Cotrieve
Privacy Policy
Last updated October 18, 2026
In short
- Cotrieve runs on your Mac. Your iPhone's screen, what you and your agents do on it, the recordings of it, and your saved passcode stay on your Mac.
- We receive only what your account, plan and payment need: your email, a scrambled identifier for your Mac and its name, and your payment status. Stripe handles your payment details; we never see your card number.
- The assistant and the agents you connect send what they ask for (screenshots, your requests) to the AI service you chose. We don't keep it.
- No ads and no selling of data. The app sends anonymous usage counts to help us improve it, never your screen or anything you type; turn them off in Settings › General. Write to hello@noahgeneralgroup.com to see, correct or delete what we hold.
Who we are
Cotrieve is made by Noah General Group Inc. ("NGG", "we"), a company in Canada. Our privacy officer is accountable for this policy and answers questions and complaints: Privacy Officer, Noah General Group Inc., 14-3650 Langstaff Rd Unit 648, Woodbridge, Ontario L4L 9A8, Canada, hello@noahgeneralgroup.com.
What stays on your Mac
Cotrieve's engine runs on your Mac and talks to your iPhone directly, over a cable or your own network. The following never leave your Mac through us: the live picture of your iPhone, every touch, key and gesture, the activity log, session recordings (on by default, kept in Cotrieve's data folder for 30 days unless you change it), settings, the access keys you give your agents (stored only as one-way hashes), and your iPhone passcode if you choose to save it (in the macOS Keychain, readable only under your Mac account).
What leaves your Mac, and why
Your account and plan
You sign in with a link sent to your email, or with Google; from Google we receive your email address, whether Google has verified it, and your name. When you sign in, and every few hours while Cotrieve runs, the app sends our account service your sign-in session, a one-way hash of your Mac's hardware identifier, your Mac's name (so you can tell your Macs apart when moving a plan) and the time. We use them to confirm your plan and to enforce one Mac per plan. The service runs on Cloudflare.
Your payment
Payments are processed by Stripe. When you buy, Stripe collects your email, name, billing address, payment details and, if you give it, a tax ID, together with device and network information it uses to prevent fraud. Stripe may collect what you enter in its checkout form even if you don't finish. We receive your email, your Stripe customer and payment identifiers, the amount, and whether the payment succeeded, and we keep them with your plan. We never receive your full card or account number. Stripe processes this data under its own Privacy Policy.
The built-in assistant, when you use it
Your request and the screenshots or screen descriptions the assistant needs go to the model you pick: Claude models run through Claude Code on your Mac, under your own Anthropic account and Anthropic's terms; OpenAI models run through Codex on your Mac, under your own ChatGPT or OpenAI account and OpenAI's terms. Nothing of it passes through us.
Anonymous usage counts ("Help Cotrieve improve")
Unless you turn it off in Settings › General, the app sends us, every few hours, counts and timings: which actions ran and how they ended (an error's code, never its message), how quickly your iPhone connected and how the stream and unlocking fared, how far setup got and which of its checks failed or warned (by the check's name, such as "Xcode needs to finish setting up"), what kind of connection problem stopped your iPhone answering (a short category, never an address), the iOS major version of your iPhone and which way Cotrieve drives it, and the app's and macOS's versions. They carry a random identifier made on your Mac, unrelated to your account or your Mac's hardware. They never include your screen, a passcode, a conversation, anything you type, your iPhone's name or identifier, or your email. A batch that can't be sent is dropped.
Agents you connect
Claude Code, Codex, Cursor or any other client you connect receives the screenshots and results it asks for, and handles them under its provider's terms. You choose which agents to connect and can revoke any of them in Settings › Agents.
This website
The site sets no advertising cookies or pixels. Our own analytics (Noah General Group's, run on Cloudflare, not a third party's) counts visits. A first-party cookie, shared by Noah General Group's websites, and a random number in your browser's storage tell repeat visits apart. It notes the pages you open, where you came from, your browser and device, the city and network your connection comes from, and what you click, and it records how pages are used, so we can see where they confuse people. Every form field is hidden in those recordings, your account, plan and checkout pages are never recorded, and nothing is recorded if your browser sends Global Privacy Control. Each report your browser sends is kept as received, with your IP address. None of it is linked to your account, sold or shared for advertising.
The site also keeps your theme and language choices in your browser, and, if you sign in to your account on the site, that sign-in until you sign out (while you sign in to buy, it also keeps the plan you chose for 20 minutes, so checkout can carry on). Our hosting provider, Cloudflare, keeps routine request logs and counts page views with its cookieless Web Analytics.
Who we share it with
Only the service providers above, each for the purpose stated: Stripe (payments), Cloudflare (hosting, the account service, the sign-in emails, the usage counts and this website's analytics) and Google (signing in with Google, when you choose it). We don't sell personal information or share it for advertising. We may disclose information if the law requires it.
Where it is processed
Our service providers may store and process information outside Canada, including in the United States, where it may be accessible to the courts and authorities of those countries. We rely on their contractual protections to keep it at a comparable level of protection.
How long we keep it
Account, plan and payment records are kept while your plan exists and then as long as tax and accounting law requires (generally six years in Canada). A Mac's record is replaced when you move your plan, and deleted with the plan. Recordings on your Mac are deleted after the period you set.
Your choices and rights
You can ask to see the personal information we hold about you, to correct it, or to delete what we're not required to keep. Write to hello@noahgeneralgroup.com; we answer within 30 days. On your Mac you can turn recordings off, delete them, remove your saved passcode, revoke any agent's key, or remove Cotrieve's data folder entirely. If you're not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada.
Security
Cotrieve's data folder and recordings are readable only by your Mac account. Plan tokens are signed, connections to our services are encrypted, and agents can reach the engine only from your Mac, each with its own key.
Children
Cotrieve is a tool for adults and isn't directed at children.
Changes
We'll post any change to this policy here with a new date, and tell plan holders by email before a change that affects how we use their information.