network such as Tailscale to reach it without opening SSH to the public internet. Your network configuration determines how the host is exposed. Host keys are pinned the first time you connect, and a changed host key refuses the connection rather than silently trusting it.
Agent tools running on that computer, such as Claude Code and Codex, may send prompts, files and other context to Anthropic, OpenAI or another provider you configure. Those tools use your separate accounts and follow their own settings and privacy policies. HerdrChat does not make model API requests itself. The built-in Demo uses local fictional conversations and sends no prompts to a host or AI provider.
If you turn notifications on, your device's Apple Push Notification token is written to a file on your own host over the same SSH connection. A watcher you run there signs a request with your own Apple push key and sends it to Apple. The token identifies your installation of the app so Apple can deliver to it; it does not identify you, and it never passes through any service of ours, because none exists.
HerdrChat is a developer tool and is not directed at children. It collects no data from anyone, including children.
If this policy changes, the date above changes with it. The app is open source and this page lives in the same repository, so any change is visible in the project's history alongside the code it describes.
Questions about this policy: [email protected].
