Privacy Policy

Last updated November 3, 2026

This policy explains what Phone Harness Inc. collects when you use phone-harness.com and Phone Harness Cloud, and what happens to it.

What we collect

• Account: your name and email from sign-in, and the API keys you create (stored only as hashes).
• Billing: your credit balance, top-ups, per-minute charges and subscriptions. Card details go directly to Stripe; we never see them.
• Sessions: when each phone started and ended, why it ended, its duration and cost, and technical logs needed to run the service.
• Phone activity: when you or your agent use a phone, we automatically log that activity, including commands and their inputs, text entered, taps and other interactions, apps and pages used, and session details. We use it to operate, secure and improve the service, and to prevent abuse.
• Website: anonymous usage analytics and session replays on the marketing pages, only with your consent (see Cookies below), and anything you submitted on the former waitlist form.

Data on the phones

What remains on a phone depends on which phone it is. Beyond the activity listed above, we do not inspect it while you are using the phone except as needed to keep the service working or to investigate abuse. Don't enter information on a phone that you don't want processed this way.

• Temporary Android phones: apps, logins, files and everything else on the phone are deleted when the session ends.
• Saved Android phones: apps, logins and files stay on the phone between sessions until you reset it.
• Cloud iPhones: you use a dedicated phone. Apps, logins and files stay on it between sessions until you reset it. After the subscription ends, or a trial ends without converting to a plan, we erase the phone within 7 days.

Who processes it

Clerk (sign-in), Stripe (payments), Amazon Web Services (hosting in the United States), Vercel (the website and dashboard), PostHog (analytics) and Loops (email to people who asked to hear from us). Each receives only what its role needs.

Cookies

The marketing pages set no optional cookie until you choose in the banner. Your choice is stored in your browser for six months, and “Cookie settings” in the footer reopens the banner at any time; withdrawing consent also deletes the analytics cookies. Browsers that send the Global Privacy Control signal are treated as having refused; that signal overrides the banner, so turn it off in the browser to opt in.

• Essential: Clerk sets sign-in cookies (for example __client_uat and __session) only when you sign in to the dashboard. They keep you signed in and cannot be switched off; the marketing pages read only whether a session exists.
• Analytics (optional): PostHog stores an anonymous identifier in a ph_…_posthog cookie for up to a year to count page views and clicks. Vercel Analytics is cookieless.
• Session replay (optional): PostHog records how the marketing pages are browsed, with everything you type masked. It uses the same cookie and needs Analytics.

Retention and your rights

Account and billing records are kept while your account exists and as long as tax and payment rules require. What stays on a phone is described under Data on the phones. We keep activity data as long as needed to run and secure the service. You can ask us to export or delete your account data at support@phone-harness.com; we will do so unless a legal obligation requires keeping a record.

Changes

We will post changes to this policy here with a new date. Material changes are also announced by email to account holders.