Privacy policy

Effective 26 October 2026

This policy covers bananana.dev: the app for iPhone and iPad and the relay, both run by CTF Designs, LLC, and the self-hosted bananana brain and nodes they connect. The dashboard is run by its owner for personal use: there is no public sign-up, and no accounts are offered to anyone else. Questions go to [email protected].

No tracking

Neither the app nor the dashboard uses analytics, advertising, tracking or third-party SDKs. Nothing is sold or shared for advertising, and nothing is used to track you across apps or websites.

The app on your device

• Face ID or passcode is handled by iOS. The app only learns whether unlocking succeeded.
• The app connects only to the dashboard. Links to other websites open in Safari.
• Files you open are downloaded to the app’s temporary storage so iOS can preview them, and iOS removes them over time. Photos and camera access are used only when you choose to upload or save a file.
• A session cookie keeps you signed in. It is strictly necessary and is not used for tracking.

What the dashboard processes

• Email address, to identify the account.
• Password, stored only as a one-way Argon2id hash.
• Second-step codes: an authenticator app secret if you set one up, or codes sent by email, which are stored hashed and expire after 10 minutes.
• Sessions with the IP address and a short device description (for example “bananana app on iPhone”), shown to you in Settings so you can sign devices out. Sessions end after 24 hours idle or 7 days.
• Failed sign-in attempts with IP address and time, used only to block attacks and deleted within an hour.
• An activity log of terminal, desktop, file and container actions with time, IP address and device, so the owner can review what was done.
• Files you upload are stored on the server you upload them to.

Nodes and the relay

• The relay (relay.bananana.dev, run by CTF Designs on Cloudflare) connects brains and nodes. Traffic through it is end-to-end encrypted with keys only your brain and your nodes hold, so the relay cannot read commands, output, files or readings. It processes only routing metadata: your installation's identifier, random node identifiers, message sizes and times, and the IP addresses Cloudflare sees when connecting.
• A node sends its readings, process and service lists, and the files, terminal and screen sessions you open, to your brain only. Each node keeps its own private key on the machine.
• Install commands contain a one-time code that expires after 24 hours; only a hash of it is stored on the brain.

Sign in with Apple

The app requests no name and no email from Apple. It receives only Apple’s user identifier for this app, which the dashboard stores after you link your Apple ID in Settings, to recognise you next time. You can unlink it in Settings, or stop using it in your Apple Account settings under Sign in with Apple.

Sign in with Google

Google sign-in asks only for your email address, whether Google has verified it, and your Google account identifier (the openid and email scopes), solely to confirm that the person signing in owns the dashboard account. The dashboard does not request Gmail, Drive, contacts or any other Google data, and it does not keep Google access tokens. Its use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can remove access at myaccount.google.com/permissions.

Who else processes data

• Cloudflare delivers and protects bananana.dev and the dashboard, and runs the relay.
• Resend delivers emailed sign-in codes and alerts.
• Apple distributes the app through TestFlight and the App Store and provides Sign in with Apple. If you share crash reports or feedback through TestFlight, Apple passes them to the developer.
• Google provides Google sign-in when you choose it.

Keeping and deleting data

Account data stays on the dashboard’s server for as long as the account exists. To have data removed or to ask what is held, email [email protected]. Deleting the app removes its data from your device.

Children

bananana.dev is not directed to children and does not knowingly collect their data.

Changes

Changes to this policy are posted on this page with a new effective date.