deskhubLegal
Privacy policy
Effective October 30, 2026. This policy covers the apps Tidyshot, Cutora, Pixmend, Foldwise, Tellmark, Couchly, Kodo, Keyvane, Cairnly, Tallyline and Volleo (the "apps"), the Cloud AI server at ai.deskhub.cloud, and this website. "We" means deskhub, the studio that makes the apps. RunBite: Move to Play has its own privacy policy.
- Tidyshot
- Cutora
- Pixmend
- Foldwise
- Tellmark
- Couchly
- Kodo
- Keyvane
- Cairnly
- Tallyline
- Volleo
- RunBite
- Cloud AI server
The short version
- The apps do their work on your phone. Your photos, documents, scans, contacts and voice are processed on the device and are not uploaded to us.
- You do not need an account. We never ask for your name, email address or phone number inside the apps.
- Pro subscribers can turn on Cloud AI, which sends a small amount of content to our server at ai.deskhub.cloud for harder tasks. It is off until you agree, you can turn it off at any time in Settings, and the content is processed to give you a result and then discarded, not stored.
- We do not sell your data, use it for advertising profiles, or use your content to train AI models.
- Kodo's free version shows ads from Google AdMob. Pro removes them.
What stays on your phone
Everything you create or scan in the apps is stored on your device: photo library indexes, scanned documents and their text, cutouts and projects, TV pairings and scenes, scan history and settings. We cannot see it. Deleting an app, or clearing its data, removes it. If you use your phone's own backup (for example an iCloud or Google device backup), that copy is governed by your backup provider.
Purchases
Subscriptions and one-time purchases are handled by Apple's App Store or Google Play. We never see your payment card. We use RevenueCat to check whether your purchase is active. To do this, the app creates a random purchase ID (RevenueCat app user ID) that is not linked to your name, email or any other identity. RevenueCat receives that ID, your store receipt and basic device details (platform, app version, country) to validate the purchase.
Cloud AI server (ai.deskhub.cloud)
Cloud AI is an optional Pro feature. It is never used for Free users, and for Pro users it stays off until you accept a one-time consent sheet or turn on Settings → Cloud AI (Pro). If the server is unavailable, or you reach the daily limit, the app falls back to its on-device AI.
What the apps send
| App | Content sent (only when Cloud AI is on) |
|---|---|
| Tidyshot | The Smart Search text you type (up to 300 characters), today's date and the app language. Never photos or contacts. |
| Cutora | For AI listings: image labels, color names, the product details you typed, marketplace limits, the language and a small photo of the product (at most 768 px). For HQ cutout: the source photo. |
| Pixmend | The photo you choose to enhance with Cloud AI, for upscaling. Nothing else from your library. |
| Foldwise | The recognized text of the document you ask to summarize or ask about, your question, and the app language. Never the page images. |
| Tellmark | The transcript text of the recording you summarize or ask about (with each line's start time), your question, an optional title and the app language. Never audio. |
| Couchly | The command text (typed, or the on-device transcript of what you said; never audio), the app language, the TV brand and the names of apps installed on the TV. |
| Kodo | The scanned link, any redirects you chose to expand, the page title if known, and the app language. Never camera images. |
With every Cloud AI session the app also sends your purchase ID, the platform and the app version, so the server can confirm Pro and apply the daily limit. It may also send a Google Play Integrity or Apple App Attest token, which proves the request comes from a genuine copy of the app.
What the server keeps, and for how long
| Data | Retention |
|---|---|
| Your content (text, questions, photos) | Processed to produce the result and not stored. Text is never written to logs. Uploaded photos and their results are deleted as soon as the app downloads the result, or after 1 hour at most. |
| Daily usage counters (per purchase ID) | Deleted after 7 days. |
| Usage and cost records (task, model, token counts, cost) | The purchase ID is removed after 90 days; only anonymous totals remain. |
| Cached subscription status | Removed 30 days after it was last refreshed, once you are no longer Pro. |
| Store and RevenueCat notification IDs | Deleted after 30 days. |
| App Attest device keys (iOS) | Deleted after 365 days without use. |
| Server logs | Contain only IDs, the task name, response time, token counts and error codes. Web server logs contain the time, request path and status, with no IP address, device details or query strings. |
Service providers
To answer Cloud AI requests, the server uses AI providers that process data on our behalf, under API terms that do not let them use it to train their models:
- Anthropic (Claude models) — text tasks for every app, and the small product photo for Cutora listings.
- Replicate — image processing for Cutora, such as HQ cutouts.
- RevenueCat — confirms Pro status.
- Google Play Integrity and Apple App Attest — confirm the request comes from a genuine app.
These providers may process data in the United States and other countries. If we add or change a provider that receives your content, we will update this policy and the in-app consent text first.
App by app
Tidyshot
Tidyshot needs access to your photo library (and, if you use contact cleanup, your contacts) to find duplicates, blurry shots and old screenshots. All of this analysis runs on the device; photos and contacts are never uploaded. With Cloud AI on, only your Smart Search text is sent.
Cutora
Cutora uses your camera or photo library to cut out subjects. Background removal, passport photos and editing run on the device. With Cloud AI on, the photos and details listed above are sent for AI listings and HQ cutouts; uploads and results are deleted after download or within 1 hour.
Pixmend
Pixmend uses your camera or photo library to scan and restore photos. Scanning, color repair and scratch removal run on the device. With Cloud AI on, the photo you choose to enhance is sent to our server for upscaling; uploads and results are deleted after download or within 1 hour.
Foldwise
Foldwise uses the camera to scan documents and stores them on your device. Text recognition, naming and filing run on the device. With Cloud AI on, the document text you choose to summarize or ask about is sent to our server and not stored. Page images are never sent.
Tellmark
Tellmark uses the microphone to record and keeps recordings and transcripts on your device. Transcription runs on the device. With Cloud AI on, the transcript text you choose to summarize or ask about is sent to our server and not stored. Audio is never sent.
Couchly
Couchly finds and controls TVs on your local Wi-Fi network and recognizes speech on the device. Commands travel directly between your phone and your TV. With Cloud AI on, the command text and TV details listed above are sent when the on-device AI cannot understand a command. Audio is never sent.
Kodo
Kodo scans codes with your camera and keeps scan history on your device. A few features use the network, and only when you use them:
- Product lookup: only the barcode number is sent to Open Food Facts or Open Library to fetch product or book details.
- Expanding a short link: when you tap Expand, Kodo contacts the link's servers to follow its redirects. Links never open on their own.
- Ads (Free version): the Google Mobile Ads SDK shows ads and collects device identifiers and ad interaction data, as described in Google's privacy policy. Where required, Kodo asks for your consent first through Google's consent form, and you can change your choice in Settings. Ads are filtered to a general-audience rating. Pro has no ads.
- Cloud AI (Pro): the link details listed above, for a second opinion on whether a link is safe.
Keyvane
Keyvane keeps your 2FA secrets, codes, account names and recovery codes in an encrypted vault on your device. They are never sent to our server or anyone else, and Keyvane has no Cloud AI. The camera is used only to scan QR codes, and screenshots you import are read on the device. Backups are encrypted files that you save where you choose.
Cairnly
Cairnly collects no data. Photos, notes, locations, voice notes and reports stay on your device; nothing is sent to our server or anyone else unless you share a file yourself. Location is used only while the app is open, and addresses are looked up with Apple Maps.
Tallyline
Tallyline collects no data. Scripts, videos, audio, transcripts and take scores stay on your device; nothing is sent to our server or anyone else unless you share a file. Speech recognition runs on the device; when it is not available, Tallyline scrolls on a timer instead of using a server.
Volleo
Volleo collects no data. Speech recognition, translation and AI run on your device. Audio stays in memory and is never saved; conversations are stored on your device only when you tap Save, and you can delete them at any time.
RunBite: Move to Play
RunBite: Move to Play has its own privacy policy at runbite.app/privacy. This page does not cover it.
This website
deskhub.cloud sets no cookies and uses no analytics or third-party scripts. The web server log keeps the time, page and status of each request, without IP addresses.
Your choices and rights
- Turn Cloud AI off at any time in the app's Settings. The app then works on-device only.
- Delete on-device data from inside each app, or by deleting the app.
- Ask us to delete server data. Because content is not stored, the only server data tied to you is the usage records linked to your purchase ID. Email us with the app name and the order ID from your App Store or Google Play receipt, and we will delete them.
- Cancel a subscription in your App Store or Google Play account settings.
Depending on where you live (for example under the GDPR or US state privacy laws), you may have the right to access, correct, delete or object to the processing of your personal data, and to complain to a data protection authority. Contact us and we will respond within 30 days.
Children
The apps are rated for everyone but are not directed at children under 13, and we do not knowingly collect personal data from children. If you think a child has sent us data, contact us and we will delete it.
Security
All traffic to our server is encrypted with HTTPS. Access to the server is limited to the studio, and the server keeps only the data described above.
Changes
If we change how the apps handle data, we will update this page and its effective date. Material changes, such as sending a new kind of content to the cloud, will also be shown in the app before they apply.
Contact
Questions or requests: support@deskhub.cloud. See also the support page and the terms of use.