Privacy Policy

This policy explains how FOP Yaroslav Rozumnyi (“Foreman”, “we”, “us”) collects, uses and protects your personal data when you use the Foreman desktop application and foremanapps.com. We act as the data controller for the data described below.

1. The short version

Foreman is a desktop application. Your source code, your prompts, your agent transcripts and your credentials live on your own machine and are not sent to us. There is no server-side copy of your work to leak, subpoena or sell. What does reach us is limited to the account and device records below — and the cost figures, which are off unless you turn them on.

2. What we never collect

We do not receive, and have no way to read, any of the following — not in aggregate, not in logs, not for debugging:

• your source code, or the contents of any file an agent reads or writes;
• your prompts, an agent's replies, or any part of a session transcript;
• your git remotes, branch names, commit messages or diffs;
• the commands agents run, or their output;
• your Anthropic, OpenAI or SSH credentials, or any API key. Those are held in your macOS Keychain and are read by the application on your machine only.

3. What we do collect

• Account data — your email address, and the plan attached to your account with its status and renewal or expiry date. Your password, sign-in methods and login sessions are held by Clerk, our authentication provider, and never reach our own database. The free plan runs on one machine without an account, in which case we hold nothing at all.
• Device records — for each machine you connect to your account: a display name you choose, the platform it runs, when it was last seen online, and a public key used to set up encrypted connections between your own devices. This is what makes a fleet a fleet; it contains nothing about what is on the machine.
• Cost and usage figures — opt-in, off by default. If you turn on cross-device cost tracking, we receive per-day and per-session spend: the amount in US dollars, the number of turns, which model was used, when the session was last active, an opaque session identifier, and a short label so you can tell your sessions apart. That label is derived from the name of the folder the session runs in — typically the last one or two path segments, such as projects/foreman. It is the only piece of this data that carries anything from your filesystem, we send no more of the path than that, and turning the setting off stops it entirely.
• Shared sessions — if you share a session to your phone or browser, we store the opaque session id, the same short display label, and the time you shared it, so the session can be listed on your other device.
• Relay traffic — when you drive a session from your phone or a browser, the content is encrypted end-to-end on your own devices. Our relay routes ciphertext it cannot read and keeps no copy of it. We can see that a connection happened and how much data moved; we cannot see what was in it.
• Payment data — paid plans are charged by card through Creem, our merchant of record, who operate the checkout. Your card details go to them and never reach us — we do not see or store a card number. We keep only a subscription and order reference, the plan, its status as they report it, and the dates it was granted and renews.
• Website technical data — our host's logs record IP addresses and device/browser information as part of normal operation and to protect the site against abuse. We also run cookieless website analytics, which report aggregate visit counts only and store nothing on your device (see our Cookie Policy). We run no advertising trackers.
• Access tokens — devices authenticate with tokens we store only as a cryptographic hash, alongside when the token was created and last used.

4. How and why we use it (legal bases)

• To provide the service, link your devices and secure your account — performance of a contract.
• To process subscriptions, apply your plan and prevent fraud — contract and legitimate interests.
• To show you your own cost figures across machines — consent, given by turning the setting on and withdrawable by turning it off.
• To send service email you cannot opt out of while you hold an account — email verification and password resets, which Clerk sends on our behalf, and notices about your subscription — performance of a contract.
• To send product email, where you asked for it — consent, withdrawable at any time.
• To keep the service available and resist abuse — legitimate interests.
• To meet legal, accounting and tax obligations — legal obligation.

5. Who we share it with (processors)

We share data only with service providers that process it on our behalf under a data processing agreement:

• Clerk — accounts, sign-in, passwords, email verification and session management.
• Creem — merchant of record: card processing, checkout, subscription billing, tax and receipts.
• DigitalOcean — hosting for the website, the account service and the relay.
• Plausible Analytics — cookieless website analytics. It receives no account data: only the page viewed, the referring site and coarse device and country information, none of it tied to you.
• GitHub — hosts the application downloads. Requesting a download is a request to them, subject to their privacy policy.

We do not sell your personal data, and we do not share it with advertising networks or data brokers. The agent tools Foreman runs — Claude Code, Codex and similar — talk to their own providers directly from your machine under your own account with them; that traffic does not pass through us, and what those providers do with it is governed by your agreement with them.

6. International transfers

Some processors may store or process data outside your country, including outside the EEA and UK. Where they do, transfers are protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses.

7. How long we keep it

We keep your account, its devices and its usage records for as long as your account exists. When you delete your account, all of it is erased from our database, permanently and without a shadow copy — and because the credentials live with Clerk, deleting the account deletes them there too.

Two things sit outside that erasure. Creem keeps its own record of the transactions it handled, under its own legal and accounting obligations — that copy is theirs, not ours. And server logs containing IP addresses age out on their own retention cycle rather than being deleted per account.

Anything held only on your Mac — projects, sessions, transcripts, checkpoints, keychain entries — is deleted by you, on your machine. We cannot reach it and cannot delete it for you.

8. Your rights

Subject to applicable law, you have the right to access, rectify, erase, restrict or object to processing, to data portability, and to withdraw consent at any time. You can download a copy of everything we hold from the Account tab of your dashboard, withdraw consent for cost telemetry in the application at any moment, and delete your account to remove everything else. For anything else, email privacy@foremanapps.com — we respond within the 30 days the GDPR requires. You also have the right to lodge a complaint with your local data protection authority.

9. Security

We protect data in transit with TLS, delegate credential storage to Clerk — which means we never hold your password in any form, readable or hashed — store access tokens only as hashes, and seal phone and browser sessions end-to-end so the relay carries ciphertext it cannot decrypt. On your machine, agent credentials are kept in the macOS Keychain rather than in our own files. No method of transmission or storage is perfectly secure, but we work to protect your data and to notify you and the relevant authority of any breach as required by law.

10. Children

Foreman is not directed to children under 16, and we do not knowingly collect their personal data.

11. Changes

We may update this policy. Material changes will be notified in the application or by email, and the “Last updated” date above revised.

12. Contact

For privacy questions or to exercise your rights, email privacy@foremanapps.com. For anything else, including billing, contact@foremanapps.com.