Aubade — Privacy Policy
Last updated October 4, 2026
The short version
Aubade collects nothing. There are no accounts with the developer, no analytics SDKs, no advertising and no third-party trackers. The developer receives no information about you, your drafts or your posts. The app talks only to the services you post to — X, and Bluesky or Mastodon if you connect them — with credentials that never leave your device.
What the app stores on your device
Your drafts (text, images and alt text) are plain files in the app's local storage. Your X sign-in tokens, and a Bluesky app password or Mastodon access token if you connect those, are stored in the system Keychain. Settings, such as your character limit, live in the app's local preferences. None of this is transmitted to the developer.
Optional iCloud sync
If you turn on Sync drafts with iCloud, your drafts and their images are stored in Aubade's folder in your own iCloud Drive, so they follow you between your devices signed in to the same Apple Account. That storage belongs to your iCloud account and counts against your iCloud storage; the developer cannot see it and receives nothing. Apple handles it under Apple's own privacy policy. Turning sync off keeps a copy on the device.
Connecting your X account
Aubade signs in to X with OAuth 2.0 using the Client ID of your own X developer app. The sign-in happens in a system web view directly with x.com; Aubade never sees your X password. The resulting tokens are kept in your Keychain and are sent only to api.x.com, only to publish what you wrote, upload the images you attached, and fetch your own display name and avatar for the preview.
What Aubade sends to X
Exactly what you publish: the text of your posts, the images you attach and their alt text. Aubade is write-only by construction — it has no code path that reads a timeline, your notifications, or anyone else's content.
Bluesky and Mastodon (optional)
If you connect Bluesky or Mastodon, Aubade posts there directly from your device: to Bluesky with an app password you create (never your account password), and to your Mastodon server with an access token you create there. Aubade sends exactly what you publish — text, images and alt text — and, to check the connection, reads only your own account's name and your server's character limit. Nothing passes through the developer.
Dictation
Dictation runs on-device using Apple's speech recognition, with your permission. Audio is processed locally and is not sent to the developer or to X. Apple may download a language model to your device the first time dictation is used.
Writing suggestions
On devices with Apple Intelligence, Aubade can suggest a shorter version of a post, a way to split it into a thread, or alt text for an image. These suggestions are made entirely on your device by Apple's on-device model; for alt text, the image is analyzed on-device by Apple's Vision framework. Nothing is sent to the developer, to Apple or to X, and a suggestion changes your draft only if you choose to use it.
Advanced: personal Worker mode
The optional Worker mode is for people who run their own personal backend (an open pattern published with the app). In that mode your posts travel through a server you operate and control; the developer operates no server and receives nothing.
Data we collect
None. Aubade does not collect, transmit, sell or share personal data.
Children
Aubade does not knowingly collect any data from anyone, including children.
Changes
If this policy changes, the updated version will be posted on this page with a new date.
Contact
Questions about privacy: christopher@sivori.xyz. For help using the app, see support.