Legal

Privacy Policy

Last updated: October 19, 2026

Your privacy matters

1. Scope

This Privacy Policy applies to the apps, websites, browser extensions, macOS tools, and other software projects published by Mohamad Yahia. Unless a specific app says otherwise, this page describes the default privacy approach across all of my apps.

2. What I collect

I try to collect as little data as possible. Many of my apps work entirely on-device and do not send personal information to my servers at all. If a specific app needs account, payment, support, crash, sync, or license data to function, that app may process only the information required for that feature.

3. App content and usage data

I do not treat your personal files, browsing history, tabs, prompts, documents, or workspace content as general-purpose analytics data. If an app processes that content, it is only for the feature you triggered, such as search, organization, sync, restore, or AI assistance.

4. AI features

Some apps may offer optional AI-powered features. When they do, only the data needed for the requested AI action should be sent to the configured AI provider. The exact data flow can differ by app and provider, so app-specific settings or docs may include additional detail.

5. Analytics and diagnostics

Some apps may include lightweight analytics, diagnostics, or error reporting to help improve stability and product decisions. When used, I aim to keep that collection minimal, relevant, and non-invasive. If an app offers a way to disable optional analytics, that control should be respected.

6. Data sharing

I do not sell your personal data. Information may be shared with service providers only when needed to operate a feature, such as hosting, payments, authentication, error monitoring, or AI processing. Those providers handle data under their own terms and privacy policies.

7. Retention and security

I aim to retain data only for as long as it is useful for the related feature or required for operational, security, or legal reasons. I also take reasonable steps to protect the data I do process, but no system can promise absolute security.

8. Changes to this policy

I may update this policy as my apps evolve. When I do, I will update the date on this page. Continued use of my apps after an update means the latest version applies.

9. Ghostex and the Ghostex phone app

Ghostex runs on your own computers. Your projects, files, prompts and agent conversations stay there. The coding agents you run in Ghostex send what they need to the AI providers you choose, under your own accounts and those providers' terms.

The Ghostex phone app has no account. It talks to the computers you pair it with over encrypted connections (SSH, and WireGuard for Easy Connect), and it never sends your code, prompts or conversations to me. When your phone cannot reach the computer directly, Easy Connect passes the encrypted connection through a relay server that cannot read it. The camera, microphone and photo library are used only when you scan a pairing code, dictate a message, talk with the voice agent, or attach a photo or video to a session, and what you attach goes to your own computer. On Android, dictation and the voice agent record what you say on the phone and send it to your own computer, which turns it into text or a spoken reply with the speech service you set up there (such as xAI or OpenAI), using your own key. Read aloud uses the phone's own text-to-speech.

App updates: the app checks ota.ghostex.dev for updates to its own code. The check sends the app's version, its platform and a random identifier for the installation, and Ghostex does not store them.

On Android, the app reads pairing codes with Google's ML Kit barcode scanner, which sends Google technical diagnostics (device model, operating system and app version, performance data and a per-installation identifier); see Google's ML Kit data disclosure.

Usage analytics: Ghostex on your computer sends usage events to PostHog, for example that the app started, that a session started with a given agent, or that a phone connected along with the phone's operating system and app version. Events carry a one-way hash instead of your name, email or account id, and PostHog keeps only the country it derives from the connection.

Bug reports and feedback: when you choose Send Bug / Feedback, the report you review (your text, any screenshots you attach, your GitHub username, and the app version and operating system) is posted as a public issue on the Ghostex GitHub repository, so leave out anything you do not want to be public. To have a report removed, ask through Ghostex support.

10. Contact

If you have privacy questions about any of my apps, use the contact links on the home page and mention the specific app you are asking about. For Ghostex, see Ghostex support.

MoreHomePrivacy PolicyTerms & ConditionsGhostex Support