Effective 19 August 2026.
Ariava has no user accounts, email sign-in, or password. Watch and Host identities are device-local Ed25519 key pairs. Identifiers are derived from the public key. There is no owner string, login, or shared command secret.
The Watch stores, in non-synchronizing Keychain (this device, after first unlock):
Resetting Watch identity replaces signing keys and pairing. Uninstalling the app or wiping the Watch removes local data we stored there.
The Watch talks to the Ariava Relay (Cloudflare Workers and D1). Relay routes and stores Host-scoped state. It does not run your coding agent.
Relay handles:
reply and interrupt command blobs, plus opaque Host receiptsreply and interrupt payloads are encrypted on the Watch and decrypted only on the paired Host. Relay acknowledges storage with { commandId, receivedAt } only. Relay and D1 are not given command plaintext, decrypted bytes, terminal status text, or the content of encrypted receipts.
Signed requests include a timestamp and nonce for replay protection. They do not include your Apple ID.
If you allow notifications, Relay delivers Apple Push Notification service (APNs) alerts to the Watch. APNs categories are agent.done and agent.need_human.
Where encrypted previews are used, Relay and APNs see recipient-specific ciphertext and low-sensitivity fallback metadata, not plaintext project names or agent preview text. After a successful local decrypt, the Watch may show that preview in Notification Center. That on-device display is intentional.
On the Watch you can enter a reply by voice in two ways: Apple Watch system dictation, or optional third-party voice transcription (for example Volcengine).
Apple Watch system dictation turns speech into text through the watchOS input surface. That text is then sent as a normal encrypted reply. This path does not upload audio through Relay for speech-to-text, and it is not counted against Ariava’s monthly voice minutes.
If you choose third-party transcription, the Watch records 16 kHz mono PCM and uploads it through Relay so a transcript can be returned. Audio and recognition requests are not end-to-end encrypted to your Host the way reply / interrupt are. Speech-to-text is performed via Relay using that third-party service (currently ByteDance Doubao / Volcengine). Do not use this path for audio you do not want processed that way. The recognized text can then be sent as a normal encrypted reply.
Monthly minutes for third-party transcription are Free 10 minutes and Pro 300 minutes per UTC calendar month, counted from uploaded PCM. Text replies, the system keyboard, Apple Watch system dictation, and interrupt are not counted.
Ariava Pro is an auto-renewable annual Apple subscription. Apple processes the purchase, tax, trial eligibility, restore, and cancellation. We do not receive your Apple ID password or payment card number. The Watch reads StoreKit 2 entitlements (verified product and expiration) to gate extra Host pairing and the higher voice allotment.
The Local Bridge on your Mac or Linux/WSL machine holds Host identity material and live agent session state. That Host data stays under your control on that machine. The pi extension talks to the Bridge on loopback only. Ariava does not require an Ariava cloud login for the Host.
We do not sell personal information. Processors that may see technical data because you use the product:
We may disclose information if required by law.
reply, and interrupt.Ariava is not directed at children under 13, and we do not knowingly collect their data.
We may update this policy by posting a new version at https://ariava.noyx.io/privacy. The effective date above will change.
Questions: noyx@duck.com