Walkship doesn’t collect your data

Where your data lives

Walkship is a Mac app and a phone app (iPhone and Android). The phone app talks to the Walkship server that runs on your own Mac, over your home network, a private network such as Tailscale that you set up, or, away from home, the Walkship relay (see below) — or, when you use it without a Mac, directly to the AI model you choose (see below).

Your conversations, transcripts, notes, summaries, features, agent logs and settings are stored in a database on your Mac, in the ~/.voice-assistant folder. The phone keeps the address of your Mac, a pairing key and phrases waiting to be sent while the Mac is out of reach. Without a Mac, your projects, discussions, notes and the code you copy from GitHub are kept on the phone, and your model’s API key and GitHub sign-in in the system’s secure storage (Keychain on iPhone, Keystore on Android).

The developer has no access to any of it.

What leaves your devices, and where it goes

AI models. To answer you, write summaries and build features, your Mac runs Claude Code (Anthropic) or Codex (OpenAI) — whichever you choose — under your own account. What you say, the conversation so far and the parts of your project the assistant reads are sent to that service, exactly as if you ran the tool yourself. Web search, when you turn it on, is done by the same service. Their privacy policies apply: Anthropic, OpenAI.

The Walkship relay. When your phone isn’t on your Mac’s network, it reaches the Mac through the Walkship relay at relay.walkship.app, which runs on Cloudflare. Everything is encrypted on the phone and opened only on your Mac: the relay passes the encrypted data on and can read neither it nor your access token. Like any web server, it sees the IP addresses of your phone and Mac, when and how much data passed, and a random identifier of your Mac. Walkship keeps no record of it; Cloudflare’s privacy policy applies to its network. To keep everything inside your own network, turn the relay off in Settings → Away from home → Home only.

Speech recognition. On the phone, Walkship uses the system speech recognizer. When the language is installed on the device, recognition happens on the device; otherwise the system may send the audio to Apple (iPhone) or Google (Android) to turn it into text, under their privacy policies. On the Mac, speech is recognized locally with Whisper. The assistant’s voice is synthesized locally on the Mac.

Your own model, without a Mac. When you use the phone without a Mac, or go on talking while the Mac is out of reach, what you say, the conversation so far, the project’s notes and the parts of its code the assistant reads are sent straight from the phone to the model service you set up with your own API key — DeepSeek, or any OpenAI-style API you enter, such as OpenRouter or your own Ollama or LM Studio. That service’s privacy policy applies. The app shows what goes to the model and asks you to agree before the first conversation.

Push notifications. When an agent finishes or fails, your Mac sends a notification with the feature’s title and status to your phone through Expo’s push service, which hands it to Apple Push Notification service or Firebase Cloud Messaging. The phone’s push token is stored only on your Mac.

GitHub. Pull requests are opened with your own git and gh setup when you ask for one. The Mac app checks GitHub for new versions of Walkship; that request carries no personal data beyond what any web request does, such as your IP address. Without a Mac, you can sign in to GitHub with a code through the Walkship GitHub App; the phone then downloads the repository and branch you pick straight from GitHub. The developer never sees your sign-in or your code.

Services you connect. If you add MCP servers (for example Jira, Sentry or a database), the assistant sends them requests on your behalf, as you configure.

Permissions

Microphone and speech recognition — to hear you while you talk to the assistant. Walkship doesn’t record in the background and doesn’t keep audio.

Photo library and camera — to send a screenshot or a photo to the assistant when you choose one. Only the picture you pick is used; it goes along with the conversation, like your words.

Notifications — to tell you when an agent has finished.

What the developer receives

Nothing. Walkship contains no analytics, no crash reporting, no advertising and no third-party tracking, and it doesn’t use the advertising identifier. The relay only passes encrypted data between your own devices and keeps no record of it. Nothing is sold or shared, because nothing is collected.

If you report a problem on GitHub, what you write there is public and handled under GitHub’s terms.

Your control

Projects, discussions, notes and features can be deleted in the app. To remove everything, delete the Walkship apps and the ~/.voice-assistant folder on your Mac. To stop sending data to Anthropic or OpenAI, sign out of Claude Code or Codex; their data is managed in your accounts with them. Without a Mac, deleting the phone app removes everything it keeps, and GitHub access is revoked by uninstalling the Walkship GitHub App in your GitHub settings.

Children

Walkship is a tool for software developers and isn’t directed at children.

Changes

If this policy changes, the new version will be published on this page with a new date.

Contact

Questions about privacy: open an issue on GitHub.