Privacy Policy

Last updated: 8 July 2026

Baton is a self-hosted companion app for Conductor. You run the relay (a Cloudflare Worker) and the bridge on your own Mac. Your data flows only through infrastructure you own and the devices you pair. BeeCrow, the developer, operates no server that receives your content and has no access to it.

What Baton handles

Session data and chat content — read from Conductor's local database on your Mac and relayed, through your own Worker, to your paired iPhone. It is not sent to us or to any third party.
Your replies — sent from the app to your Worker and run on your Mac by your local bridge.
APNs device token — an anonymous push token issued by Apple, stored on your own relay so it can deliver notifications to your device. It is not linked to your identity and is never shared.

What Baton does not do

No analytics, telemetry, or usage tracking.
No third-party SDKs or advertising.
No account, no sign-up, no collection of personal data.
No data sold, shared, or transmitted to the developer.

Pairing and security

The app pairs with your relay using a secret only your devices hold. Treat the pairing code like a password. You can unpair at any time in the app's Settings, which clears the stored URL and secret from the device Keychain.

App Review demo backend

For Apple's review we provide a temporary demo relay seeded with synthetic sample sessions. It contains no real user data and is separate from any self-hosted deployment.

Data deletion

Because Baton stores nothing on our servers, there is nothing for us to delete. To remove your data, unpair in the app and delete the resources you deployed (your Cloudflare Worker and its database, and the bridge on your Mac).

Contact

Questions: beecrow.llc. Baton is an independent open-source project and is not affiliated with Conductor.