The short version. Halyard has no account, no analytics and no server of ours between you and your hosts. Your hosts, passwords, keys and everything you type stay on your device and go only to the servers you connect to. The app talks to us for two things: the small Volpy notice above the terminal, shown in the free version and during the trial, and a check every six hours for an urgent notice about your version. Halyard Pro removes the notice, and every request for it.
Halyard is published by Bartosz Rajewski, a sole proprietor registered in Poland (NIP 7822170051, REGON 300020370), Nad Wierzbakiem 14/9, 60-612 Poznań, Poland, trading as Volpy (“we”, “us”). For anything about your personal data, write to privacy@volpy.ai.
This policy covers the Halyard app for Mac, iPhone and iPad, and the Halyard pages on volpy.co (/halyard/support and this page). The Volpy design service at volpy.ai has its own Privacy Policy.
~/Library/Containers/ai.volpy.halyard/, on iPhone and iPad inside
the app — and none of it is sent to us:
ai.volpy.halyard.ssh-password. Halyard does not sync them to
iCloud and never sends them to us; they are used only to authenticate to the
host they belong to. Like other Keychain items, they can be included in an
encrypted backup of your device.tmux, and for Docker hosts docker ps and
docker inspect. If Docker refuses access, it also runs
id and stat to explain why. The answers are shown to
you and are not sent to us.HalyardDebug preference). It is written to the app's own temporary
folder and stays on your device.In the free version, and during the free trial, a small fixed-height strip above the terminal shows a note about Volpy, our own product. The app fetches that note as plain data — a headline, a line of text, an optional small image and a link — and draws it itself. There is no browser engine in the app. Halyard Pro does not show the notice and never asks for it.
While the strip is shown (on launch, then about every five minutes), the app
requests https://volpy.co/promo/halyard/v2/banner with: the app name
and version; the platform (macos or ios); whether the
terminal theme is dark or light; the width and height available for the strip;
a random per-install identifier; and a one-time random value used to avoid
cached responses.
The identifier is a UUID the app creates on first launch and keeps in its preferences. It is not derived from your hardware, your Apple Account or anything else, and it is replaced by an unrelated one when you delete and reinstall the app.
Separately, on every install, including Halyard Pro, the app
asks https://volpy.co/promo/halyard/v2/notice about every six hours
whether there is an urgent notice for its version — for example that the version
has been retired and must be updated. That request carries the app name,
version and build number, the platform, the operating-system version, the same
install identifier and a one-time random value. We do not store these notice
requests; the server only answers “nothing” or the notice text.
These records contain no IP address, no name, and nothing from your terminal or your hosts. Our web server keeps ordinary access logs (IP address, time, requested address, browser or app identification) for these requests, as it does for every request to volpy.co; those logs are rotated after 14 days and are not joined to the impression and click records.
We use the counts to know how many installs saw a note and how often (frequency capping), and which note to show next. This is first-party marketing of our own product inside our own app: we do not use third-party advertising networks, we do not link the identifier with data from anyone else, and we do not follow you across other apps or websites. Under the GDPR the legal basis is our legitimate interest in funding the free version of the app with a notice about our own service; the notice check is our legitimate interest in being able to tell you that a version must be updated. Under Apple’s App Tracking Transparency definition this is not “tracking”, so the app does not ask for tracking permission and does not need it.
If you send a support request through the form on /halyard/support, we receive the title and details you typed, plus anything you chose to include, such as an email address for a reply. The request is stored in our feedback queue (Google Cloud Firestore) and a copy is sent to the operator as a Discord message so it is seen quickly. If you email us instead, we keep the email. We use this only to answer you and to fix what you reported (legitimate interest, and performance of a contract where you are a customer). We keep a request for as long as it is being handled and for at most 24 months afterwards, then delete it.
Halyard is distributed through the App Store. Halyard Pro and the free 14-day trial are in-app purchases, made and processed by Apple under Apple’s Privacy Policy. We never see your payment details or your Apple Account.
To know whether you have Pro or a trial, and when the trial started, the app reads Apple’s signed record of your purchases on your device. Nothing about it is sent to us. So that setting the device clock back does not extend the trial, the app keeps the latest date it has seen in its preferences and the Keychain, on your device.
From Apple we receive only the aggregated, non-identifying sales and usage statistics it makes available to developers, based on the choices you make on your device.
| Recipient | What for | Where |
|---|---|---|
| OVH SAS | Hosts volpy.co, including the notice endpoints and the impression and click records | Poland (EU) |
| Google LLC / Google Ireland Ltd | Stores support requests (Firestore) | European Union and United States |
| Discord, Inc. | Delivers a notification of your support request to the operator | United States |
| Apple Inc. | Distributes the app and processes in-app purchases | United States and worldwide |
We do not sell, rent or license personal data to anyone. Beyond the recipients above we share data only when required by law, to defend our legal rights, or with a successor in a sale or restructuring of the business, who is bound by this policy.
Google, Discord and Apple process some data outside the European Economic Area. Where that happens we rely on Standard Contractual Clauses (Commission Implementing Decision 2021/914) and, where applicable, additional safeguards. You can ask for a copy of the relevant safeguards at privacy@volpy.ai.
| Data | Kept for |
|---|---|
| Notice impression and click records | Up to 13 months, then deleted automatically; only totals are kept after that |
| Notice-check requests | Not stored |
| Web server access logs | 14 days |
| Support requests and emails | While handled, and at most 24 months after |
| Host list, passwords, keys, preferences | On your device only, until you delete them or the app |
| Agent session records | On your device only; deleted three weeks after the session was last seen |
If you are in the European Economic Area, the United Kingdom or another place with comparable law, you may ask to access, correct, delete or receive a copy of the personal data we hold about you, to restrict or object to its processing, and to complain to a supervisory authority. In Poland that is the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl.
The notice records are keyed only by the random install identifier. The app does not display it, and we cannot link it to you, so we cannot find your records from your name or email. Deleting and reinstalling the app ends any link between you and the records made so far.
California residents: we do not sell or share personal information in the sense of the CCPA/CPRA. To exercise any right, email privacy@volpy.ai. We answer within 30 days.
Passwords and private keys are kept in your device’s Keychain, never by us. Sessions use SSH with the key or password you gave for that host, and Halyard remembers each host’s key so that a changed key is flagged rather than trusted silently. The app talks to volpy.co only over HTTPS. The notice strip cannot run anything in the app, open windows, or navigate anywhere except your default browser when you click its link, and links in terminal output open only if they are web or email addresses.
Halyard is a developer tool and is not directed at children under 16. We do not knowingly collect data from them.
If Halyard starts doing something not described here, this page changes first, with a new “last updated” date, and a material change is announced on the support page before it takes effect.
Privacy: privacy@volpy.ai · Support: info@volpy.ai or the support form.