Privacy Policy

CueForge connects your iPhone to ComfyUI servers that you run. Your images, prompts, and workflows travel directly between your iPhone and your own servers. The app works without an account, and your creative work never passes through our hands. We collect limited, pseudonymous product analytics and diagnostics to understand whether the app works and to fix failures.

What stays on your device

• Your list of ComfyUI servers (names, addresses, connection settings).
• App preferences and cached status information.
• Images you save are written to your Photos library only when you ask.

None of this is transmitted to us.

What our push relay processes

Native push notifications require a small relay service, because Apple only delivers notifications through its own servers (APNs). When you enable push, the relay stores:

• Your device's anonymous APNs push token.
• A random pairing code that links your device to your server.
• Notification content in transit: a short title and body (e.g. "Render complete"), and identifiers used to open the right server when you tap — never the generated image itself.

The pairing code is random and contains nothing about you. Removing push pairing from a server stops all delivery for it. Deleting your last paired server deletes the relay pairing; inactive pairings are automatically deleted after 366 days. We keep no logs of notification content.

Local network access

The app asks for local-network permission so it can reach ComfyUI servers on your LAN. Connections go directly from your phone to your servers; no third party is involved.

Purchases

Subscriptions are processed entirely by Apple through the App Store. We never see your payment details.

Analytics in the app

CueForge uses PostHog for product analytics. It records a random installation identifier; app, operating-system, and device-model information; screens visited; feature actions and their outcomes; coarse counts such as the number of configured servers or workflows returned; and subscription state or plan choice. We do not send names, email addresses, advertising identifiers, or use this data to track you across apps or websites. IP-based geolocation is disabled.

CueForge uses Sentry for crash, hang, handled-error, and sampled performance diagnostics. Reports can include stack traces, app and device state, and a breadcrumb trail made from the same privacy-filtered feature actions described above.

Analytics and diagnostics never intentionally include server names or addresses, credentials, pairing codes, notification contents, prompts, workflow names or files, image names or image contents. Session replay, screenshots, view-hierarchy capture, generic element autocapture, and network-request capture are disabled. PostHog and Sentry process this limited data on our behalf under their respective security and retention controls. We use it only for app analytics, reliability, and support.

This website

The pages on cueforge.dev use Google Analytics to measure how many people visit, which pages they read, and which sites they arrive from. Google Analytics sets cookies in your browser and receives your IP address, which it uses to derive an approximate location and then discards; we never see it. We use this only to understand whether the site is reaching anyone, and we do not use it to build advertising profiles.

You can opt out for every site that uses it with Google's browser add-on, or by blocking cookies for this site. Nothing on this site requires analytics to work — the release-list form and every page function normally with it blocked.

This applies to the website only. It is separate from the analytics described above, which are inside the app.

Release-news list

If you join the CueForge release-news list on this site, we store the email address you enter, the date you submitted it, the page you submitted it from, and the two-letter country your request came from. Your IP address is used momentarily to rate-limit the form and is not stored.

The list is held in Cloudflare Workers KV and copied to Resend, the service we will use to send the announcements. Cloudflare and Resend process this data on our behalf as our providers.

We use the list only to send CueForge product progress and launch announcements. We do not sell it, share it for advertising, or use it for anything else. Every message we send will carry a one-click unsubscribe link; you can also ask us to remove you at any time using the contact address below, and we will delete your address from both systems.

Changes and contact

If this policy changes, the new version will be posted here with an updated effective date. Questions? Email contact@cueforge.dev.