Privacy

Who this is

LeSearch Mesh is made by LeSearch AI (Arya Teja Rudraraju). Questions about any of this: aryayt55@gmail.com.

What the apps send, and to whom

When you pair a machine, the app stores that machine's address and the access token the machine itself minted. From then on the app makes HTTP requests directly to that machine — its stats, its agent sessions, its terminal output, and the commands you send back. Those requests go to your machine and nowhere else. They do not pass through any server we operate, because we do not operate one.

Nothing is uploaded to us: not your prompts, not your terminal output, not your hostnames, not your source code, not usage statistics, not crash counts, not an identifier for you or your device. In App Store terms, the label is “Data Not Collected” — and it is accurate.

The daemon's heartbeat

The meshd daemon you install separately on your machines may send one anonymized heartbeat per day: its version, its platform, coarse feature counters (how many times a class of feature was used, as a number), and a random install id. That is the whole list. It carries no commands, no keystrokes, no terminal or screen content, no hostnames, and no identifier tied to you as a person — the install id is a random string that tells us a daemon exists, not whose it is.

It exists so we can tell which versions and platforms are actually alive out there. If you would rather it sent nothing at all, turn it off with MESHD_TELEMETRY=off in the daemon's environment — the daemon works identically either way. The apps themselves never send a heartbeat.

The other exception: push notifications

If you turn on notifications, your device registers with Apple Push Notification service and gives that push token to your own machine, which stores it locally in ~/.mesh/. When an agent on that machine needs you, the machine signs a request to Apple's servers and Apple delivers the alert to your phone and watch.

This means the alert text — typically the machine name, the agent session name, and the line the agent is asking about — transits Apple's infrastructure, the same way every iOS push notification does. It is encrypted in transit and we never see it, but it is not end-to-end private from Apple. If that matters for what your agents work on, leave notifications off: the app still shows every waiting agent when you open it, and the watch complication still keeps its count.

What stays on your devices

• Paired machine names, addresses and access tokens.
• Your preferences, and the last snapshot of your mesh so the watch face has something to show before it reaches the network.

Deleting the app deletes all of it. To revoke a phone's access from the other side, rotate the token on the machine — the app is then locked out immediately.

No accounts

There is nothing to sign up for, nothing to log into, and no password to forget. Pairing is a code your own machine shows you; the trust lives between your devices and goes no further.

What Apple collects on its own

App Store and TestFlight distribution is Apple's, not ours. Apple gives us aggregate installation counts, opt-in crash reports, and any feedback you deliberately send. We use crash reports to fix crashes and feedback to fix the thing you told us about. Apple's handling of that data is covered by Apple's privacy policy.

Children

This app is a developer tool and is not directed at children under 13.

Changes

If any of this ever changes — in particular if a hosted relay is ever added, which would be a real change to everything above — the change will be described here and called out in the app's release notes before it ships, not after.