# Privacy Policy

**PixelHQ - PixelHQ**
Last updated: January 29, 2026

PixelHQ ("we", "our", "us") built PixelHQ as a local-first app that streams coding agent events into a real-time pixel art office animation. This Privacy Policy explains what information we collect and how we use it.

## What PixelHQ Does

PixelHQ consists of two parts:

1. **A bridge server** running on your laptop that reads Claude Code session files and strips them down to minimal, non-sensitive metadata (event types, tool categories, file basenames only).
2. **An iOS app** on the same local network that receives these stripped events and renders pixel art animations.

All communication between the bridge and the iOS app happens over your local network. Your code, prompts, file contents, and other sensitive data never leave your machine.

## Information We Collect

### Analytics (TelemetryDeck)

We use [TelemetryDeck](<https://telemetrydeck.com>), a privacy-focused analytics provider, to collect basic, anonymous usage signals:

- App launched
- App came to foreground
- App session ended (with session duration)
- Bridge connection established
- Demo mode started

TelemetryDeck does not collect personal identifiers, IP addresses, or device fingerprints. Signals cannot be tied back to individual users. TelemetryDeck is GDPR-compliant. For more details, see [TelemetryDeck's privacy policy](<https://telemetrydeck.com/privacy/>).

### Local Storage (On Your Device Only)

The following data is stored locally on your device and is never transmitted to us:

- **First launch date** and **first bridge connection date** (stored in UserDefaults for milestone tracking)
- **App launch count** and **last review prompt date** (used to decide when to ask for an App Store review)
- **Bridge authentication tokens** (stored securely in the iOS Keychain for automatic reconnection)

### What We Do NOT Collect

- Your source code or file contents
- Your prompts or AI responses
- Full file paths or project paths
- Bash commands or their output
- Any personally identifiable information
- Your IP address or location
- Device identifiers or fingerprints

## How Data Flows Locally

The bridge server reads Claude Code session files, but before anything is sent to the iOS app over your local network, the following is stripped:

- File paths are reduced to basenames only (e.g., `auth.ts`, not `/Users/you/projects/secret-project/src/auth.ts`)
- Project paths are reduced to the folder name only
- Code content, edits, prompts, thinking text, and tool outputs are discarded entirely
- Error messages are reduced to severity level only
- Only metadata needed to drive animations is kept (event type, tool category, timestamps)

This privacy stripping is enforced by design and verified by automated tests.

## Authentication

The bridge server and iOS app pair using a one-time 6-digit code displayed on your Mac. After pairing, a random authentication token is stored locally on both devices. No account creation or external authentication is required.

## Third-Party Services

| Service | Purpose | Data shared |
|---|---|---|
| [TelemetryDeck](<https://telemetrydeck.com>) | Anonymous usage analytics | Anonymous event signals (no personal data) |

We do not use any other third-party services for data collection, advertising, or tracking.

## Data Retention

- **Analytics signals**: Retained by TelemetryDeck per their [data retention policy](<https://telemetrydeck.com/privacy/>).
- **Local data**: Stored on your device until you delete the app.

## Children's Privacy

PixelHQ does not knowingly collect information from children under 13. The app does not require any personal information to function.

## Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted in this document with an updated date. Continued use of the app after changes constitutes acceptance of the revised policy.

## Contact Us

If you have questions about this Privacy Policy, contact us at:

**Email:** [email protected]