Your work.
Your business.

The overview

NodeUI is a native iPhone and iPad client developed by Austin Guhl, doing business as Guhl Design Studio ("we," "us"). It connects to a ComfyUI server you choose. This policy covers the NodeUI app, this website, support correspondence, and our separate private App Review test environment.

The app has no NodeUI account, advertising, third-party analytics SDK, or cross-app tracking. During ordinary use, we do not operate a content service that receives your workflows, prompts, photos, generated media, or provider keys. Your chosen server and the external services described below can receive information as part of the actions you take.

We do not sell personal information or share it for targeted advertising. No App Tracking Transparency permission is requested because the app does not perform tracking.

Information stored on your device

NodeUI stores server profiles (names, addresses, and identifiers), app preferences, an app-generated client identifier, workflow drafts, node-definition caches, cached templates, and information used to show your workflow results. Imported or shared files may also be held temporarily while being processed.

The client identifier allows your selected ComfyUI server to associate execution events with your app connection. It is not an advertising identifier and is not sent to a Guhl Design Studio analytics service.

If you save a Hugging Face or Civitai key, it is stored in the iOS Keychain, with device-only accessibility while the device is unlocked. Keys are not stored in preferences or workflow drafts. Keychain storage does not mean a key is never transmitted: a key needed for a provider download is sent to your selected ComfyUI server as described below.

Device or operating-system backups may retain app data according to your backup settings. Files you deliberately export to Photos, Files, or another app are controlled separately from NodeUI.

Your selected server and external services

ComfyUI servers

When you connect, NodeUI sends requests directly to the server address you supply. Depending on the feature you use, this can include workflow JSON, text prompts, node settings, the client identifier, filenames, files or photos you select, provider download URLs, and provider keys. The app receives server capabilities, model and file listings, execution events, previews, generated media, and history.

Those requests may be retained in your server’s workflows, inputs, outputs, download records, history, or logs. The server operator controls its storage, security, retention, custom nodes, and any onward connections to model or API providers. If you choose a third-party server, consult its operator’s privacy practices. Only use a server you trust.

The connection uses the address you configure. HTTPS encrypts transport; a plain HTTP connection does not. Use a trusted local network, VPN, or secured HTTPS endpoint as appropriate.

Templates from GitHub

When you browse or update the ComfyUI template catalog, open a template, or load its thumbnail, NodeUI can request catalog data, workflow files, and images from GitHub-hosted services, including github.com and raw.githubusercontent.com. These services receive normal network information such as an IP address and request details. Catalog and opened-workflow data can be cached on your device. See GitHub’s privacy statement.

Hugging Face, Civitai, and other download sources

When you ask NodeUI to download a URL to a server folder, the request is handled by the companion on your selected server. That server may contact Hugging Face, Civitai, or another source you selected, resolve available files, and download the chosen file. A provider key you supply is forwarded when needed for that provider. The provider can receive the server’s IP address, requested resource, and authentication information. Its account, licensing, and privacy rules apply. See Hugging Face’s privacy policy and Civitai’s privacy policy.

Custom nodes and workflows on your server may contact additional services. NodeUI does not control the behavior of software installed on that server.

Device permissions

• Local Network: used to connect to ComfyUI computers on your network.
• Selected photos and files: system pickers let you choose content to import or upload. Choosing a photo does not give NodeUI unrestricted access to your entire library.
• Add to Photos: requested when you choose to save generated media to your library.

You can change applicable permissions in iOS Settings. Withholding a permission limits the feature that requires it. NodeUI does not request access to your contacts, precise location, microphone, or advertising identifier.

This website and support email

This website is hosted on Amazon Web Services. It does not use advertising, analytics scripts, third-party font services, or tracking cookies. Its server can process standard connection and security information, including your IP address, requested path, time, response status, and browser information. Website access and security logs are retained for up to 30 days to deliver the pages, diagnose problems, and protect the service.

If you email us, we receive your email address, message, and anything you choose to attach. We use that information to answer your request and maintain necessary support records. Support correspondence is retained for up to 12 months after a request is resolved, unless you request earlier deletion or a longer period is necessary for an ongoing issue or legal obligation. Our email and hosting providers process information to provide their services.

Please do not include passwords, full API keys, or unnecessary sensitive information in support messages.

Private Apple reviewer environment

We maintain a separate, access-controlled ComfyUI environment for Apple’s app-review testing. This environment is operated by us, rather than by an ordinary app user. Its connection details are supplied privately to Apple; it is not the default endpoint in the app and is not a public content or generation service.

Reviewers should use the supplied sample workflows and synthetic media. Information deliberately sent to that environment, including test prompts, workflow edits, uploaded test files, generated outputs, execution history, and technical connection information, may be processed there so Apple can evaluate the app. Do not send personal or sensitive material to the test environment.

Generated test data is removed after seven days, and the environment can be reset after a review session. Access secrets are excluded from access logs. Contact us to request earlier removal of test data.

Retention, deletion, and your choices

• Local drafts and caches: remain in the app’s local storage until replaced or removed with the app. Use Delete App, rather than Offload App, to remove its app-container data. Copies in device backups follow your backup settings.
• Provider keys: use Settings → Download keys → Remove for each provider. Remove keys before uninstalling; Keychain entries may survive app deletion. You can also revoke a key through the provider’s account settings.
• Server profiles: remove profiles in the app’s server settings. Removing a profile does not delete remote workflows, media, history, or all previously stored local drafts.
• Server files: manage or delete them directly on your server, or ask the third-party server operator. Deleting NodeUI does not delete those files.
• Exports: delete saved media or documents in Photos, Files, or the receiving app.
• Permissions: revoke access through iOS Settings. Stop using a provider feature or disconnect from a server to stop future requests to it.
• Information held by us: email us to request access, correction, deletion, restriction, or an explanation of our processing. We may need to verify your request. We cannot directly delete data held by a server or provider you selected.

Where applicable privacy law requires a legal basis, we process website/security information for our legitimate interests in operating and protecting the service, and correspondence to provide the support you request and meet applicable obligations. You may have additional rights under the law where you live, including the right to complain to a relevant privacy authority.

Security and international processing

We limit access to information under our control and use measures appropriate to its purpose. No storage or transmission system can be guaranteed completely secure. Your server configuration and any third-party services you choose affect the protection of your information.

Guhl Design Studio is based in the United States. Our hosting, email providers, and services you select may process information in other countries. Applicable privacy protections may differ by location.

Children and policy changes

NodeUI is a creative tool for use with separately configured ComfyUI installations and is not directed to children under 13. We do not knowingly seek personal information from children. If you believe a child has provided information directly to us, contact us so we can address it.

We will update this page if the app or our practices change and revise the effective date. Material changes will be explained here.

Contact

Austin Guhl / Guhl Design Studio
nodeui@guhlstudio.com

Use this address for support and privacy requests. Include only the information needed for us to understand your request.