Nodkey has no account, no advertising and no tracking. Your passwords, keys and passkeys stay on your iPhone and in your own iCloud, end-to-end encrypted. If you connect AI agents or the browser extension, their requests pass through our relay end-to-end encrypted, so the relay cannot read them. The relay sees the IP address an agent connects from, shows it on your iPhone so you can see where a request comes from, and deletes it after at most 6 minutes. Apart from that, only anonymous crash reports are sent, so faults can be fixed.

If you pair an AI agent, it reaches your iPhone through our relay (relay.nodkey.app, run by KH Labs on Cloudflare). The relay keeps a random id for your phone, its public keys and its push token, and for each agent its id, the name it gives itself and its public keys. Every request and answer is end-to-end encrypted between the agent and your iPhone; the relay only passes it on and cannot read it. Like any server, the relay sees the IP address each connection comes from. With each request it keeps the agent's IP address and the country Cloudflare finds for it, so your iPhone can show where the request came from. It never stores your iPhone's IP address and keeps no logs of IP addresses. A request, its answer, the IP address and the country are deleted 2 minutes after the agent sent the request (up to 6 minutes for an SMS code), and an attached screenshot as soon as you answer. Cloudflare's storage keeps a recovery history of the relay's data for 30 days, which we do not use. Your iPhone keeps the address in the agent's history, on the phone only. Apple's push service only learns that a request is waiting. Remove an agent or turn agents off, and the relay forgets it.

The Nodkey extension for Firefox and Chrome works like an AI agent: it pairs with your iPhone, and its requests go through the relay end-to-end encrypted. In the browser it keeps only its own keys, the name of your paired iPhone and its settings. It never stores a password, a code or a card number. When you ask it to fill in a login, it sends the website and, if you leave this setting on, a picture of the page, encrypted so that only your iPhone can read them. When it offers to save a new password or card, the password or card number is encrypted for your iPhone at once. The relay keeps your browser's IP address and country with each request for a few minutes, as for an agent. Apart from that, nothing from the extension is sent to us.

Cards you save in Nodkey stay on your iPhone and in your own encrypted iCloud backup, like your passwords. Cards are off for every agent until you turn them on for it, and you choose which cards it may use. An agent or the browser extension gets a card only for one payment that you approve with Face ID or your passcode, every time. The request names the shop and the amount, and your iPhone says no by itself to amounts above the limits you set for that agent. When the card form on a shop's page comes from a payment provider's site, your iPhone names both, as in “shop.example, via pay.example”, and the browser extension fills the card only into that form. Normally the card details go end-to-end encrypted to that agent only, the relay cannot read them, and the browser extension or the browser on your computer fills them into the shop's checkout without storing them. Cards are meant for that browser, and you turn them on for it only. An agent that can run commands on its own computer could read the card there, so leave cards off for such an agent. A browser can also add your card to a site for later payments, such as a subscription: there is no amount, the card is filled in once, and you approve with Face ID or your passcode every time. This is off until you turn on “Add cards for later payments” for that browser; it is meant for the browser extension or a browser on your computer, not for AI agents. If you let an agent see the full card number (off by default), the agent gets the number, expiry date and security code and can keep them; Nodkey cannot take them back, so only turn this on for an agent you trust. If your iPhone has no passcode, Nodkey gives no cards to agents or browsers, because there is nothing to approve with. Your iPhone keeps a history of which agent got which card, for which shop and amount or for later payments; it stays on your iPhone, and the relay never sees it. Nodkey does not make payments itself.

The full privacy policy: https://kh-labs.dev/nodkey/#privacy