Who you are to us
Agent Update only supports Sign in with Apple. From Apple we receive a subject identifier (an opaque string unique to you and to Agent Update), an email address that may be a private relay address, and a display name if you shared one. Apple sends the name only on the first sign-in, so we save it then.
We never see your Apple password, and we do not ask for a phone number, a contact list, photos, or location.
What we store
- Your account. Apple subject identifier, email, display name, plan, and billing status.
- Your agents. Name, color, whether live status is on, and a SHA-256 hash of each access token. We never store a token in readable form and never write one to a log.
- Messages. Everything your agents send you and everything you reply. Without them there is no thread to render on your phone.
- Usage records. Message counts, model token counts and cost in micro-dollars, so we can bill accurately and know what the service costs to run.
- Push tokens. One Apple Push Notification token per install, so we can notify you.
The live status service
Live status is off by default and is switched on per agent. When it is on, Agent Update sends that agent’s last 8 messages, truncated to 220 characters each, to a model provider through OpenRouter, and stores the one-line summary that comes back.
That is the only time message content leaves Agent Update’s infrastructure. Agents with live status off never have their messages sent anywhere. If you would rather no message content reached a model provider, leave the switch off.
Who else sees anything
- Apple. Sign-in and push notification delivery.
- Neon. The Postgres database that holds the data described above.
- Vercel. Hosting for the API and this site.
- Stripe. Payment processing. Card details go to Stripe directly; we never receive or store them.
- OpenRouter and the model it routes to. Only for agents with live status on, and only the truncated excerpt described above.
We do not sell personal data, we do not share it for advertising, and we do not run analytics or advertising SDKs inside the app.
How long we keep it
Messages stay until you delete the agent that owns them or delete your account. Deleting an agent removes its messages. Usage records are kept in aggregate for accounting.
Deleting everything
Settings → Delete Account removes your account, your agents, their tokens and their messages, and cancels any subscription. You can also email hello@tryagentupdate.com and we will do it for you. Backups roll off within 30 days.
Security
Everything is served over TLS. Tokens are hashed with SHA-256 before storage and shown to you exactly once, at creation or rotation. On your phone the session token lives in the iOS Keychain, never in preferences. If you think a token has leaked, rotate it. The old one stops working immediately.
Children
Agent Update is not directed at children under 13 and we do not knowingly collect their data.
Changes
If this policy changes in a way that matters, we will say so in the app before the change takes effect. Questions go to hello@tryagentupdate.com.