lodestar Privacy Policy

Part of one policy

This page is the lodestar schedule to the Innov8iveLabs Privacy Policy, which covers every product and sets out your rights and how to exercise them. This page adds what is specific to lodestar.

lodestar and ClickPad are published by Innov8ive Labs, LLC, an Ohio limited liability company trading as Innov8iveLabs, registered agent United States Corporation Agents, Inc., 1991 Crocker Road #600-755, Westlake, OH 44145, USA.

The short version

lodestar has two ways of reaching your servers, and they differ in what we can see.

• Directly. The default. The app connects from your iPhone to the addresses you enter. No account, no server of ours in the path, and nothing about you reaches us.
• Through our relay. Optional. If you sign up under Settings, Remote access, you create a lodestar account with an email address and a password, and the app can reach your servers through a relay we run at relay.i8l.tech and an agent you install on your own machine. The relay forwards traffic between the app and the agent that it cannot read. It does see that your account is in use, when, roughly where from, and how much passed through.

There is no analytics, no advertising, no tracking, and no crash reporting in either case.

What stays on your device

To control your servers, lodestar stores your configuration on your iPhone:

• The names and addresses of the services you add (Radarr, Sonarr, Prowlarr, Bazarr, Overseerr, Jellyseerr, Plex, Jellyfin, Emby, Tautulli, NZBGet, SABnzbd, qBittorrent, Transmission, Deluge, LazyLibrarian and Audiobookshelf) and the profiles that group them.
• API keys and passwords for those services, and the relay token if you have signed in, stored in the iOS Keychain, the encrypted credential store built into the operating system.
• Your preferences, such as theme and which screen the app opens to.

Service addresses and API keys go to the servers they belong to. With remote access on, the app also sends your service configuration, sealed, to the agent on your own machine so the agent can reach those servers; the relay carries it and cannot open it. Beyond that and the network activity described on this page, no configuration is sent anywhere unless you export a backup yourself, and that backup is encrypted and goes only where you put it. Deleting the app removes its local data; sign out under Remote access first if you want the relay token and your service credentials cleared from the iOS Keychain, which can outlive an uninstall.

If you create an account

The account exists only for remote access and household sharing. The app does not contact the relay until you begin signing up or signing in.

What we hold

• Your email address and a hash of your password. The password itself is sent to the relay when you sign in, including when a sign-in fails, and is not stored.
• An account identifier, a token for each signed-in device, an identifier for each agent you connect, your subscription state, and your retention choice.
• If you open the companion web app at lodestar.i8l.tech/app, a token for that browser, and, if you turn on browser notifications there, the web push subscription needed to deliver them.
• Operational metadata: which agent a request routes to, when a device or agent connected, the IP address it connected from, for how long, how many bytes moved, and how many sealed records exist. The IP address is what the app's privacy label calls coarse location; the app requests no location permission and reads no location API.

What we cannot read

Traffic between the app and your agent is sealed on the phone and opened on your machine. The relay forwards it and holds no key. That covers your media libraries, queues, searches, and the service configuration the agent receives.

Retention, and the switch that controls it

By default the relay keeps a sealed copy of records your agent has synchronised, so the app can show them while your agent is offline. It is ciphertext to us. Settings, Remote access has a retention switch: turning it to live only makes the relay refuse to store records at all and deletes the sealed copy in the same step. The switch is enforced by the relay, not merely by the app.

Households

You can let up to five other lodestar accounts reach your servers through your agent. They sign in with their own accounts and accept your invitation; the relay then lets their account reach your agent. If you turn on credential sharing, your service credentials are sent sealed to their devices; with it off, they reach your servers without holding the keys.

Deleting

Settings, Remote access has a control, Delete everything now, that deletes the stored library records, connection history, agents and registered devices for your account, and shows a receipt with the record and session counts. It takes effect on live systems immediately, and encrypted backups roll off within 14 days. The account itself, its email and password hash stay until you close it: Settings, Remote access, Delete account, confirmed with your password, or write to us and we will delete it.

Other network activity

• Artwork. A poster for something not yet in your library comes from wherever your server points, usually TheTVDB, TMDB, OpenLibrary or Google Books. Settings, Artwork turns this off. A cover you chose by hand is fetched from the address you gave, whatever that switch says.
• Apple. StoreKit for purchases. Notifications are posted on the phone from the app's own background checks, not through a push service; with remote access on, a check may reach your agent through our relay like any other request.
• Links. Tapping a link to IMDb, TMDB, TVDB, Trakt, our own pages or your server's help pages opens it in the browser.

If your servers are on your local network, iOS asks your permission before the app can reach them. That permission is used only to connect to the servers you configured.

Purchases

lodestar lifetime, a one-time purchase that unlocks the app and includes thirty days of remote access, and lodestar monthly, an auto-renewing subscription for remote access that may include a free first week for eligible subscribers, are processed by Apple. We never see your payment details, and Apple provides us only anonymous, aggregated sales reporting. To decide whether your account may use the relay, the app sends the relay the purchase records Apple signed, and Apple sends the relay server notifications about renewals, refunds and expiries; the relay verifies both against Apple's certificate and keeps the purchase facts (product, transaction identifiers, dates, revocation). It consults nothing else, and no account is treated differently from another. We can extend remote access for an existing purchaser for support reasons, and every such action is logged with a reason. Apple's handling of the transaction is governed by Apple's Privacy Policy.

If you contact us

Support runs at support.i8l.tech, which we operate. When you send a report or a suggestion there, from the app, from this site or by email, we keep what you wrote, the app version if you gave it, and your email address if you gave one. Each report gets a reference number and a private page that anyone holding its link can open, so keep that link to yourself. We use a report only to answer it and to fix the problem, and we keep it only as long as needed for that. Nothing is sent unless you choose to send it, and the app adds only its version number to the form.

Children

lodestar is not directed at children and we do not knowingly collect data from anyone under 13.

Your rights

If you never created an account, we hold nothing about you; what is on your device is under your control and is removed when you delete the app. If you did, the in-app controls above delete what we hold, and the Innov8iveLabs Privacy Policy sets out how to ask for a copy, a correction, or a deletion, and your rights under laws such as the GDPR and the CCPA.

Changes

If this policy changes, the effective date above changes with it, and the current version always lives at this address. This version replaces one dated 2026-08-17 that described the app before it had an account or a relay.

Contact