Privacy Policy

Last updated: April 18, 2026

AI Control ("the App") is a Windows and Android application that provides Claude-powered AI assistance with native device control. This policy explains what data we collect and how we use it.

Data We Collect

• Account information — Email address and display name from GitHub or Google OAuth, used for authentication.
• Chat messages — Messages you send to Claude and Claude's responses. Sessions are synced to our servers so you can resume conversations across devices.
• Tool execution context — When Claude executes a tool (e.g. screen capture, file read), the inputs and outputs are sent through the AI Control proxy as part of the conversation. We do not store screenshots or file contents server-side beyond the conversation transcript.
• Device registration — Device name, platform, ID, screen resolution, and FRP tunnel status, used for cross-device features and the device list shown in your account.
• Usage data — Token counts, model usage, and credit balance for billing.

How We Use Your Data

• To provide AI responses powered by Claude
• To maintain chat history and let you resume sessions across devices
• To enable cross-device features (list_my_devices, remote_execute, remote desktop)
• To manage your account and prepaid credit balance

Third-Party Services

• Anthropic (Claude) — All chat messages are sent to Anthropic's API for AI processing, proxied through the AI Control Server.
• OpenAI / xAI — If you select an OpenAI or xAI model, messages are sent to those providers via the same proxy.
• GitHub / Google OAuth — Used for sign-in only. We receive your email and display name.
• FRP relay — Operated by us. Used to route real-time push notifications and remote desktop streams between your devices.

Data We Do NOT Collect

• We do not access or transmit any device data unless Claude actively executes a tool you requested.
• We do not collect data when the app is closed.
• We do not track your activity across other applications.
• We do not sell or transfer your data to third parties for advertising.

On-Device Permissions

Windows: The app runs with normal user permissions. Some tools (registry, services, Hyper-V) require elevation, which prompts on demand.

Android: The app requests Accessibility Service permission for screen capture and input simulation, and may use ADB-launched InputBridge for higher-performance input. MediaProjection is requested only when you accept a remote-desktop connect request.

Data Storage & Security

Account data and chat sessions are stored on our servers with HTTPS-encrypted connections. Authentication uses signed access keys with rotation. FRP traffic is TLS-encrypted end-to-end.

Data Retention

Chat history is retained for as long as your account is active. You can delete individual chats from the app, or request full account deletion by contacting us.

Your Rights

You can request access to, correction of, or deletion of your personal data at any time by contacting us.

Contact

For privacy questions: support@oonak.ai