WonderWander privacy policy

Last updated 7 November 2026. WonderWander is made by Uncharted Arts (Jonathan Pollack). Questions: [email protected].

WonderWander is a companion for Claude Code, Anthropic's coding agent, running on your own Mac. It has two parts: the WonderWander app on your iPhone or iPad (with its Apple Watch app), and WonderWander for Mac, which runs a small bridge between the app and Claude Code.

In short: we don't collect your data. There's no account, no analytics, no advertising and no tracking. Your voice stays on your phone. What you send goes to your own Mac, and from there to Anthropic through your own Claude Code, as anything you type into Claude Code does.

Your voice

Speech recognition and speech synthesis run on your phone, using Apple's on-device speech recognition or the optional Parakeet model, and the Kokoro voice or Apple's voices. Audio never leaves your phone: not to your Mac, not to us, not to Apple. Only the recognised text is sent, to your Mac.

What goes to your Mac

The app connects only to the WonderWander bridge on the Mac you paired it with, over your local network or, if you use it, your Tailscale network. The connection is encrypted and tied to your Mac's own certificate, which the app learns from the pairing QR code, so it can't be redirected to another computer. The Apple Watch app talks only to the WonderWander app on your iPhone, which passes its requests on over that same connection.

Over that connection go the prompts you speak or type, your answers to Claude's permission requests and questions, documents you add to your Dossier, and photos, pages or files you attach or share to a session. Before a photo leaves the phone, it is re-encoded and everything but the picture is removed: location, camera details, date and captions. PDFs and text files go as they are. The Mac keeps an attached file for 7 days (a setting on the Mac), so a resumed session can read it again, then deletes it. Nothing is saved to your photo library.

From your Mac, Claude Code sends what you give a session to Anthropic as part of that conversation, under your own Claude account and Anthropic's terms and privacy policy. WonderWander doesn't change what Claude Code sends, and has no access to your Claude account.

What stays on your devices

To work, the app keeps on your phone: the pairing with your Mac (in the Keychain), your settings, recent conversation text it shows you, Dossier documents you have opened or not yet heard, small previews of attachments for 7 days, items you shared to the Dossier or to a session that are waiting for your Mac, and the list of sessions the Share Sheet offers you. Your Apple Watch keeps the latest session list it was shown. WonderWander for Mac keeps its settings, the paired phones and their keys, your Dossier, items you shared from the Mac's Share menu that are waiting to be added, and its logs, all on your Mac. None of this is sent to us. Deleting the app removes what it kept on the phone (choose Forget this Mac first to remove the pairing too: iOS can keep an app's Keychain items after it's deleted); WonderWander for Mac's Uninstall removes what it added to the Mac.

Notifications and the WonderWander relay

WonderWander's notifications come from your own Mac. To deliver them, your Mac passes each one through the WonderWander relay at push.unchartedarts.com, a small service we run on Fly.io, which hands it to Apple's push notification service.

We cannot read your messages. Everything a notification says (your project names, the commands waiting for approval, Claude's replies, questions, Dossier titles and Live Activity text) is encrypted on your Mac with a key that only your Mac and your iPhone have. Your Mac gives that key to your iPhone directly, over the encrypted connection you set up when you paired them; it is never sent to us, to Fly.io or to Apple. The relay refuses any notification that isn't encrypted this way. Until your iPhone decrypts it, a notification reads only "A session needs approval", "A session finished", "A session has a question" or "A new Dossier item".

What the relay does see, for each notification:

• an encrypted address for your iPhone that only the relay can open (it contains your iPhone's push token for WonderWander);
• which kind of notification it is (approval, reply, question, Dossier item, Live Activity or Push to Talk), whether it should make a sound, how urgent it is and how long Apple should try to deliver it;
• a random identifier for an approval card;
• the encrypted contents;
• a public key that identifies your Mac to the relay;
• the internet addresses of your Mac and iPhone when they connect.

What the relay keeps: nothing about your notifications. It does not store push tokens, contents or internet addresses, and it does not log them. To limit how often any one device can use it, it counts recent notifications per iPhone and per Mac under random identifiers, in memory only, for at most two hours. When you choose Forget this Mac, your iPhone tells the relay to stop accepting notifications for it; the relay keeps a random identifier and the time for 31 days.

Fly.io, which hosts the relay, carries its connections encrypted end to end: the relay itself holds the certificate for push.unchartedarts.com, so Fly.io's network sees only encrypted traffic and the internet addresses connecting to it. No other service stands in front of it: the domain's DNS provider only answers where push.unchartedarts.com is, and never carries its traffic. Apple sees what the relay sends, as for any app's notifications. Neither can read the contents.

If you build WonderWander yourself with your own Apple key, your Mac talks to Apple directly and the relay is not involved.

Downloads

The first time they're needed, the app downloads its speech models over HTTPS from Hugging Face (huggingface.co): Claude's voice, Kokoro (about 125 MB, and about 3 MB for each other voice you pick), and, only if you choose it, the Parakeet recogniser (about 480 MB). Hugging Face sees your phone's internet address and which files it asks for, as for any download. Apple's own speech-recognition model is downloaded by iOS.

Other services you may use

• Tailscale, if you use it to reach your Mac away from home, carries the encrypted connection between your devices under Tailscale's own privacy policy.
• CarPlay, Siri and Push to Talk are Apple's: the app uses them to play replies and to let you talk with the phone locked.

Permissions the app asks for

• Microphone and speech recognition: to turn what you say into text, on the phone, while you hold a mic or use Talk to Claude.
• Camera: to scan the pairing QR code, and to take photos you attach.
• Local network: to find and connect to your Mac.
• Notifications: to tell you about approvals, replies, questions and Dossier items while the app isn't open.

You can change each in the iPhone's Settings.

Children

WonderWander is a tool for people who use Claude Code, and isn't directed at children.

Changes

If this policy changes, the new version is posted here with a new date.