Privacy

Last updated September 30, 2026

This page explains in plain language how Pony works with your phone.

What Pony is

Pony is a template for Grok Bot. When you use it, Pony runs as your own Grok Bot, on your bot's computer, under your account. There is no separate Pony app on your phone and no Pony server in between.

How it connects to your phone

Pony connects to your Android phone using Android's built-in Wireless debugging feature, over your own private Tailscale network (tailnet). You install Tailscale on your phone, sign in to your tailnet, turn on Wireless debugging, and give your bot a one-time pairing code. The connection goes between your phone and your bot's computer inside your tailnet.

What Pony can see and do while connected

• Your phone's screen, live, including whatever app is open.
• Your installed apps, where they were installed from, their permissions, and basic usage, storage, and battery information.
• Your phone's settings and security details, such as security patch level, lock-screen settings, device admin and accessibility apps, default SMS and assistant apps, VPN, proxy and private DNS settings, saved Wi-Fi networks, paired Bluetooth devices, and which computers are allowed to debug the phone.
• The types of accounts on the phone (for example "Google"), never their passwords or sign-in tokens.
• Your phone's last known location, only when you ask Pony to help find it.
• It can tap, swipe, and type on the phone, the same way you would.

Pony only opens what a task needs. It won't open private apps like messages, photos, or banking unless the task requires it, and it doesn't read out or store passwords, one-time codes, or full message contents beyond what the task needs. It never asks for or types your PIN; if the phone is locked, it asks you to unlock it. Some apps, such as many banking apps, block screen capture and show up black. Pony won't try to get around that.

Nothing is sent, paid, or deleted without your approval

Pony will not send a message, make a payment or purchase, post anything, delete anything, install or uninstall an app, or change an account setting unless you approve that exact action in your chat with your bot. It stops at the confirm screen and shows you a screenshot first. The security audit and weekly checkup are read-only; Pony changes security settings only when you ask it to, records each change with a way to undo it, and never deletes your photos or videos during a cleanup.

Family help: if Pony is set up on a family member's phone, that person does the setup themselves and agrees to it, is told what the bot can see and how to cut it off, and must approve anything that is sent, paid, or deleted.

How access ends

• Turn off Wireless debugging (Settings → Developer options) and access ends immediately.
• Restarting your phone ends the connection too.
• For a full reset, tap "Revoke USB debugging authorizations" or turn Developer options off. After that your bot has to be paired again with a new code from you.
• Access is time-limited by default: Pony disconnects itself when a task is done, unless you ask it to stay connected for a set time.

Optional away-from-Wi-Fi mode: only if you ask, Pony can switch your phone to a fixed debugging port so it keeps working over mobile data through Tailscale. That port stays open on every network until your phone restarts, so never tap Allow on a debugging popup you didn't expect. Pony turns it off when you're done.

Your data

Screenshots, audit and checkup reports (Pony keeps your baseline and the last 8 weekly snapshots), and notes such as your name, phone model, and your phone's Tailscale address stay with your own Grok Bot, and you can ask it to delete them. Pony does not sell your data, and there are no Pony ads or trackers on your phone. Your use of Grok Bot and Tailscale is also covered by those services' own privacy policies.

Questions

Ask your Pony bot "what can you see on my phone?" at any time, or look at the template page: https://x.ai/bot/bXzwwN7Zgirrt742rX-vU.