Privacy
The short version
RoboCommander collects no data. It has no account, no analytics and no crash reporter, and I run no servers. The app talks directly to your robot on your home network.
What the app stores on your device
- Your robot’s address, in the app’s settings.
- Your robot’s name, so the header can show it when the robot is offline.
- A login, if your robot asks for one. It lives in the iOS Keychain, never in a file or a log.
- That you have seen the first-use tip, and your appearance choices.
- A short hash of the robot’s system ID, to spot the same robot at a new address. Never its serial number or hardware address.
Forgetting a robot in the app removes its data from the device.
What goes to your iCloud
If you buy Pro and iCloud is on, the app syncs your robot list between your devices. This uses your own iCloud key-value store: the address and name, and for a robot with a self-signed certificate its public fingerprint. A robot’s login syncs through iCloud Keychain, which Apple encrypts end to end. You can turn that off for each robot. I cannot read any of it. Free devices never sync a login.
What I receive
Nothing. Apple handles the purchase and gives me sales totals, with no link to you. I do not see your robot, your map or your home.
Problem reports
The Report a problem screen builds a short report on your phone: app version, iOS version, robot model, Valetudo version and recent errors. It never includes your robot’s address or password. You read it first. It leaves the phone only when you tap Email or Copy, and then goes where you send it. I do not collect it any other way.
Your robot
The app sends requests to the address you give it, and only to that address. It sends a command only when you tap a control, never on launch, resume or reconnect. Your robot owns its own data. Read its documentation to see what it keeps.
Contact
Questions about privacy: robocommander@xhtml.md.