CLO2 — Privacy Policy
Last updated: 2026
CLO2 is built by Sakura5. It connects your iPhone to a small helper program you install on your own computer, which runs Claude Code there with your own Anthropic account. There is no CLO2 account and no CLO2 cloud storage: your sessions, conversations, files, artifacts and secrets are kept on your computer, and messages between your iPhone and your computer are end-to-end encrypted.
What the app handles
- Nothing about your code or conversations on our servers. Sessions, transcripts, uploaded files, artifacts and secrets are stored on your own computer (in ~/.clo2 and Claude Code's own ~/.claude folder).
- Relay traffic — when your iPhone can't reach your computer directly, encrypted messages pass through our relay server (Cloudflare). The relay cannot read them: they are encrypted with keys that exist only on your paired devices, and the relay does not store message contents.
- Push notifications — your computer asks the relay to send a notification through Apple. The notification contains only a fixed text ("Claude finished", "Claude is waiting for you", "Claude ran into an error") and a random session id, never conversation content. Your device's push token is kept on your paired computer and passed to the relay only to deliver that notification.
- Purchase status — handled by Apple to unlock and restore CLO2 Pro (see Third parties).
- App settings — stored locally on your iPhone; pairing keys are stored in your iCloud Keychain so your other Apple devices know your computers.
Your computer, your data
Claude Code runs on your computer under your own Anthropic account; its use of your code and prompts is governed by your agreement with Anthropic, not by us. CLO2 does not send your code or conversations to any AI provider other than the Claude Code you run. The helper keeps its data in ~/.clo2 on your computer; delete that folder (or run clo2 uninstall) to remove it.
Permissions
Camera: to scan the pairing QR code, to take photos you choose to send, and — only if you turn on gesture control — to read hand gestures on the device; frames are processed on the iPhone and never stored or sent. Microphone and speech recognition: only while you dictate a message. Local network: to talk to your computer directly on the same Wi-Fi. Face ID: before showing a stored secret again. Photos (add only): to save images you choose to keep.
What we do NOT do
- We do not sell your data.
- We do not use your data for advertising or cross-app tracking.
- We do not require an account to use the core features.
- We do not see, store or train on your code, prompts, conversations or files.
- We never handle your Anthropic or Claude credentials — you sign in to Claude Code yourself, on your computer.
- We do not show ads, and the app contains no advertising, attribution or analytics SDKs.
- We do not ask for an email address, a sign-in, or any account.
Third parties
Purchases are handled by Apple: payment is charged to your Apple ID and we never see your payment details; subscription status is checked on your device with Apple's StoreKit. The relay that carries encrypted messages and push requests runs on Cloudflare. Push notifications are delivered by Apple Push Notification service. Claude Code is provided by Anthropic under your own agreement with them. CLO2 is independent and not affiliated with or endorsed by Anthropic.
Children
CLO2 does not knowingly collect personal information from children.
Contact
Email support@sakura5.app.