Privacy Policy

Dispo is operated by Cognivex Labs LLC (“we”). This policy explains what information the Dispo website, iPhone app, desktop app, Runner and the servers we operate (together, the “Service”) collect, and how we use it.

If you use a Dispo server you host yourself, the data on that server is the responsibility of whoever runs it, and this policy does not apply to it.

• Account information: your email, name and password. We store only a salted hash of your password, never the password itself, and only hashes of sign-in tokens. To stop brute-force attempts, we count failed sign-ins per email address.
• Session content: the messages you send to your computers, the replies from the AI coding tools on them, and the record and output of the tools they use (for example which files were read, which commands ran and what they returned), along with session names, folders, computer names, and pinned and read state. This is stored on our servers so your devices stay in sync and can catch up after being offline.
• Computer information: computer name, operating system, which AI coding tools and models are available, and the Runner’s version and online status.
• Usage: token usage summed by the hour (which session and model used how much), and the share of your plan the tools report as remaining.
• Push tokens: device tokens used to send notifications to your iPhone and Apple Watch.
• Attachments: when your phone can reach your computer directly, attachments go straight to it and never pass through us. When it cannot, they are uploaded temporarily to Cloudflare R2 storage and deleted automatically after a short time.

• The code, files and git credentials on your computer. They are stored as session content only when they appear in a session’s output, for example when an AI tool reads a file and shows it.
• Your sign-in credentials for Claude Code, Codex or other AI coding tools.
• What you type and see in the phone terminal. It is passed between your phone and your computer and is neither logged nor stored.
• Your searches, which run on your device.

The Dispo apps include no third-party analytics, advertising or crash-reporting tools. The website uses no cookies and no analytics or advertising tools; your choice of theme and language is kept only in your browser. Our hosting providers may keep standard access logs, such as IP address, time and the address requested.

Only to provide and improve the Service: syncing your sessions, sending the notifications you turn on, showing usage, preventing abuse and keeping the Service secure, and answering your support requests.

We do not sell your personal information, and we do not use your session content to train models or to target ads.

Messages you send through Dispo are passed by the tools on your computer, such as Claude Code, Codex, Qwen Code and Kimi Code, to their AI providers. That step is governed by the terms and privacy policies between you and those providers. Dispo is not part of it and has no access to your accounts with them.

We share only what is needed to run the Service with these providers:

• Hosting providers for our servers, database and website
• Cloudflare, for relaying attachments
• Apple, for push notifications
• GitHub, for hosting desktop app downloads

Beyond that, we disclose information only when the law requires it.

We keep your account information and session content for as long as your account exists, including archived sessions. When you delete your account, we delete your account information and session content within 30 days; copies in backups are removed as the backups rotate.

You can ask to see, export, correct or delete your personal information, or to delete your account. Email support@usedispo.ai and we will respond within 30 days.

Depending on where you live, laws such as the GDPR in the EU, the CCPA in California or China’s Personal Information Protection Law may give you further rights. You can use the same address for those requests.

Traffic between your devices and our servers is encrypted with TLS. Passwords and sign-in tokens are stored only as hashes. The Runner on each computer only makes outgoing connections, so no ports need to be opened. No system is perfectly secure, though; if you find a security problem, please contact support@usedispo.ai.

Our servers and providers may be located outside your country or region, including in the United States, and your information may be transferred there to be stored and processed.

The Service is not meant for children under 13 (under 14 in mainland China), and we do not knowingly collect their personal information.

We may update this policy. If we make significant changes, we will let you know on the website or in the apps before they take effect.

Cognivex Labs LLC
support@usedispo.ai