- No account, no analytics, no ads and no tracking.
- Your code, files, prompts, the agents' replies and your terminals stay between your phone and your computer, encrypted end to end.
- Tavi's relay sees connection metadata, never content. Exactly what it sees.
Who we are
Tavi is made by Mohhamad Parvez Huda Robin, an individual developer in Bangladesh, who sells it on the App Store under that name and is responsible for the personal data this policy describes. In this policy, “we” and “us” mean him.
This policy covers the Tavi iPhone app, the Tavi host you install on your computer, Tavi's relay, and this website.
The app
The app has no account, no analytics, no ads and no tracking. There is no sign-in and no email: you connect a computer by scanning a code in its terminal.
Besides your computers and Tavi's relay, the app talks only to Apple: the App Store, for Tavi Pro purchases, and Apple's connectivity check, when a computer stops answering.
Your sessions
Your code, files, prompts, the agents' replies and what your terminals show stay between your phone and your computer, encrypted end to end. When a session goes through Tavi's relay, the relay passes on encrypted bytes it cannot read.
How Tavi connects, and what the relay sees
When your phone cannot reach your computer directly, Tavi connects them through a relay we run on Cloudflare. What you do in a session, such as what you type, what your terminal shows, your files and previews, is encrypted between your phone and your computer, and neither the relay nor Cloudflare can read it.
They do see connection metadata: your computer's identifier and public key, your phones' public keys, the IP addresses each end connects from, when they connect, for how long, and how much data passes.
The relay stores only what it needs to route a connection: your computer's identifier, a list of fingerprints of your paired phones' keys, connection records, and the expired credentials and counters of the fast path. It keeps no log of who connected or from where. These records have no fixed expiry today: they stay until the relay replaces them or we delete them, and we delete a computer's records when you ask us to at support@tavihost.com. Cloudflare keeps its own operational records, such as security and usage analytics, which name your computer's identifier, for its own retention periods.
When you unpair a phone, the relay stops admitting it and removes it from your computer's list. Uninstalling Tavi from your computer does not tell the relay, so its records for that computer stay until we delete them. When a faster route is available, Tavi may carry your session through Cloudflare's TURN service, which sees the same kind of metadata and can read no content either.
You can turn the relay off on your computer, and then your phone reaches it only on the same network.
Notifications
Tavi writes its notifications on your phone, from what the phone already receives from your computers. Nothing about them is sent anywhere.
Purchases
Tavi Pro is sold through the App Store. Apple handles the purchase and the payment, under Apple's own privacy policy; we receive no payment details.
On your computer
The Tavi host keeps its keys and your pairings in ~/.tavi on your computer. tavi uninstall removes it.
To keep itself up to date, the host asks the npm registry once a day whether a newer version of tavi-host exists, as any download from npm would.
This website
tavihost.com sets no cookies and uses no analytics, no third-party scripts and no third-party fonts. Cloudflare serves it and may keep standard request logs.
Children
Tavi is not directed to children under 13.
Changes to this policy
If this policy changes, we'll post the new version on this page with a new effective date.
Contact
Questions about this policy or about your data: support@tavihost.com.
Mohhamad Parvez Huda Robin, Bangladesh