Ormur Privacy Policy

Effective 3 August 2026 · BarbarOS Technologies LLC

1. The short version

Ormur connects your phone to a computer you own. Terminal input and output, commands, keystrokes and files are end-to-end encrypted between your devices. We cannot read, store or decrypt that content. Ormur contains no advertising and no third-party analytics or tracking SDKs.

2. Who we are

Ormur is published and operated by:

BarbarOS Technologies LLC
New Mexico Entity ID 0008113901
1209 Mountain Road Pl NE, Ste R
Albuquerque, NM 87110
United States
info@barbarostechnologies.com

3. What Ormur processes

To pair your devices and establish the encrypted connection, our coordination service processes:

device identity public keys and device labels;
a temporary private-mesh IP address assigned to each paired device;
online/offline state and last-seen timestamps;
a temporary 6-digit pairing code, deleted when used or when it expires;
IP addresses observed during connection setup for routing, security and abuse prevention;
minimal warning-level connection diagnostics that contain no terminal content.

4. What we do not collect

No terminal content: no commands, output, keystrokes or files.
No AI credentials: your tools run on your PC under your own accounts.
No advertising ID, behavioural analytics, cross-app tracking or sale of personal data.
No contacts, calendar, SMS, call logs, health data or precise location.

5. AI tools you choose

Ormur does not provide or proxy AI. If you start a cloud-backed command-line tool on your own computer, that tool may send prompts, pasted text, code or files you explicitly provide to its named AI provider under that provider's terms and privacy policy. Local shells and local models do not make that transfer. BarbarOS cannot read the encrypted phone-to-computer link, but the AI provider necessarily processes content you ask its tool to process.

6. Android permissions

Ormur requests permissions only for user-facing product functions:

Network and foreground service: maintain the encrypted device connection and recover across network changes.
Notifications and vibration: show session events and requests for your attention.
Microphone: optional voice input that you start. Ormur does not retain raw audio. The speech-recognition service selected on your device may process the recording under its own privacy terms.
Files and photos: Android's system picker is used only after you choose an item. The selected item is transferred to your paired PC over the encrypted link and is not collected by BarbarOS.
Boot: restore an explicitly enabled background connection after a device restart.
Google Play Billing: process an optional Play subscription and entitlement. Payment-card details are handled by Google and never reach Ormur or BarbarOS.

Direct-download developer builds may additionally offer a user-approved floating terminal, battery-optimisation exemption, screenshot shortcut and package installer for direct updates. Those special permissions are not present in the Google Play build.

7. How the connection is protected

Session content is protected by WireGuard end-to-end encryption. A relay may carry encrypted packets when a direct path is unavailable, but it cannot decrypt the terminal session. Paired devices use individually revocable credentials, and pairing endpoints are rate-limited.

8. Service providers and sharing

We use infrastructure providers only to host the coordination and encrypted-relay services required to connect devices. They process the limited metadata described above on our behalf. Google Play processes optional subscription purchases, and your device's selected speech service may process optional voice input. We do not sell personal data, share it for advertising or disclose terminal content because we do not have access to it. We may disclose information when legally required.

9. Retention and deletion

Pairing codes are deleted on use or expiry, normally within about 10 minutes.
Device metadata is retained while the device remains paired.
Connection diagnostics are retained for a short operational period.

You can revoke a device in Ormur. To request deletion of all remaining connection metadata, follow the steps on our Ormur data-deletion page or email info@barbarostechnologies.com.

10. Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing, and to data portability. California residents may also have rights under the CCPA/CPRA. We do not sell or share personal information as those terms are defined under California law. EEA and UK residents may complain to their local supervisory authority.

11. Children

Ormur is a developer utility and is not directed to children under 16.

12. Changes and contact

We will update the effective date when this policy changes. Questions and privacy requests: info@barbarostechnologies.com.