Flowmote privacy policy
Privacy and security for Flowmote
Flowmote is a phone companion for Codex on your Mac. This policy explains what the app needs to work, what stays on your device, and what passes through the relay.
Last updated: May 16, 2026
Summary
Flowmote is local-first. Codex, git operations, workspace access, and command execution run on your Mac. The phone app acts as a control surface. The relay exists to connect the phone and Mac bridge and forward messages between them.
Information Flowmote handles
Pairing data: temporary QR or pairing codes used to trust a Mac.
Device trust data: local identifiers and keys used for trusted reconnect.
Codex messages: prompts, responses, approvals, status updates, and thread metadata exchanged with your Mac bridge.
Workspace previews: file names, diffs, command output, image previews, or git status shown only when requested by the user.
Diagnostics: connection status and error messages needed to keep pairing and relay transport working.
Device permissions
Camera access is used to scan the pairing QR code from the Mac bridge.
Microphone access is used only when you record a voice prompt.
Photo library access is used only when you attach an image to a Codex prompt.
Notifications are used for run completion, blocked runs, approval requests, and related Flowmote status updates.
Relay and encryption
The relay forwards traffic between the phone and Mac bridge. It does not run Codex, inspect repositories, execute git commands, or own your workspace. Flowmote is designed so application payloads are exchanged through encrypted envelopes after pairing.
Local storage
The phone stores trusted pairing information so it can reconnect to the Mac later. The Mac bridge stores bridge state, trusted device information, and logs needed for local operation. Codex session history and generated images remain in the local Codex locations on your Mac unless you choose to share or publish them.
Data sharing
Flowmote does not sell personal data. Flowmote does not use Codex prompts, repository contents, git diffs, voice recordings, photos, or command output for advertising. Data may pass through the selected relay only to deliver messages between your phone and Mac bridge.
Retention and deletion
You can reset pairing from the app or bridge to remove trust between a phone and Mac. You can uninstall the app to remove its local data from the phone. You can remove local bridge state from the Mac when you no longer want that Mac to accept trusted reconnects.
Children
Flowmote is a developer tool and is not directed to children.
Contact
For privacy or support questions, contact support@flowmote.app.