Courier does not collect any data. The app talks to the Open WebUI server you enter. If you turn on push notifications, the app also contacts a small relay run by the developer each time it launches, and your server later sends notifications through that relay and on to Apple, as described below.
The server address, your sign-in token and any custom headers are stored in the iOS Keychain, on this device only. Signing out removes the token and keeps the server address and the headers, so you can sign in again. Changing the server removes all three.
Courier keeps a cache of your chat list, your projects and the chats you opened, so they show without a connection. The app removes this cache when you sign out, when you change the server, and when the server ends your session. Deleting the app removes it too.
Your accent colour, the haptics setting and which welcome and what's new pages you have seen are stored in the app's preferences on the device.
Courier uses the camera, your photos, your files and the microphone only when you ask it to, by tapping the matching button in the message box. What you attach or dictate goes only to the server you chose. Dictation audio is recorded to a temporary file, sent to your server's transcription endpoint, and deleted afterwards.
Courier has no analytics, no tracking and no third-party SDK. The app sends nothing about how you use it to the developer or to anyone else. The only data that reaches the developer is the push registration and notification traffic described below, and only if you turn push on.
Push notifications are optional. While push is on, the app contacts the relay once on each launch, with your Apple device token. The relay seals the token and returns a push address, which the app saves in your Open WebUI settings. At this step the relay sees the raw device token and your phone's IP address, which it uses only for rate limiting.
Later, your server sends each notification to the relay with the sealed token, and the relay forwards it to Apple's push service (APNs). Here the relay sees the encrypted message, the sealed token and your server's IP address, again used only for rate limiting. It stores and logs nothing, and cannot read the message. The relay is open source, and its /version page reports the commit it runs.
Your messages, files and chats are sent to the server you chose. How that server stores and handles them is up to its operator and covered by their privacy policy.
During the beta, send feedback from the TestFlight app. TestFlight is run by Apple and has its own privacy policy. For anything else, contact the developer, Lukas Trippe, who is named in the licence.
This policy was last updated on 4 November 2026.