Kiteline
中文English

隐私政策

生效日期：2026 年 10 月 23 日

Kiteline 让你在 iPhone 和 Apple Watch 上跟进、回复自己 Mac 上的 Claude Code 会话，由 Mac App 和 iPhone App（含 Apple Watch App）组成。我们设计 Kiteline 时只遵循一个原则：你的对话和代码只在你自己的设备之间流转。

  • 我们不收集、不出售、不分析你的个人信息。App 里没有广告，没有统计、追踪类 SDK，也不需要注册 Kiteline 账号。
  • 对话、代码、文件都留在你的 Mac 上，手机直接连你的 Mac 查看。
  • 在外面使用（远程访问）且无法直连时，数据经 Kiteline 中继服务器转发。这些数据是端到端加密的，中继看不到内容。
  • 锁屏提醒同样端到端加密：经 Kiteline 推送服务器和 Apple 转到你手机时，它们都看不到提醒内容。

1. 数据存放在哪里

  • Mac：Kiteline 读取 Claude Code 在本机，以及你通过 VS Code Remote-SSH 连接的服务器上留下的会话记录，用来显示对话、改动、用量等。为此，Kiteline 会在这些远端服务器上放一个只读取会话记录的小脚本。Kiteline 自己的设置、已配对的设备、操作记录、你的头像和名字，都保存在 Mac 的 ~/Library/Application Support/TARS 目录。
  • iPhone：为了打开更快、没网时也能翻看，iPhone 会缓存最近看过的会话列表、对话内容和草稿。这些数据只存在 App 自己的存储空间里，不同步到 iCloud，删除 App 即一并删除。
  • Apple Watch：通过 Apple 的手表连接功能，从配对的 iPhone 取会话摘要和需要你确认的内容。

2. 数据如何传输

  • 局域网：手机和 Mac 在同一个网络时直接连接，全程 HTTPS（TLS）加密。App 只信任配对时那台 Mac 的证书。
  • 远程访问（Kiteline Pro）：手机和 Mac 之间建立端到端加密连接（基于开源项目 iroh，QUIC / TLS 1.3），能直连就直连。直连不通时，加密数据经 Kiteline 中继服务器 tars.betac.cn（腾讯云，中国上海）转发，中继无法解密内容。为了转发，中继在连接期间会接触到双方设备的公钥标识和 IP 地址，但不会保存。服务器日志只记录时间、请求类型和流量，不记录 IP 地址和设备标识，仅用于排查故障，保留约两周后自动删除。
  • 锁屏推送：允许通知后，你的 Mac 会把提醒（比如「需要你确认」「有结论了」）加密后交给 Kiteline 推送服务器（同在 tars.betac.cn），再经 Apple 推送通知服务送到你的手机。解密的钥匙只在你的手机上，推送服务器和 Apple 都看不到提醒内容。推送服务器只在转发的那一刻接触到设备的推送令牌，转发完即丢弃，不保存令牌和内容，也不记录 IP 地址。推送令牌只保存在你自己的 Mac 上；在手机上断开配对或关掉通知，Mac 就不再推送。
  • 启动页与 App 配置：iPhone App 会从 tars.betac.cn 下载启动页的配置和图片（例如新功能介绍），以及 App 配置（服务公告、新版本提示、界面文字更正等）。请求中不含账号、设备标识或会话内容，服务器日志同样不记录 IP 地址。
  • 除上述中继、推送、启动页与 App 配置服务（均在 tars.betac.cn）外，我们没有其他服务器；它们都不保存你的数据。

3. App 使用的权限

iPhone

  • 本地网络：在局域网里找到并连接你的 Mac（必需）。
  • 相机：扫描 Mac 上的配对二维码，或拍照发给 Claude。
  • 照片：选图发给 Claude；点「+」时把刚截的图放在旁边方便发送；把 Claude 发来的图存进相册。
  • 麦克风：「按住说话」录音。录音发到你的 Mac 上转成文字。
  • 通知：Claude 需要你确认、或有了结论时提醒你。

Mac

  • 设备控制和数据访问（辅助功能）：把你在手机上发的消息输入 VS Code 里的 Claude Code，替你点确认。
  • 语音识别：把手机发来的语音转成文字。使用 Apple 的语音识别，设备支持时在 Mac 本机完成，否则由 Apple 的服务处理，适用 Apple 的隐私政策。
  • 通知、文件夹访问：在 Mac 上提醒你；读取项目目录，用于文件浏览和改动报告。

4. 第三方服务

  • Apple：App Store 的购买和订阅由 Apple 处理。我们拿不到你的支付信息，只在设备上验证订阅是否有效。推送通知经 Apple 推送通知服务送达。
  • Anthropic：Kiteline 不直接调用 Claude。你通过 Kiteline 发出的消息，由你 Mac 上的 Claude Code 发给 Anthropic，适用你与 Anthropic 之间的条款和隐私政策。
  • 只在你主动开启时才使用：
    • 「朗读」选用微软语音时，要朗读的文字会发送到微软的语音合成服务；使用 Mac 系统语音则完全在本机完成。
    • Bark 推送：填写 Bark 地址后，提醒内容（会话标题和简短摘要）经 Bark 服务器（或你自建的服务器）推送到手机。
    • 网页版的推送：经浏览器厂商的推送服务送达，内容加密。

5. 你的控制权

  • 在 Mac 的「设置 → 设备」里可以停用任何一台已配对的设备，它的访问钥匙立即作废。
  • 远程访问、各项提醒、朗读、Bark 都可以随时关闭。
  • 删除 iPhone 上的 App 即删除其中的缓存。删除 Mac 上的 Kiteline 并移除 ~/Library/Application Support/TARS，即删除 Mac 上的全部 Kiteline 数据。Claude Code 自己的会话记录不受影响。
  • 我们不持有你的数据，因此也无需通过我们查询、导出或删除：数据完全在你自己手里。

6. 未成年人

Kiteline 是面向开发者的工具，不面向 14 周岁以下的儿童，我们不会有意收集儿童的信息。

7. 政策变更

本政策如有变更，我们会更新本页并修改生效日期；重大变更会在 App 内提示。

8. 联系我们

对本政策有任何疑问，请发邮件至 hon6@foxmail.com，我们会在 15 个工作日内回复。

中文English

Privacy Policy

Effective October 23, 2026

Kiteline lets you follow and reply to the Claude Code sessions running on your own Mac from your iPhone and Apple Watch. It consists of a Mac app and an iPhone app (with an Apple Watch app). One principle guides its design: your conversations and code only travel between your own devices.

  • We do not collect, sell or analyze your personal information. There are no ads, no analytics or tracking SDKs, and no Kiteline account.
  • Conversations, code and files stay on your Mac. Your phone connects directly to your Mac to view them.
  • When you use Remote Access away from home and a direct connection is not possible, traffic is forwarded by the Kiteline relay server. It is end-to-end encrypted; the relay cannot read it.
  • Lock-screen alerts are end-to-end encrypted too: neither the Kiteline push server nor Apple can read them on the way to your phone.

1. Where data is stored

  • Mac: Kiteline reads the session transcripts that Claude Code keeps on your Mac and on servers you connect to through VS Code Remote-SSH, to show conversations, changes and usage. For remote servers it installs a small script that only reads those transcripts. Kiteline's own settings, paired devices, activity log, and your avatar and name are stored in ~/Library/Application Support/TARS on your Mac.
  • iPhone: to open faster and work offline, the iPhone caches recently viewed session lists, conversations and drafts in the app's own container. Nothing is synced to iCloud. Deleting the app deletes the cache.
  • Apple Watch: receives session summaries and pending confirmations from the paired iPhone via Apple's Watch Connectivity.

2. How data is transmitted

  • Local network: when your phone and Mac are on the same network they connect directly over HTTPS (TLS). The app only trusts the certificate of the Mac it was paired with.
  • Remote Access (Kiteline Pro): your phone and Mac set up an end-to-end encrypted connection (built on the open-source iroh project, QUIC / TLS 1.3), connecting directly whenever possible. Otherwise encrypted traffic is forwarded by the Kiteline relay at tars.betac.cn (Tencent Cloud, Shanghai, China), which cannot decrypt it. To forward traffic the relay handles the devices' public key identifiers and IP addresses while connected, but does not store them. Server logs record only time, request type and traffic volume, never IP addresses or device identifiers; they are used only for troubleshooting and deleted automatically after about two weeks.
  • Lock-screen notifications: once you allow notifications, your Mac encrypts each alert (such as "needs your confirmation" or "finished") and hands it to the Kiteline push server (also at tars.betac.cn), which passes it to the Apple Push Notification service for delivery to your phone. The decryption key exists only on your phone, so neither the push server nor Apple can read the alert. The push server sees your device's push token only while forwarding, then discards it; it stores no tokens or content and logs no IP addresses. Push tokens are kept only on your own Mac; unpairing on the phone or turning notifications off stops the pushes.
  • Launch screen and app configuration: the iPhone app downloads launch screen settings and images (such as feature announcements) and app configuration (such as service notices, update notices and text corrections) from tars.betac.cn. These requests contain no account, device identifier or session content, and the server does not log IP addresses.
  • Apart from the relay, push, launch screen and app configuration services (all at tars.betac.cn), we operate no servers, and none of them stores your data.

3. Permissions

  • iPhone: Local Network (required, to find and connect to your Mac); Camera (scan the pairing QR code, take photos to send); Photos (pick images to send, show your latest screenshot next to "+", save images Claude sends); Microphone (push-to-talk; the recording is sent to your Mac for transcription); Notifications (when Claude needs your confirmation or has finished).
  • Mac: Accessibility (to type your messages into Claude Code in VS Code and confirm prompts on your behalf); Speech Recognition (Apple's speech recognition, on-device when supported, otherwise processed by Apple under Apple's privacy policy); Notifications and folder access (alerts; reading project folders for file browsing and change reports).

4. Third-party services

  • Apple: purchases and subscriptions are handled by Apple. We never see your payment information; subscription status is verified on device. Push notifications are delivered through the Apple Push Notification service.
  • Anthropic: Kiteline does not call Claude itself. Messages you send through Kiteline are sent to Anthropic by Claude Code on your Mac, under your terms with Anthropic.
  • Only if you turn them on: Read Aloud with Microsoft voices sends the text to be spoken to Microsoft's speech service (Mac system voices work entirely on device); Bark sends alert content (session title and a short summary) through the Bark server you configure; push for the web version is delivered encrypted through the browser vendor's push service.

5. Your choices

  • Revoke any paired device in Settings → Devices on your Mac; its key stops working immediately.
  • Remote Access, alerts, Read Aloud and Bark can be turned off at any time.
  • Deleting the iPhone app removes its cache. Deleting Kiteline on your Mac and removing ~/Library/Application Support/TARS removes all Kiteline data on the Mac. Claude Code's own transcripts are not affected.
  • Because we do not hold your data, there is nothing to request, export or delete from us.

6. Children

Kiteline is a developer tool and is not directed at children under 14. We do not knowingly collect information from children.

7. Changes

If this policy changes we will update this page and its effective date, and point out significant changes in the app.

8. Contact

Questions about this policy: hon6@foxmail.com. We reply within 15 business days.