Privacy Policy

Summary

The app connects to the Deck server you choose. Server entries, sign-in cookies, and cached dashboard images stay on your device. Optional Pro pricing, purchases, and restores use Apple's StoreKit.

Scope

This policy covers Omarchy Deck, the iPhone and iPad app, and its Apple Watch app. Omarchy Deck is a Kodros app. The app is a client for an Omarchy Deck server that you or someone else runs. Kodros does not host that server, and the app does not include one.

App connections

You do not create a Kodros account to connect a deck. The app loads your chosen server's dashboard directly. Apple handles the optional Pro purchase and the entitlement checks. Opening a Privacy or Support link opens that website separately. Your server operator and Apple have their own privacy practices. This page describes the app's connections and local storage. It is not an App Store data-collection declaration.

What stays on your device

• Server entries. Saved HTTPS server addresses, the selected server and identifiers for each server's separate WebKit storage are kept in the app's preferences.
• Access tokens. The app uses your token for the initial sign-in request and does not save it in its preferences. The token field is cleared when you submit it.
• Sign-in sessions and web data. Your server's session cookie and other WebKit website data persist in storage isolated by HTTPS origin, including the port. Cookies come from your server, not from Kodros.
• Dashboard image cache. The premium update saves a 320-pixel-wide JPEG of a loaded dashboard for each server and orientation. It shows this image dimmed while the next load runs. These images may contain private dashboard content. They are stored under the app's Caches directory with iOS complete file protection, which makes them unreadable while the device is locked. Image filenames use a hash of the server address.

Signing out through Sign in again clears the selected server's WebKit data and cached dashboard images, but keeps its saved address. Removing or replacing a saved server clears that server's web data and images and forgets its address. Other servers are unaffected. These actions clear this device's local data; they do not delete information held by your server or revoke your Pro purchase.

What goes to your server

The app loads your server's dashboard and sends dashboard requests to that HTTPS address. The initial sign-in request carries your access token in its URL query. Later requests use the server's session cookie. The initial token-bearing URL can appear in your server's logs, or in a proxy's logs. The updated app removes the token query from the page URL before page scripts run. That does not remove it from the initial request.

WebKit resources are restricted to the selected server's HTTPS origin, including its port. Links to another site open separately in Safari. When the phone cannot reach your server, a recovery check goes to that saved server with its session cookie, reads the response headers and cancels the response body. It does not follow redirects to another server.

Your server's operator decides what it records, what it shows, and who can see it. That operator may be you, or it may be someone else. If someone else runs your server, ask them about their privacy practices. Those practices are not ours.

The demo

Try the demo opens invented sample content built into the app. Sample interactions stay in memory; they do not contact a Deck server, operate real devices or add a saved server. This does not make the entire app network-free: Pro on first run and in the demo's Connect sheet loads App Store pricing and checks entitlements through StoreKit. Unlock Pro and Restore purchases use Apple's purchase services. Privacy and Support links open websites separately. Connect your deck leaves the sample interface so you can configure your own server.

Build 9 has an earlier demo with an Exit demo control and no Pro controls inside the demo. Its Pro and Restore controls are in Decks after selecting a server address. The premium update adds the first-run and demo Connect locations described above.

Apple Watch

The Apple Watch app shows Play / Pause, Toggle Mute, and Lock Screen for the selected server. It asks you to confirm each action, then sends that action to your iPhone. Your iPhone sends the request to your server. The watch receives action names only. It does not hold your server address, token, or cookie, and it does not run actions on its own.

Pro purchase

Omarchy Deck is free and includes one saved server. Omarchy Deck Pro is an optional one-time purchase through the App Store. It adds multiple saved servers and switching between them. There is no subscription.

Apple processes payments and refund requests under its own terms and privacy policy. StoreKit loads the product's localized price, starts purchases, restores purchases, and checks verified Pro entitlements for your Apple Account. These App Store requests can happen even when you have not saved a Deck server. Signing out of a deck does not sign you out of your Apple Account.

Permissions

• Local network. iOS asks for this so the app can reach a server on your home or private network. The prompt reads: "Omarchy Deck connects to the self-hosted deck server you choose."

The app asks for no other permission.

Children

The app is for people who run a Deck server, or who have been given access to one. It is not directed to children.

Changes

If this policy changes, we will post the new version on this page and update the date at the top.

Contact

Questions about this policy go to thefiredev-cloud.

Omarchy Deck support