Security & Privacy
What you can do
Section titled “What you can do”Understand how your computer and data are protected when you use an Agent address, and how to stop everything right away if something goes wrong.
Nobody can open it by default
Section titled “Nobody can open it by default”- Newly added apps start as “Off” — nobody can open them.
- You choose “Only me”, “Me and people I invite” or “Everyone” yourself.
- Anything an Agent starts that lets more people in only takes effect after you confirm; taking access away happens immediately.
What the platform sees
Section titled “What the platform sees”| The platform records | The platform doesn’t record |
|---|---|
| Time, address, app, caller, status code, bytes | The content of requests and responses |
How long these records are kept will be added here once legal review is complete.
The two editions keep data apart
Section titled “The two editions keep data apart”Mainland and International are two independent sets of accounts and data, each stored in its own region.
The desktop app
Section titled “The desktop app”- Open source under Apache-2.0.
- Every installer is code-signed (and notarized by Apple on macOS) and ships with a SHA-256 and a software bill of materials.
- It only makes outbound connections. It never opens ports on your computer or changes your network settings.
- Its connection credentials live in the system keychain, or in a file only you can read.
Extra protection for sensitive apps
Section titled “Extra protection for sensitive apps”- Remote login (SSH) apps need “Confirm it’s you on your phone” before they open.
- Apps with no password protection can’t be set to “Everyone”.
If something goes wrong
Section titled “If something goes wrong”- Turn everything off: tap “Turn everything off” on the home page on your phone or the web — no app can be opened from that moment. On the computer you can also run
uumit-connector pause. - Remove the computer: remove it under “My computers” and its connection credentials stop working immediately.
- Report: if someone uses an Agent address to publish content that breaks the rules, report it (no sign-in needed). The platform handles reports within a set time and notifies the people involved.
Transparency report
Section titled “Transparency report”The International edition publishes a transparency report every six months on the data requests it receives and how they were handled.
What we don’t offer
Section titled “What we don’t offer”UUMit doesn’t offer anonymous accounts or ways to disguise traffic. Agent addresses are for safely using apps on your own computer, not for getting around any network rules.