The AIVory Code Phone App
The phone app shows your agent sessions and lets you answer them. It talks only to the AIVory Code daemon on your own computer. It has no account and no tracking.
- Pair once with a QR code from the desktop app
- At home or from anywhere: a direct link in your network, or an end-to-end encrypted link from other networks
- Face ID or fingerprint confirms risky answers
- No server of ours: your data goes only to your computer
Pair Your Phone
- Start the desktop app with
aivory. The daemon that the app starts already has the encrypted link (aivoryd serve --iroh). - Open Settings and the section Daemons and devices.
- Under Pair a phone, the app shows a QR code and a code in the form
AIV-xxxxxx. - Open the AIVory Code app on your phone and scan the QR code.
The code is valid for 10 minutes and works one time. You can also select Pair by link. After the pairing, the phone connects without a code.
To remove a phone, select Remove next to it in the same section. The phone cannot connect again until you pair it again.
What the App Shows
The phone app has seven screens: Focus, Sessions, Stream, Approval, Diff, Voice and Me.
- Focus lists the sessions that need you, with the question and the answer buttons.
- Approval shows the command and the reason of a permission request.
- Voice turns your speech into a task. The speech service of your phone does the recognition.
After you answer, a short undo window gives you 5 seconds to take the answer back.
Face ID and Fingerprint
The app asks for Face ID or your fingerprint to confirm risky answers. The check stays on your phone. The app never sees biometric data.
At Home or From Anywhere
The phone uses an end-to-end encrypted QUIC link (iroh). It works in your own network and from other networks.
- Same network: the phone finds a direct path to your computer.
- Other networks: when no direct path exists, the encrypted packets pass through a public relay server of the iroh project. The relay cannot read them. Aivory runs no server for the app.
You can choose the relay when you start the daemon yourself. --relay none allows direct paths only:
aivoryd serve --iroh --relay none
An older WebSocket link for your local network also exists (aivoryd serve --remote 0.0.0.0:7420). It has no TLS encryption, so use it only in a network that you trust.
Your Data
The pairing (computer address, access token, device key) stays in the Keychain of your iPhone or in the Android Keystore. The app sends nothing to Aivory, Inc. Read the privacy policy of the app for the permissions and the data flow.