Scope and contact

This policy covers the Cowork iPhone and iPad app, maintained by the Cowork project. Desktop and website processing is described separately below. For privacy questions or requests, use our support page.

Your computer runs the work

Cowork connects to a computer you pair, either on a trusted local network or through a relay you configure. Messages, selected attachments, commands and approval answers are sent to that computer. The computer sends authorized conversations, task status, files and results back to the app. The connection uses HTTPS with trust limited to the paired computer. A configured relay forwards encrypted traffic; its operator can process connection metadata such as IP addresses, timing and traffic volume under its own policies. Cowork does not provide an official hosted session relay or cloud conversation storage. You choose and operate the computer, model services and any relay.

Model services and other tools

Your computer may send prompts, conversation context, selected images, files and tool results to the AI service configured there. A local model can process requests locally; a hosted provider receives the data needed for its requests. Tools and integrations may also contact services as part of the task. These providers apply their own privacy and retention policies and may process data in other countries. Review the selected service and the information you send. The mobile app does not include a Cowork-hosted AI account or model quota. Before sending new task content, the app asks you to review data sharing with the paired computer and its reported model connections. These displayed names do not identify every tool or destination; review the actual configuration and policies on your computer. Starting with build 37, your choice is stored securely on the device for that paired computer and remains effective across app restarts. Earlier builds keep permission for the current app process. Ordinary reconnections and switching between the computer's configured local and relay routes do not require another agreement. Changes to pairing, the configured relay or reported AI services require another review. You can withdraw permission in Settings. Withdrawal stops further new-task and attachment sending from the app; it does not cancel tasks already running or erase data already sent.

Information stored on your device

The app keeps pairing credentials, computer trust information and records needed to reconcile pending actions in device-only secure storage. Earlier builds also keep drafts there. Starting with build 39, complete drafts are encrypted in the app’s private document files, with their key and file pointers in device-only secure storage. Existing drafts are migrated only after the encrypted copy is saved. Drafts are not subject to the shared cache’s expiry or eviction policy. Language preferences are also saved locally. Before build 38, received session content is held in memory for display. Starting with build 38, the app also caches loaded conversation text, images, attachments and workspace file previews on this device. The shared cache is encrypted with a key held in device-only secure storage, limited to 2 GiB (2,147,483,648 bytes), and expires 60 days after each entry is written. Expired entries are removed when the app next reads or maintains the cache; cleanup cannot run while the app is inactive. Capacity limits can remove older entries sooner; iOS can also purge this cache. Only content already loaded is cached, within the app’s existing file-size and preview limits. Reopening a conversation first displays eligible cached history and then synchronizes current content. Cached data remains scoped to its paired computer and current access; opening attachments and workspace files checks current authorization and file metadata. Files you explicitly preview, export or share can create local temporary copies. Before build 39, the app keeps at most three shared temporary files. Starting with build 39, there is no cumulative file-count ceiling, and identical exports reuse an existing file. Each file remains limited to 10 MiB; use the app’s clear control to remove temporary exports. Copies saved to another app or Files are controlled by you and that destination.

Permissions you control

Local network access connects to your computer. Camera access scans pairing codes or takes a photo when you use those features. The photo and document pickers let you select attachments. You can decline or change permissions in iOS Settings; the related feature may then be unavailable. The app does not need your contacts, precise location or an advertising identifier.

Optional task notifications

When you enable notifications for a paired computer and allow them in iOS, the app sends its native Apple push token, language and push environment to that computer. The computer stores the registration using system-protected encryption. Delivery uses the relay you configured and Apple Push Notification service. The relay and Apple receive the token, generic event type, language and opaque routing identifiers needed to open the relevant conversation; notification payloads contain no conversation text or files. Cowork does not use Expo Push Service.

Registrations are limited to the current device access grant and expire after seven days unless renewed while connected. You can turn notifications off for a computer while connected, or revoke the mobile device from desktop Cowork. Removing a pairing only on the phone does not revoke a registration already held by the computer. You can also disable alerts in iOS Settings. Delivery is best effort and subject to Apple and device settings.

Analytics, diagnostics and support

The iOS app has no first-party advertising or usage analytics SDK and does not send the desktop update-activity report described below. Apple may process purchase, distribution, diagnostics and TestFlight feedback data under your Apple settings and its policies; diagnostics or feedback you choose to share may reach us. If you contact us, we receive the details you provide and use them to investigate and reply. Do not include passwords, API keys, pairing invitations or private work in public issues. Support correspondence is kept while needed to resolve the request and meet applicable obligations; you can request deletion.

Desktop updates and website visits

Desktop releases configured for activity reporting send a randomly generated installation ID and the installed version when checking for updates. This is not a hardware identifier. The service stores a date-specific hash and the last reported version for daily deduplication, not the raw ID, and deletes daily records older than 35 days. It does not include chat or file contents. Our static website stores your language choice in your browser and does not embed advertising trackers. GitHub and Cloudflare provide website, download and update delivery; they process IP addresses and other connection metadata needed to serve and protect these services under their own policies.

Remove data and revoke access

Starting with build 38, Settings shows local cache usage and lets you clear cached conversations, images and files without removing pairings or drafts. Removing a paired computer also clears the shared content cache. Use Computers & connections to clear temporary shared files or remove a paired computer and its associated local state. Also revoke the mobile device in desktop Cowork to invalidate its access there. Temporary exports are cleared on app initialization and when a computer is removed. Device-only Keychain records can survive an app uninstall, so remove pairings in the app before uninstalling. Removing a pairing does not delete conversations or files on the computer, or copies already sent to a model provider or another app; manage those at the destination.

Your requests and policy updates

You may contact us about access, correction or deletion of information you supplied to us, or about applicable privacy rights. We can only act on information within our control. We do not sell your information or use it for targeted advertising. We will update this page when our practices change and show the effective date above.

适用范围与联系

本政策适用于 Cowork 项目维护的 iPhone 和 iPad 应用 Cowork。下文单独说明桌面端与网站的数据处理。如需咨询隐私或提出请求，请通过支持页面联系我们。

工作在你自己的电脑上执行

Cowork 通过可信局域网或你配置的中继连接已配对电脑，将消息、选中的附件、指令和审批答复发送给它。电脑向 App 返回授权范围内的会话、任务状态、文件和结果。连接使用 HTTPS，信任范围限定为已配对电脑。配置的中继转发加密流量；运营方可依据其政策处理 IP 地址、连接时间和流量等连接元数据。Cowork 不提供官方托管的会话中继或云端会话存储。电脑、模型服务及中继均由你自行选择和管理。

模型服务与其他工具

电脑可能将提示词、会话上下文、选中的图片、文件和工具结果发送给你在那里配置的 AI 服务。本地模型可以在本地处理请求；云端服务会接收请求所需的数据。工具与集成也可能根据任务访问其他服务。这些服务适用其自身的隐私与保留政策，可能在其他国家处理数据。请确认所选服务及发送的内容。移动端不提供 Cowork 托管的 AI 账号或模型额度。发送新任务内容前，App 会请你查看并同意与已配对电脑及其报告的模型连接共享数据。所显示的名称不能代表所有工具或目的地；请在电脑上检查实际配置和相关政策。从 build 37 起，你的选择按配对电脑安全保存在设备上，重启 App 后仍有效。更早版本的授权仅在当前 App 进程保持打开期间有效。普通重连及同一电脑已配置的局域网和中继路径切换无需重复同意。配对、已配置的中继或报告的 AI 服务变化后需重新确认。你可以在设置中撤回授权。撤回会阻止 App 后续发送新任务和附件，但不会取消已运行的任务或删除已经发送的数据。

设备上保存的信息

App 将配对凭据、电脑信任信息及核对待处理操作所需的记录保存在仅限本设备的安全存储中。早期版本也将草稿保存在其中。从 build 39 起，完整草稿加密保存在 App 私有文档文件中，密钥和文件指针保存在仅限本设备的安全存储中。只有新密文保存成功后才迁移旧草稿。草稿不受共享缓存的到期或淘汰策略影响。语言偏好也保存在本地。build 38 之前，接收的会话内容保留在内存中用于显示。从 build 38 起，App 还会在本设备缓存已加载的聊天文字、图片、附件和工作区文件预览。它们共用一个加密缓存，密钥保存在仅限本设备的安全存储中，总容量上限为 2 GiB（2,147,483,648 字节），每项自写入起 60 天到期。过期条目会在 App 下次读取或维护缓存时清理；App 未运行时无法执行清理。达到容量上限时可能提前清理较旧条目，iOS 也可能清理缓存。仅缓存已经加载的内容，并仍受 App 现有文件大小与预览限制。再次进入会话时先显示符合条件的缓存历史，再同步最新内容。缓存按配对电脑及当前访问权限隔离；打开附件和工作区文件时会检查当前授权及文件信息。主动预览、导出或分享文件时可能产生本地临时副本。build 39 之前，App 最多保留三个分享临时文件。从 build 39 起不再限制累计文件数量，相同内容的导出会复用现有文件。每个文件仍不超过 10 MiB，可使用 App 中的清除功能删除临时导出文件。保存到其他 App 或“文件”的副本由你和相应应用管理。

你可以控制的权限

本地网络权限用于连接电脑。使用扫码或拍照功能时，相机权限用于读取配对码或拍摄照片。照片与文档选择器让你选择附件。你可以拒绝权限或在 iOS 设置中修改权限，相应功能可能因此无法使用。App 不需要通讯录、精确位置或广告标识符。

可选的任务通知

为已配对电脑启用通知并允许 iOS 通知权限后，App 会将原生 Apple 推送令牌、语言和推送环境发送给该电脑。电脑使用系统保护的加密方式保存登记。通知通过你配置的中继及 Apple 推送通知服务发送。中继与 Apple 会接收令牌、通用事件类型、语言，以及用于打开对应会话的不透明路由标识；通知载荷不包含会话正文或文件。Cowork 不使用 Expo Push Service。

通知登记绑定当前设备访问授权，七天后失效，连接期间可以续期。你可以在连接时关闭某台电脑的通知，或在桌面 Cowork 撤销移动设备。仅在手机移除配对不会撤销电脑已保存的通知登记。你也可以在 iOS 设置中关闭提醒。通知为尽力投递，实际展示受 Apple 与设备设置影响。

统计、诊断与支持

iOS App 未集成第一方广告或使用行为统计 SDK，也不会发送下文所述的桌面更新活跃报告。Apple 可能依据你的 Apple 设置及其政策处理购买、分发、诊断和 TestFlight 反馈数据；你选择分享的诊断或反馈可能提供给我们。联系支持时，我们会收到你提供的信息，并用于排查和回复。请勿在公开问题中填写密码、API Key、配对邀请或私人工作内容。支持沟通记录仅在处理请求及履行适用义务所需的期间保留；你可以申请删除。

桌面更新与网站访问

启用活跃上报的桌面版本在检查更新时发送随机生成的安装标识及当前版本号，该标识不是硬件标识。服务端保存按日期变化的哈希及最后上报版本，用于每日去重，不保存原始标识；超过 35 天的每日记录会被清理。报告不包含会话或文件内容。静态网站在浏览器内保存语言偏好，不嵌入广告跟踪器。GitHub 与 Cloudflare 提供网站、下载和更新分发，依据各自政策处理提供及保护服务所需的 IP 地址等连接元数据。

删除数据与撤销访问

从 build 38 起，设置会显示本地缓存用量，你可以清除已缓存的会话、图片和文件，同时保留配对与草稿。移除配对电脑也会清除共享内容缓存。在“电脑与连接”中可以清除分享临时文件，或移除配对电脑及相关本地状态。还应在桌面版 Cowork 中撤销移动设备，从电脑端使访问权限失效。App 初始化及移除电脑时会清理临时导出文件。仅限本设备的钥匙串记录可能在卸载 App 后保留，因此建议先在 App 中移除配对再卸载。移除配对不会删除电脑上的会话和文件，也不会删除已发送至模型服务或其他 App 的副本；这些数据需要在对应位置管理。

你的请求与政策更新

你可以就提供给我们的信息提出访问、更正、删除请求，或咨询适用的隐私权利。我们只能处理自身控制范围内的信息。我们不出售你的信息，也不将其用于定向广告。数据处理方式变化时，我们会更新本页面及上方生效日期。