Privacy policy

OpenCode for Android (an unofficial client) · last updated 29 October 2026

OpenCode for Android runs the OpenCode agent on your phone. This page explains what data the app handles and where it goes. There is no OpenCode for Android account, and the developer runs no server that receives your chats, files or Google data.

Data that stays on your phone

• Chats, the workspace files the agent creates, artifacts and their versions, memory notes, projects and settings are stored in the app's private storage.
• The local agent server listens only on the phone's loopback address (127.0.0.1) and is protected by a password the app generates and encrypts with the Android Keystore.
• The app contains no analytics, advertising or crash-reporting code, and it turns off OpenCode's own telemetry.
• Uninstalling the app, or Settings → Delete all data, removes this data from the phone.

Data that leaves your phone

• Model providers. When you chat, your messages, attachments and the context the agent gathers are sent to the AI model provider you choose (for example the free OpenCode Zen models or a provider you connect). Their privacy policies apply to that data.
• Agent tools. When the agent searches or fetches the web, those requests go to the sites and search services involved.
• Downloads. On first launch the app downloads the OpenCode runtime from download.pantiru.com (or npm as a fallback). Like any web server, these hosts see your IP address and the file requested.
• Google Drive, only if you connect it: see below.

Google Drive

Connecting Google Drive is optional. You sign in on Google's own page in your browser, and the app asks for these permissions only:

• drive.file: create and update the files this app uploads. The app cannot see, read or change any other file in your Drive.
• openid and email: your Google account's email address, shown in the app so you know which account is connected.

The app uses this access for one purpose: copying your artifacts into an "OpenCode Artifacts" folder in your Drive when you ask it to. The sign-in token is stored on your phone, encrypted with the Android Keystore, and is sent only to Google. Your Google data is never sent to the developer or to any third party, is not used for advertising, and is not used to train AI models.

You can disconnect at any time in Settings → Google Drive (this revokes the app's access at Google) or from your Google Account's third-party access page. Files already uploaded stay in your Drive until you delete them.

OpenCode for Android's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Contact

Questions about this policy: beniaminpantiru@gmail.com.

← OpenCode for Android