Privacy policy
AgentAction asks you to approve or refuse things an AI assistant wants to do. To do that it needs almost nothing about you. There is no account, no sign-up, no advertising and no tracking, and the key that signs your decisions never leaves your phone.
This policy explains exactly what does leave your phone, why, and how to get rid of it. It is written to be read, not to be survived.
Who is responsible for your data
It depends on which version you are using, and the difference is real rather than legal decoration.
If you were given a pairing code by a company
That company decides which of its assistant's actions need approval, and it receives your decisions. It is the data controller. AgentAction is the software they use. Ask them about their own privacy practices — we cannot answer for them.
If you use the hosted service run by Kno2gether Labs
Kno2gether Labs Ltd is the data controller for the approval service itself, and processes the information below on that company's behalf.
If someone runs AgentAction on their own servers
AgentAction is open source, and anyone can run the approval server themselves. When they do, they hold the data and they are the controller. Kno2gether Labs receives nothing.
What leaves your phone
This is the complete list.
| What | Why | How long |
|---|---|---|
| A public key | So a decision can be proved to have come from your phone and not from someone else. It is the public half only — see below. | Until you unpair |
| A notification token | So your phone can be buzzed when something needs approving. It is issued by Apple or Google, identifies the app installation rather than you, and changes when you reinstall. | Until you unpair or reinstall |
| The name you give this phone | So whoever paired with you can tell their devices apart in a list. You choose it, and "Work phone" is as good a choice as your own name. | Until you unpair |
| Your decisions | Approve or refuse, and when. This is the point of the product: without a record of the decision, the action cannot be allowed to happen. | Kept as an audit record |
That is all of it. Not your name, not your email address, not your phone number, not your location, not your contacts, not an advertising identifier.
What never leaves your phone
- Your approval key. It is created on the device, held in the phone's secure hardware, and released only after Face ID, a fingerprint or your passcode. It cannot be exported, and we never see it.
- Your face and your fingerprint. The check is done by the phone's operating system. The app is told only whether it succeeded. Biometric data is never sent anywhere and the app cannot read it.
- Anything the camera sees. The camera opens once, to read a pairing code. Nothing is photographed, stored or uploaded.
What the app can see on your phone
Only what you are being asked to approve. It cannot read your messages, your photos, your files or anything else on the device.
The text describing a request comes from whoever set the assistant up, and is shown as plain text exactly as they wrote it. They can see whether you approved, refused, or let it expire.
Permissions, and why each one exists
| Permission | What it is for |
|---|---|
| Camera | Reading a pairing code, once. Declining it means pairing by typing a code instead. |
| Face ID, fingerprint or passcode | Releasing your approval key, every single time you approve. It cannot be turned off. |
| Notifications | Telling you something is waiting. Declining it costs you the buzz, not the request: the app checks for itself every fifteen seconds. |
Tracking and advertising
There is none. No analytics in the app, no advertising identifier, no third-party trackers, no profiling, no automated decision-making about you, and nothing is sold or shared with anyone for their own purposes.
This website sets no cookies and runs no analytics.
Where data is held
For the hosted service, inside the European Economic Area: the database is in Germany and the servers are in France.
Notification tokens are handed to Apple's and Google's push services so the alert can actually be delivered, and those services operate internationally. Where a transfer outside the UK or EEA is involved, it is covered by the safeguards such transfers require.
Your rights
Under UK GDPR and the GDPR you can ask for a copy of what is held about you, ask for it to be corrected or deleted, object to its processing, or ask for it to be restricted. The fastest route to deletion is in your hands:
Unpair the phone. Open Accounts in the app and unpair. Your key, your device name and your notification token stop being usable immediately. Your past decisions remain as an audit record, because a record of who approved a payment is the thing that makes the approval worth anything.
If a company paired with you, ask them — they hold it. For the hosted service, write to connect@agentaction.online and we will respond within one month. If you are not satisfied, you can complain to the Information Commissioner's Office at ico.org.uk.
Children
AgentAction is a tool for people running or supervising software at work. It is not designed for or directed at children, and we do not knowingly collect anything about them.
Security
Decisions are signed on the device with a key held in secure hardware. Every approval requires biometrics or a passcode. Every request carries a four-digit code shown both to you and to whoever asked, so a request that did not come from them can be spotted. A request that is not answered expires and is refused by default.
The source code is public at github.com/avijeett007/agentaction, so none of this has to be taken on trust.
Changes
If this policy changes in a way that affects what is collected, the date at the top changes and the app will say so before you next approve anything.
Contact
Kno2gether Labs Ltd, a company registered in England and Wales.
connect@agentaction.online