Scope and architecture
This policy covers the Console Bridge iPhone app and the companion software installed on a user-controlled Raspberry Pi. Daily app and browser traffic is intended to remain between the device, the Pi, and the selected console on the user’s network. Asterline Labs does not operate a Console Bridge cloud account or command relay.
Data handled on the phone and Pi
Pairing and local-network information
- Bridge name and address, console target address, certificate identity or fingerprint, pairing or login state, and connection diagnostics.
- A private setup file may contain bridge pairing details, recovery-network information, and a certificate fingerprint. It must be protected and deleted from Downloads after use.
- On-device preferences and secure connection material needed to reconnect to the selected bridge.
Information stored on the Pi
- Bridge login records, network settings, Wi-Fi profile information, console configuration, and local TLS material.
- Saved chats, requests, AI drafts, macros, Lua drafts, a local library, confirmed console memory, and bounded diagnostic or audit records.
- Optional OpenAI API configuration or a separate ChatGPT/Codex sign-in maintained by the isolated AI component on the Pi.
Bridge passwords are designed to be stored as salted hashes. Wi-Fi passwords and optional provider credentials require protected local files. Operators remain responsible for securing the Pi, storage card, network, backups, and paired devices.
Optional AI processing
AI drafting is optional. When enabled, the Pi sends the user’s request, a bounded window of recent conversation messages, confirmed console memory, product instructions, and a limited diagnostic snapshot to the selected OpenAI service. The snapshot is designed to exclude credentials, raw OSC traffic, full fixture lists, and unrelated show data, but users should still avoid placing secrets in prompts or notes.
OpenAI processes the request under the account, plan, API terms, and privacy choices used by the operator. A requested provider setting such as store:false is not a guarantee of zero provider retention. ChatGPT or API credentials are not sent to Asterline Labs.
Console and local-network data
The Pi can exchange bounded OSC, SFTP, HTTPS, discovery, or diagnostic traffic with the console and paired devices when a feature is deliberately used. Saved diagnostics can include configuration state, recent accepted feedback age, reachability results, and selected plugin error messages. Console feedback is not automatically treated as proof that an action executed successfully.
How information is used
Information is used to authenticate paired devices, maintain the requested network connection, draft and save reviewable content, perform a user-approved transfer or command workflow, diagnose connectivity, and preserve a local audit trail. Asterline Labs does not receive it for advertising, behavioral profiling, sale, or cross-app tracking.
Retention and deletion
Phone data remains in the app container or secure storage until it is removed, replaced, or the app is deleted. Pi data remains until the operator deletes chats, memory, drafts, logs, credentials, or configuration; removes the application data; or reimages the device. Sign-out from OpenAI does not automatically erase local Console Bridge chats. Deleting local chats does not necessarily delete provider-side records governed by OpenAI’s terms.
Console Bridge does not create an Asterline account, so there is no Asterline account to delete. The operator controls the Pi and is responsible for deletion from backups and additional paired devices.
Tracking and analytics
Console Bridge is not designed to include Asterline advertising, behavioral analytics, or cross-app tracking. Operating-system, Apple, OpenAI, router, console, or network logs remain subject to those systems’ practices.
Security and safety boundary
The design uses local authentication, protected credentials, device-pinned HTTPS, isolated AI processing, expiring review plans, and explicit approval gates where implemented. These measures reduce risk but do not make a network or live show fail-safe. Use a dedicated trusted network, change default credentials, protect the setup file, verify certificates, keep backups, and qualify every supported console/software version before production use.
Children
Console Bridge is a professional technical tool and is not directed to children under 13. Asterline Labs does not knowingly collect children’s personal information through a Console Bridge service.
Questions and changes
Material changes will be posted here with a revised effective date. For a privacy or security report, use the support page. Do not attach setup files, credentials, API keys, private IP plans, or show files unless a secure exchange has been arranged.