Privacy policy

1.By default, the app sends nothing

OcuClaw connects your Even Realities glasses to your own OpenClaw machine. Your conversations, voice input, and screen content travel between your own devices — there is no OcuClaw account, no sign-in, and no server of ours in that path.

Normal relay operation does create limited local logs. The relay writes routine operational messages — such as startup, connection, and error status — through OpenClaw's logger even when enhanced debugging is off. Those logs remain under OpenClaw's local log handling on your machine and are not sent to OcuClaw automatically.

The richer diagnostics used to assemble a bug report are separate. Additional client-app diagnostics are collected only when you turn on Client Debug Enabled in the app's Settings menu. On the relay, the off-by-default externalDebugToolsEnabled configuration flag enables bounded diagnostic capture, preview, and local save. A second off-by-default flag, allowDebugUpload, separately permits the full bundle to be handed to the phone for a user-initiated upload.

Enabling any of these settings does not itself send data to OcuClaw.

2.When you send a bug report

Nothing is uploaded merely because diagnostics exist. For a relay-backed report, externalDebugToolsEnabled must permit bundle assembly and allowDebugUpload must separately permit upload handoff. You must then tap Send to OcuClaw for that specific report. Client Debug Enabled only controls the additional app-side diagnostics; turning it on does not upload anything.

A report bundle may include:

• Recent app activity — the last 5 minutes by default; a slider lets you include more
• Recent message text, session titles, and agent names
• Connection, screen, and voice event traces; console output; build and version info
• The note you write, and — only if you fill it in — your email or Discord contact
• An anonymous install ID (a random identifier; it names your install, not you)

Before anything leaves the device, secrets such as relay and gateway tokens and network addresses are always stripped, and the app shows you the size, time window, event count, and per-category breakdown of the bundle.

If you want to inspect the complete prepared bundle first, choose Save to my machine. This writes the ZIP and its metadata sidecar to your PC or other OpenClaw machine without uploading them. You can open those files before deciding whether to return and tap Send to OcuClaw.

3.Where it goes

Uploaded bundles are stored as private blobs on Vercel's storage, with a small index (reference code, timestamps, sizes) in Upstash Redis — both under OcuClaw's own accounts. Blob URLs are never public, and nothing in the store is listable from outside.

Every report is deleted automatically 90 days after upload by a daily cleanup job.

4.Who reads it

Reports may be reviewed by:

• The developer, through a private, authenticated dashboard.
• An AI diagnostic assistant. Relevant report content may be submitted once to Anthropic or OpenAI through their commercial API services. Those services are configured not to use the submitted content to train their models. The AI suggests a diagnosis; a human reviews it.

Reports are not sold or shared for unrelated purposes. The full process is described on the bug report pipeline page.

5.Deleting a report

When you send a report, you get a reference like OCU-XXXX-XXXX. That reference is your deletion token: quote it on Discord or email akelu@ocuclaw.com and the report will be deleted ahead of the 90-day window. No account needed — the reference is the only handle that exists.

6.When you send feedback

Submit feedback in the app's ⋯ menu sends a short note to feedback.ocuclaw.com, a service under OcuClaw's own Vercel and Upstash Redis accounts. Nothing is sent until you tap Send.

A note holds:

• The topic you picked and the text you wrote or dictated
• Your email or Discord contact, only if you fill in that optional field
• The app and plugin versions, which agent you use (such as OpenClaw or Hermes) and your phone's operating system
• For a Translation error note only, your phone's language and the app's voice language setting

A note never includes your chat history, session content, relay or gateway tokens, or API keys. Dictated feedback is turned into text by the voice engine you already use, and only the text is sent. Your anonymous install ID and your network address are stored only as one-way hashes, which we use to stop spam.

So the app can show replies, it makes a random inbox key the first time you send feedback and keeps it on your phone. The service stores only a one-way hash of that key, so only your phone can open your feedback and its replies. If you delete the app, the key goes with it.

The developer reads feedback, with help from an AI assistant that tags it, sorts it and drafts replies. As with bug reports, that assistant may submit a note once to Anthropic or OpenAI through their commercial API services, which are configured not to train on it. A reply written in free text is approved by a person before you see it. Your note and contact are never posted publicly; if a note leads to a public GitHub issue, the issue describes it in our own words. Notes and replies are deleted automatically one year after their last activity. To have one deleted sooner, quote its reference, like FB-XXXX-XXXX, on Discord or by email to akelu@ocuclaw.com.

7.The ocuclaw.com website

The website uses two analytics tools, so we can see which pages help and where people get stuck during setup. Neither is used for advertising, and nothing is sold.

• Vercel Web Analytics counts page views and clicks on partner links. It uses no cookies.
• PostHog records page views, clicks, scrolling, which setup design you used and how far you get through the setup steps. For some visitors it also records a session replay: a reconstruction of the page with your mouse and scroll movements. Anything you type into a form is masked and never recorded.

If your browser's time zone is in Europe, or it sends a Do Not Track or Global Privacy Control signal, PostHog stores nothing in your browser and records no replay. Your visit is counted with a one-way code that changes every day. Otherwise PostHog keeps a random ID in a first-party cookie and local storage, so it can link the pages of one visit.

PostHog data is held by PostHog, Inc. in the United States. Replays are deleted after one month.

In full-tracking mode, clicking a Cloudways affiliate link also creates a separate random attribution code in your browser's local storage. We send the same code to Cloudways in the link and include it in the PostHog click event. This lets us connect a previously recorded click to signup, sale and commission outcomes that Cloudways reports later. The link also identifies the selected agent, Hermes or OpenClaw. The code contains no name or email, is not a login or authentication identity, and only connects activity from the same browser; it does not identify you across devices.

A click only means you opened the partner link. A reported signup or sale is a separate partner-reported outcome, and commission approval and payment are later statuses that may change or be reversed. The reports describe our referral commission, not your total spending. A commission marked paid by the partner is not proof of a bank deposit.

We do not add this persistent code in cookieless mode (including European-time-zone, Do Not Track and Global Privacy Control visits), when analytics is turned off, or if browser storage or secure random-code generation fails. The link still works with its page and agent tags. Turning analytics off removes the code from this browser and prevents future browser attribution while that choice is saved; clearing browser storage resets the code and the saved choice. The switch does not send a server-side revocation or delete data already recorded. Later partner reports may still be connected using a code sent before you turned analytics off, because they cannot see this browser's current preference.

Links to Cloudways, Even Realities and Monid carry a referral tag, so the partner can credit OcuClaw for a signup. Cloudways links without a browser attribution ID retain their page tag and selected agent. Once you are on a partner's site, its own privacy policy applies.

8.Changes to this page

If what's collected or how it's handled changes, this page changes with it, and the date at the top moves.