Privacy

Last updated 26 October 2026

Portunus is made by Deng-Li Wu. It has no accounts, no advertising and no analytics. This page describes what the iPhone app, the agent tools and the Portunus relay (relay.getportunus.com) handle.

What stays on your iPhone

Your signing keys, created in the Secure Enclave. They can't be exported, not even by Portunus.
The content of each approval request: what the agent wants to do. It is decrypted only on your phone.

What the relay stores

Your phone's public keys and the name you give it, so agents can encrypt requests to it.
Your push token from Apple, so the relay can notify your phone. It is removed when you unpair.
Approval requests, encrypted so that only your phone can read them. Each is deleted one day after it expires.
Decisions, in an append-only audit log: the request's id, a hash of the request, approve or deny, and the time. They don't include what was requested. The log is kept so decisions can be checked later.
Agent keys: the name you gave each one and a hash of its secret, never the secret itself.
Your rules, if you edit them on your phone. They are signed but not encrypted, so the relay can read them.
When you connect a computer: its name and a one-time public key, for at most 10 minutes.

Your IP address is used only in memory, to limit abuse, and isn't written to the relay's database.

Services Portunus relies on

Apple Push Notification service delivers notifications to your phone. The request inside is encrypted.
Cloudflare carries traffic to the relay, and sees connection details such as your IP address.

Portunus doesn't sell or share your data with anyone else.

Running your own relay

You can run the relay yourself. Then none of the above reaches Portunus's servers.

Deleting your data

Unpairing in the app stops notifications to your phone, and revoking an agent key stops it working. To have your phone's public keys and rules removed from the relay, email contact@getportunus.com.

Changes

If this policy changes, the date at the top changes with it.