Your village, your business

Privacy policy

Last updated 1 November 2026

Wudland is an iPhone app by joexk1. There is no Wudland account, advertising SDK or analytics SDK. This page explains the connections you can choose to make.

On your phone

Calendar events and reminders are read through Apple's EventKit after you grant permission. Your settings, village, letters, agent statuses and conversations are kept in the app's local storage. Link secrets and optional model API keys are stored in the iOS Keychain. You can deny or revoke permissions in iOS Settings and keep using the village.

Linked computers

Wudland Link sends status updates from computers you approve. Updates can include a session name, project folder name, computer name, model, tool name, tool count, status and a short note. Prompt-derived titles may contain up to 60 characters of your first prompt. On the computer, use wudland config titles off to turn those titles and file-name notes off.

Updates and script letters are encrypted with AES-256-GCM before transmission. Linking uses X25519 key exchange and a verification code you compare on both devices before approving. The default relay is ntfy.sh; you can configure your own compatible relay. The relay receives network metadata such as IP addresses, message timing and encrypted content. Pairing announcements include the computer label, tool kind, host label and public exchange keys. Wudland does not operate this relay.

Script letters contain whatever text you choose to send. Avoid putting secrets into titles, notes or letters even when using encryption.

Weather and music

If you allow location, the app can request local weather from Open-Meteo. A weather request shares coordinates rounded to two decimal places (or the town you enter) and your IP address with that service. Music access uses Apple's media permissions to show available listening information. These permissions are optional.

The wizard

On compatible devices, Apple's on-device model can power wizard conversations locally. Cloud models from Anthropic or OpenAI are optional: if you choose one, supply your API key and enable cloud consent, the most recent 20 wizard messages (up to 4,000 characters each) and a generic wizard instruction are sent directly to that provider. Calendar, reminders, location, letters and agent snapshots are not attached to wizard requests. OpenAI requests use store: false. Its privacy policy, retention terms and charges apply. Check the consent screen and provider settings before enabling cloud use. Keys are not sent to a Wudland server.

Keeping and deleting data

Unlink a computer in the app to remove its saved connection. Remove the companion configuration on that computer as well with wudland unlink. You can clear saved conversations in the app where the control is available. Deleting the app removes its app-container data; iOS Keychain entries may persist through reinstall. Device backups and OS-managed copies follow your Apple settings.

This website

This website does not use cookies, analytics or advertising, and it does not load anything from other companies: the fonts and scripts are served from the same place as the page. It remembers whether you picked day or night in your browser's local storage, and nothing else. Its host, Cloudflare Pages, processes the network requests needed to serve it. The village demo on the front page runs entirely in your browser with made-up data. External links, including GitHub, have their own privacy policies.

Questions

Use the Wudland issue tracker for questions about data handling. Please do not post personal information, keys, tokens, private calendars or screenshots containing sensitive material.