Privacy Policy

Effective: September 8, 2026 · Publisher: Arthas Consulting LLC

What Toque Is

Toque is a self-hosted system for managing Claude Code sessions from your phone. The open-source server runs on your own hardware (a laptop, a Raspberry Pi, a VPS) and the mobile app connects directly to it over your private network. This policy covers the Toque app for Android and iOS, the toque.sh website, and the optional hosted push relay. It is published by Arthas Consulting LLC.

What the App Collects

The app has no accounts and no analytics. It holds one piece of data that counts as personal under most privacy laws:

  • A push notification token, issued by Apple (APNs) on iOS or Google (Firebase Cloud Messaging) on Android. The app registers it with the Toque server(s) you add, so your own server can notify your phone. It is not sent to us. It exists only while the app is installed and is rotated by the operating system.

Everything else you enter, such as server addresses, API keys and session transcripts, stays on your device and is exchanged only with the servers you configure.

Update Checks

On launch, the app checks ota.arthas.dev for a newer version of its web layer. The request carries no account, device identifier or usage data. Like any web request it exposes your IP address to the host for the duration of the request; the host runs on Cloudflare, whose edge logs standard request metadata. Nothing from these checks is stored by us or used to identify you.

Data Your Server Stores

Your self-hosted Toque server stores the following locally in a SQLite database on your machine:

  • Session metadata (names, branches, status, timestamps)
  • Notification history (permission requests, approvals, rejections, run outcomes)
  • Push tokens of the phones you have registered
  • Token usage and cost figures derived from Claude Code's local transcripts

This data never leaves your machine unless you configure it to. You control it entirely.

Push Notifications

While the app is open it polls your server; nothing is pushed. For notifications while the app is closed, your server needs a delivery path. Either way the delivery service sees your push token and a short payload (for example "Session needs approval" and the session name); no notification content is stored beyond delivery.

  • Your own Firebase project: payloads go from your server through Google's Firebase Cloud Messaging (and, on iOS, Apple's APNs). Google's and Apple's terms apply.
  • The hosted relay (Toque Pro): an optional paid service we run on Cloudflare Workers at push.arthas.dev. Your server sends the push token and payload to the relay, which forwards them to Firebase/APNs. The relay stores a hash of your license key, the email the key was issued to, and the subscription state; it does not store tokens or payloads after delivery. Payments are handled by Polar as merchant of record; we never see your card details.

Push notifications are optional. Toque works fully without them.

Network Communication

Apart from the update check and, if you enable it, the hosted relay, the Toque app communicates only with your server at the address you configure. No data is sold, and none is shared with advertisers or data brokers.

Claude Code Transcripts

Toque reads Claude Code's local transcript files (stored by Claude Code at ~/.claude/projects/) to display session metrics like token usage and context window status. These files are read locally on your server and their contents are never transmitted beyond your private network.

The Website

toque.sh uses self-hosted Umami analytics in cookieless mode to count page views. No cookies are set and IP addresses are not stored. No consent banner is needed because no personal data is processed.

Third-Party Services

  • Google Play and the Apple App Store: distribute the app. Google's and Apple's privacy policies apply to the stores.
  • Firebase Cloud Messaging / APNs: push delivery, as described above.
  • Cloudflare: hosts the update channel and the hosted relay.
  • Polar: billing for the hosted relay.

No other third-party services are used.

Your Rights

If you are in the EEA or the UK you may access, correct, erase, restrict or port your personal data and object to its processing. If you are a California resident you may ask what we hold, request deletion, and opt out of sale or sharing (we do neither). For the free app there is nothing we hold to act on: removing a server in the app, or uninstalling it, ends the token registration. For the hosted relay, email us and we will delete the key record within 30 days. Apple and Google may process push tokens in the United States and elsewhere.

Children

Toque is a developer tool for adults. It is not directed at children under 13, and both store listings carry an adult age rating. We do not knowingly collect personal information from children.

Changes

If this policy changes, we'll update this page and the effective date above.

Contact

Arthas Consulting LLC · tristan@arthas.dev · or open an issue on GitLab.