Privacy policy

Everything happens on your local network

The phone app connects directly to the host on your computer over your local network or a USB cable. Commands, the app list, their icons, what you type with the remote keyboard, terminals, screenshots and recordings travel only between your devices. Screenshots and recordings are saved on your computer. Dokki only goes online for the features you turn on, described below.

Some features never leave your computer: Keep awake, the dokki command line and its MCP server (which only talk to Dokki on the same computer), and Grok Bot, which Dokki only opens on your computer so you can type into it, without reading anything from the app.

What Dokki does not collect

You do not need an account to use Dokki. We do not sell or share personal data, and the apps include no ads, trackers, analytics or crash reporting. What you do with Dokki on your network never reaches us.

Optional account and sync

You can create an account, only if you want to, from Dokki Studio on your computer. It syncs your docks between computers and enables remote access with Dokki Remote. Without an account, Dokki works the same on your local network. The account lives on Dokki's service (api.dokki.io), hosted on Railway with a Postgres database.

• Your email. We use it only to send you sign-in codes, 6 digits and valid for 10 minutes, delivered through the Resend email service. We store it encrypted, never send you marketing and never share it.
• What the service keeps. The public keys of your passkeys and the authenticator model; your devices, with their system and public keys (the name is encrypted by the device itself); your sessions, kept only as fingerprints of their tokens; and a log of account events with their type and time, without IP address or email. Expired codes and sessions are deleted automatically.
• End-to-end encryption. What you sync (layouts and buttons, per-app rules, appearance, your computers and trusted devices, and the backup code) is encrypted on your devices before it leaves, with keys only your devices and your recovery key can open. Our server stores only encrypted data that not even we can read. The PIN, sessions, work modes, developer mode and tokens are never synced.
• Export and delete. In Dokki Studio, in the Account section, you can export your data whenever you like with Export my data. If you delete your account with Delete account, we immediately erase your email, devices, passkeys, sessions, everything synced and your linked backups (or only unlink them, if you choose to keep them); your computers keep their local settings.

When Dokki uses the internet

These features leave your network only if you turn them on:

• Dokki Remote. It takes your dock to your computer away from home through Dokki's relay, end-to-end encrypted: the relay only forwards encrypted bytes and cannot see your screen, your apps or what you type. It needs your account. To limit abuse it uses, in memory only, each connection's IP address and each account's byte count; it does not store the content or the IP addresses. It is off by default.
• Notifications. If you turn them on, your computer alerts your phone through Dokki's service and Apple's (APNs) or Google's (Firebase Cloud Messaging) service, with no account needed. We store your phone's notification token encrypted, without an account or address, and delete it after 90 days without use. Alerts carry only identifiers, never content. The Live Activity (Dokki Live) shows the tool, the project and a command's progress, and what an agent asks only if you turn on previews in Studio.
• Backups. The cloud backup is anonymous: a code you keep, no account. Your settings are encrypted with that code before upload, and deleted after 365 days without use or when you delete them.
• Voice. By default, your phone turns speech into text (on the device itself when it can; otherwise with the system's speech service from Apple or Google) and only the text reaches the computer. If you choose the xAI engine, the audio goes from your phone to your computer and from there to xAI, with the xAI key you pasted in Studio; that key stays in your computer's key store and never reaches the phone. Dokki does not keep the audio.
• Integrations and other connections. Twitch, Discord, Philips Hue and Home Assistant connect directly from your computer to those services or devices, only if you set them up. The computer also downloads the icons of the websites you pin and Spotify cover art. The Windows host checks GitHub for updates and sends only the installed version.

What is stored on your devices

The host keeps on your computer the dock settings, your presets, a count of the apps you open from Dokki (to suggest your most used ones), the pairing PIN, your account and integration tokens in files only your user can read, and a local developer-mode log that records actions without their text. The phone keeps your computer's address, the pairing session and your layout preferences. Uninstalling Dokki deletes this data; on the computer you can also delete its settings folder.

Permissions it uses, and why

Each permission is used only to carry out actions you request from a phone paired with your PIN or from Dokki Studio.

• macOS. Accessibility, to move the cursor, click, type and send media keys. Screen Recording, for screenshots and recordings you ask for. Local Network, to receive the phone's connection. If you turn on Keep awake with the lid closed, macOS asks you once to approve Dokki's power helper in System Settings.
• Windows. Private network access in the firewall, to accept the phone’s connection. Dokki uses standard Windows features to open apps, control sound and simulate the mouse and keyboard.
• iPhone and iPad. Local Network, to find and connect to your computer. Camera, only to scan the pairing QR code. Microphone and speech recognition, only while you use Voice. Face ID, to confirm sensitive actions. Notifications, if you turn them on. The app does not ask for photos, contacts or location.
• Android. Internet and network state, to connect to your computer. Camera, only for the QR code. Microphone, only while you use Voice. Fingerprint or face, to confirm sensitive actions. Notifications, if you turn them on.

How to delete your data

Your account and everything the service keeps about it are deleted immediately with Delete account in Dokki Studio. A backup is deleted from Backups in Studio, and notification tokens are deleted automatically after 90 days without use. What is on your devices is deleted when you uninstall Dokki or delete its settings folder.

The dokki.io website

The website uses no cookies. We count visits with Cloudflare Web Analytics, which uses no cookies, stores no personal data and does not track you across sites: it records the page viewed, the referrer, the approximate country and the browser or device type. That is why there is no consent banner. The interactive demo runs entirely in your browser and connects to nothing.

If you write to us

If you email [email protected], for example through Notify me, we use your address only to reply or to tell you about the launch. Ask us to delete it at any time and we will.

Children

Dokki is not directed at children and does not knowingly collect data from minors.

Changes

If this policy changes, we will publish the new version here with its date.

Contact

Privacy questions: [email protected].