Legal
Privacy
Last updated 15 November 2026
The short version
Your code, prompts and replies are end-to-end encrypted between your iPhone and your computer. We can’t read them. There is no account, no analytics and no tracking. We keep only what we need to deliver alerts, and delete events after 24 hours.
Who we are
Wrangle is made by Stackframe Studios Private Limited (“we”). This policy covers the Wrangle iPhone app, the Wrangle helper you install on your computer, our relay server and this website.
What passes through our relay
When your coding agent asks for permission, finishes or gets stuck, the helper on your computer encrypts the event separately for each phone you paired, with a key only that phone and your computer hold. Our relay forwards it and can’t read it. This covers the command or tool request, the message text, project names and folders, your decision, and usage figures.
To deliver events, the relay does see: the kind of event (for example “approval” or “done”), which agent sent it, when, and a short code that groups events from the same session. When you pair, it also sees your computer’s name and your phone’s name.
What we store
- A random ID for each phone and computer, and the secret each uses to sign in to the relay.
- Your phone’s push notification token, so Apple can deliver alerts.
- Which phones are paired with which computers, and their names.
- Whether you have Pro, and how many alerts you used this month.
- Encrypted events, kept for 24 hours so they show in the app’s Inbox, then deleted. The latest encrypted usage figures for each computer.
Like any web server, the relay sees the IP address your devices connect from. We use it only to limit abuse.
What never reaches us
The terminal and chat view connect straight from your phone to your computer over SSH. Your phone’s private SSH key stays on your phone; your computer only receives its public key. We never see your code, files or terminal.
Notifications
Alerts are delivered by Apple Push Notification service. The text Apple can see is a fixed “New activity”. Your phone decrypts the real text on the device.
No analytics or tracking
The app and this website use no analytics, advertising or tracking tools, and set no cookies. We don’t sell or share data with anyone.
Payments
Purchases are handled by Apple. We receive a signed record from Apple to confirm Pro, never your name or payment details.
Deleting your data
Remove a computer in the app, or run wrangle remove-device on the computer, and the pairing is deleted from the relay. To delete everything we hold about your phone, email us and we will do it within 30 days.
Changes and contact
If this policy changes, we will update the date at the top. Questions: contact@stackframes.dev.