Flux Pillar · Crewnook

Crewnook Privacy Policy

Crewnook is an independent client for Octop servers, published by Flux Pillar. It is not affiliated with Tencent. You choose the Octop server to which it connects. To provide its core features, it sends content and commands to that server and, when applicable, to the AI providers configured for it. This policy explains what leaves your device, who may receive it, and how retention and deletion work.

Revised: 26 October 2026Contact: hello@coding.com.sg

1. Scope and roles

This policy applies to the Crewnook native iPhone and iPad app published by Flux Pillar. You or your organisation choose the Octop server to which the app connects. Your chosen server is operated by its respective operator. The server operator determines the server's configuration, its AI providers, and its server-side retention and deletion practices. Their privacy terms apply to processing they control. Flux Pillar operates an optional shared notification relay for generic alerts; it does not host your independently selected server or receive its conversation content through the relay.

2. Information Crewnook handles

Depending on the features you use, Crewnook may handle:

3. Where information goes and why

Flux Pillar does not sell this information or use it for targeted advertising.

3a. Optional notifications and the shared relay

Notifications are optional and require iOS permission and a compatible companion running beside each independently operated server. Installing the iPhone app alone does not configure that server. Notifications are private to your registered device and the saved server/account subscriptions you enable; they are not broadcasts of other users' conversations.

The relay receives your Apple push token, random installation/subscription identifiers, authentication and app-verification records, notification type/timing, and encrypted routing information. We use these only to provide app functionality, authorize and deliver notifications, and protect the service—not for advertising or tracking. The push token is encrypted at rest. Random identifiers are associated with your device even though they do not contain your name.

Cloudflare hosts the relay, which sends generic alerts through Apple Push Notification service. Apple receives the generic alert and encrypted route. The relay does not receive your server password, Octop session token, server address, conversation text, documents, or plaintext server/account/thread routing identifiers. Your phone and the selected server's companion hold the routing encryption key; the relay does not.

For persistent notifications, your selected server's companion exchanges your initial authenticated session for a server-scoped notification-only grant. It does not retain that Octop login token. The grant permits activity monitoring for that account, not general API access or sending messages. Current account and expert/thread access are checked before renewal or delivery. Account deletion, disabling, relevant credential changes or explicit revocation invalidate the grant. The companion also holds a separate credential restricted to alerting its relay subscription and encrypts routing before forwarding an event. Independent server operators control their storage, logs, backups and other processing. Flux Pillar does not provide or operate your independently selected Octop server or its AI services.

We do not configure application request logging, advertising or analytics in the notification relay. Its abuse-prevention rate records use a keyed hash of the source IP address, not the raw IP, and expire after one hour, subject to cleanup. Cloudflare and Apple necessarily process network and technical information, which may include IP addresses, under their own service and security practices. This does not mean infrastructure-wide request or security processing is disabled.

Persistent notifications can continue while Crewnook is closed. Once you enable them, an authorized server companion renews its own notification subscription automatically after successful current-account and access checks, including when no new messages arrive. You do not need to open the app daily. Relay installation records expire after 30 days without renewal from the phone; workspace subscription records expire within 24 hours without renewal from the phone or an authorized companion. The server notification-only grant has a rolling 30-day inactivity limit. A server outage exceeding that period, account revocation or an invalid Apple token may require enabling notifications again. Pending delivery events expire within one hour and duplicate-delivery records within 24 hours; scheduled cleanup removes expired records. Encrypted database recovery history may retain deleted records for up to 30 additional days under Cloudflare D1's backup service.

You can disable notifications inside Crewnook, sign out or remove a saved profile to request revocation for that workspace. The device installation may remain for other enabled workspaces or until its inactivity expiry. Turning off notifications in iOS Settings controls whether alerts are displayed; it does not itself guarantee deletion of server or relay records. If offline, a revocation request may wait for connectivity or expiry. Already delivered notifications can remain in Notification Center. Signing out or disabling notifications does not delete conversations or stop server-side routines; contact the relevant server operator for server-data requests. Contact hello@coding.com.sg for questions about Flux Pillar's relay or privacy.

4. Third-party AI disclosure and permission

Sending content to an AI feature may share personal data with a third-party AI provider configured by your chosen Octop server. Crewnook currently obtains content-sharing consent per server/account. You may refuse consent and avoid the affected feature. Consent for future sharing is managed per saved server/account; information already sent cannot be recalled.

Crewnook does not automatically detect changes to the AI providers configured on a server or request consent again when those providers change. Ask your server operator which providers receive your data, what kinds of content they receive, and where to find their privacy terms. If providers change, obtain updated details from the operator before using AI features. Do not submit personal or confidential information unless you understand and accept those practices.

5. Device permissions

Crewnook asks for operating-system permissions only when a feature needs them, such as microphone access for a recording, photo or file access for an attachment, notifications for push delivery, or clipboard access for a remote session. You can deny or revoke permissions in system settings. The related feature may then be unavailable.

6. Analytics and advertising

The current Crewnook native app includes no advertising SDK and no analytics SDK. It does not use advertising identifiers for tracking or build advertising profiles. Network requests made for Crewnook's core server, AI, remote-session, push, and support functions are still data processing and are described in this policy.

7. Storage and retention

The app may keep credentials, settings, limited cache, and recently displayed content on your device so it can remain signed in and function. Signing out of an account or forgetting a saved server removes its locally saved credentials. Do not rely on uninstalling the app to delete all saved credentials; device or operating-system storage and backups may persist.

Messages, attachments, recordings, remote-session material, logs, or AI inputs may also be retained by your chosen server or its configured providers. Their retention periods depend on the server operator's configuration and each provider's terms. Flux Pillar cannot set or erase retention on a server it does not operate.

8. Deletion and account choices

Signing out is not server-side deletion. Signing out or forgetting a saved server removes local credentials but does not delete your account, conversations, files, recordings, logs, or provider-held data. Uninstalling the app also does not delete server data.

To delete server-side data or an account, use the deletion controls supplied by your server operator or contact that operator. For privacy questions about Crewnook, contact hello@coding.com.sg. A third-party AI provider may require a separate request for information it controls.

9. Disclosure, security, and international processing

Information may be disclosed to the recipients described above, when required by law or valid legal process, or when reasonably necessary to protect users, Flux Pillar, or the public. Data may be processed in the countries where your chosen server, remote machine, push service, and AI providers operate. Crewnook uses reasonable safeguards for information under Flux Pillar's control, but no transmission or system is completely secure. Independent server operators and providers are responsible for their own safeguards.

10. Children

Crewnook is not directed to children under 13, and Flux Pillar does not knowingly collect personal data from children through the app. If you have a question about a child’s data in Crewnook, contact us; for data on a server, contact its operator.

11. Changes and contact

We may update this policy when Crewnook's features, providers, or legal requirements change. We will update the revision date and provide reasonable notice of material changes in the app, its store listing, or this page.

Questions about the native app can be sent to hello@coding.com.sg. Questions about an independently operated server, its configured AI providers, or deletion of its data should be sent to that server's operator.

Important: Crewnook's App Store privacy disclosures must be read together with this policy. They describe the data categories associated with the version distributed through the store.