mycel_ Get Mycel
Legal

Privacy Policy

Last updated September 27, 2026

Mycel ("the app") is published by Fossier Studio LLC ("we", "us"). Mycel is a GitHub Actions monitor for macOS, iOS, Android and Windows. This policy explains exactly what the app touches, and more to the point, what it doesn't.

The short version

  • The app talks directly to GitHub's API. Your GitHub token is stored in your device's secure credential store and is never sent anywhere except GitHub.
  • We run no analytics, no advertising, and embed no third-party tracking SDKs. We don't sell or share data.
  • To deliver alerts and Live Activities when the app is closed, we operate a small push relay. It stores your device's push token and the names of the repositories you monitor, and nothing that identifies you personally. Details below.

What the app stores

On your device

  • GitHub access token: held in the platform's secure store (the Keychain on Apple devices, the Android Keystore, Windows Credential Manager). Used solely to authenticate requests to GitHub. Moving it from your Mac to your phone happens directly between your devices, by QR code or over your local network.
  • Your repository list and cached run data: stored locally so the app can show recent status and notice changes.
  • AI failure summaries: generated on-device (Apple Intelligence) or by an Ollama server you run yourself, and cached on your device. Job logs are never sent to us.
  • App settings: preferences such as colours and which repos may notify you.

On our push relay

Push notifications and Live Activities are delivered by a relay we run on Cloudflare Workers (push.mycel.live). When the app is signed in with repositories to watch, it registers with the relay. The relay stores:

  • your device's push tokens (issued by Apple or Google, used only to address notifications to your device), which platform they belong to, and whether it's a development or production build;
  • the names of the repositories you monitor (owner/repo, including private repositories), your chosen colour for each, and typical run durations per workflow name, so a Live Activity can show progress;
  • short-lived records (kept up to 24 hours) that tie a running workflow to its Live Activity and stop duplicate alerts.

Device records expire automatically 60 days after your device last checked in (the repository index that points at them is cleaned up the next time that repository runs a workflow). Removing a repository unsubscribes your device from it right away, and signing out on iPhone unsubscribes it from all of them. The relay stores no GitHub credentials, email addresses or names, and no workflow logs.

To know when a run starts or finishes, the relay receives workflow_run events from the Mycel GitHub App for repositories where the app is installed. These include the repository, workflow and branch names, the run's status, and the first line of the commit message or the name of the person who triggered it. That data is used only to build the notification and is not stored.

To deliver a notification, the relay sends that content (repository, workflow, branch, status, and for failures the commit subject or actor) to Apple Push Notification service or Google Firebase Cloud Messaging. For abuse prevention the relay briefly (about two minutes) counts requests per IP address. Operational logs may contain repository names, truncated push tokens, and the IP address of a request that was rate-limited, and are not kept beyond Cloudflare's standard log retention.

We don't run an account system, analytics, or a telemetry endpoint.

Network activity

The app makes outbound HTTPS requests to api.github.com (and GitHub's authentication endpoints) using your token. Those requests are governed by GitHub's own privacy statement. The only other destinations are our push relay (described above), githubstatus.com (to show whether GitHub itself is having an incident), your platform's app store for purchases, and, if you enable it, an Ollama server on your own machine.

Purchases

Paid plans are currently sold only on Apple platforms. Subscriptions and the lifetime purchase are processed by Apple through the App Store using StoreKit. We receive the entitlement status needed to unlock Pro features; we do not receive your payment details. Apple's handling of purchases is governed by Apple's privacy policy.

Notifications

On the Mac and Windows, status-change notifications are generated on your device by comparing successive snapshots of your workflow runs. On iPhone and Android, alerts and Live Activities for runs that start or fail while the app is closed come through the push relay described above.

Permissions the app requests

  • Notifications: to alert you when a run changes state.
  • Background refresh: to check GitHub periodically while the app is closed.
  • Live Activities (iPhone): to show a run in progress on the Lock Screen and Dynamic Island.
  • Camera (iPhone, optional): only to scan the QR code that moves your token from your Mac. On Android, Google's code scanner handles this without camera access.
  • Local network (optional): only to move your token between your own devices.

Deleting your data

Signing out removes your token, repositories, cached runs and AI summaries from that device; deleting the app removes everything else. Relay records are removed when you remove repositories or sign out on iPhone, and otherwise expire after 60 days. To have them removed sooner, or for any other request about your data, email us at the address below.

Children

Mycel is a developer tool and is not directed at children under 13.

Changes to this policy

If this policy changes, we'll update the date above and post the revised version at this URL.

Contact

Questions about privacy? Email [email protected].

Entity

Mycel is published by Fossier Studio LLC, a limited liability company registered in the State of Louisiana, United States. Website: fossier.studio.