Effective 24 September 2026 · applies to the Palmtop app (Android, iOS) and Palmtop Web at priorstates.com/palmtop
Palmtop lets you build small apps with an AI and share them with people you know. It is designed so that we hold as little of your information as possible.
We operate one service, the relay at priorstates.com/relay. It exists so your phone can reach your own computer, and so people can pass apps to each other. Everything sent through it is encrypted on your device with keys the relay never has. The relay stores only the encrypted bytes, their size and time, and the random identifiers needed to route them. Shared apps and circle posts are deleted after 30 and 90 days respectively; the relay keeps standard server logs (IP address, time, request path) for up to 14 days for abuse prevention.
To know how many people use Palmtop, the app sends one anonymous count to the relay at most once a day: "opened today", the kind of device (Android, iPhone, installed web app or browser), the app version, and whether this is the first count of the week, of the month, or ever. The count carries no identifier of any kind, so it cannot be linked to you, your device, or any earlier count. The relay only adds counts up per day and device kind, and does not log the address a count came from. We may publish the totals. You can turn this off in Settings → Usage counts.
The relay also counts, from what it already holds to route traffic, how many computers run a Palmtop hub and how many shared apps and circles are active. These are totals only.
When you share an app, a circle post, or a reply, the people you share with receive what you chose to send, including any data you chose to include and the name you typed for yourself. Please share only what you are comfortable with. Anyone who holds a share link or a circle invite can open it.
Palmtop is not directed at children under 13 and we do not knowingly collect information from them.
Alerts and being woken. If you let servers of your own send you alerts, the relay holds an identifier for that board and, for each machine you enrol, a hashed credential and the name that machine chose. The alerts themselves are sealed on the sending machine to a key that only your phone holds, so the relay stores bytes it cannot read. If you also turn on ringing, the relay stores the push subscription your browser issued — an opaque address at Google, Apple or Mozilla, with two keys of your device's own. That is the only thing we hold that points at a particular device, it is used for nothing but waking Palmtop, and the message we send through it carries no content at all: your phone fetches and decrypts the alert itself. Turning ringing off deletes the subscription; turning alerts off deletes the board and every enrolled machine with it.
Deleting an app, a circle or your data in Palmtop removes it from your device; clearing the app's storage or uninstalling removes everything. Anything you posted to a circle can be removed from the relay by any member of that circle, and expires on its own.
We will post changes to this page. Questions: service@priorstates.com.
Palmtop is made by PriorStates, United States.