codepilotios · Jul 4, 2026 · Jul 3, 2026
diff --git a/README.md b/README.md
@@ -62,6 +62,7 @@ See:
 - [Privacy](docs/PRIVACY.md)
 - [Support](docs/SUPPORT.md)
 - [Changelog](docs/CHANGELOG.md)
+- [App Store Metadata Draft](docs/APP_STORE_METADATA_DRAFT.md)
 - [Screenshot Plan](docs/SCREENSHOTS.md)
 - [Security](docs/SECURITY.md)
 - [Architecture](docs/ARCHITECTURE.md)

diff --git a/docs/APP_STORE_METADATA_DRAFT.md b/docs/APP_STORE_METADATA_DRAFT.md
@@ -0,0 +1,63 @@
+# App Store Metadata Draft
+
+This draft is for TestFlight and App Store Connect preparation only. Do not submit it for review without maintainer approval for privacy, legal, pricing, age rating, export compliance, and final public positioning.
+
+## App Name
+
+CodePilot
+
+## Subtitle
+
+Codex companion for your Mac
+
+## Promotional Text
+
+Public beta for Codex CLI users who want iPhone visibility, file uploads, turn control, notifications, and safe gateway-backed access to coding-agent sessions running on their own Mac.
+
+## Description
+
+CodePilot is a Mac menu bar app, local gateway, and iPhone companion for AI coding users who already run Codex CLI on a Mac.
+
+Use the iPhone app to check active account status, follow threads, upload files, steer or stop supported turns, receive turn-finished notifications, and connect through your own same-network or Cloudflare Tunnel setup. The Mac stays in your control, and the current beta does not require a hosted CodePilot account service.
+
+The beta is focused on setup clarity, connection reliability, privacy-safe diagnostics, and practical remote workflows for existing Codex CLI users. Some internals still use Codex-specific names while the public CodePilot product surface is prepared for broader provider support later.
+
+CodePilot handles local coding-agent credentials and gateway access. Review the privacy, security, install, and support docs before exposing the gateway outside your local network.
+
+## Keywords
+
+Codex, coding agent, developer tools, Mac, iPhone, remote coding, AI coding, TestFlight, gateway, Cloudflare
+
+## What To Test
+
+Install CodePilot on a Mac that already runs Codex CLI, create a saved account profile, start the gateway, connect the iPhone app with the gateway URL and token, and verify thread visibility, file upload, turn control, notifications, and setup recovery messages.
+
+Please report whether you used same-network access or Cloudflare Tunnel. Remove account names, gateway URLs, tokens, hostnames, local paths, private prompts, screenshots, and logs containing private data before sharing feedback.
+
+## Support URL
+
+Use the public repository support documentation and issue tracker once the repository is public.
+
+## Privacy URL
+
+Use `docs/PRIVACY.md` until a public website URL is approved.
+
+## Screenshot Requirements
+
+Use only sanitized demo data:
+
+- Demo account names such as `Work`, `Personal`, or `Demo`.
+- Example hostnames such as `codepilot.example.com`.
+- No tokens, auth details, private prompts, local paths, Apple identifiers, personal account names, private screenshots, or live desktop contents.
+
+See [Screenshot Plan](SCREENSHOTS.md).
+
+## Approval Gates
+
+- Final public positioning.
+- Privacy policy and support URL.
+- App Store privacy labels.
+- Age rating.
+- Export compliance.
+- TestFlight external testing and App Store review submission.
+- Pricing, subscription, or commercial-use claims.
diff --git a/docs/CHANGELOG.md b/docs/CHANGELOG.md
@@ -7,6 +7,7 @@
 - Added public beta docs for GitHub Pages, FAQ, privacy, support, screenshots, and changelog.
 - Clarified that CodePilot currently targets Codex CLI users and remains beta-focused.
 - Documented the Mac, gateway, iPhone, Cloudflare, and troubleshooting paths from a public user perspective.
+- Added a local TestFlight/App Store metadata draft for maintainer review before any App Store submission.
 - Added guidance for keeping screenshots, logs, support requests, and public issues free of private names, hosts, tokens, and local paths.
 
 ### Recent Product Work

diff --git a/docs/RELEASE_CHECKLIST.md b/docs/RELEASE_CHECKLIST.md
@@ -8,6 +8,7 @@
 - [ ] OTA build if iOS app files changed
 - [ ] Public manifest and IPA return HTTP 200 from the OTA domain
 - [ ] TestFlight upload if shipping a beta build
+- [ ] `docs/APP_STORE_METADATA_DRAFT.md` reviewed before App Store Connect changes
 - [ ] Public docs checked for personal names, private email addresses, tokens, hostnames, Apple team IDs, and machine-specific paths
 - [ ] Public screenshots use sanitized demo data only
 - [ ] Privacy, support, FAQ, and README copy reviewed for beta positioning

diff --git a/docs/index.md b/docs/index.md
@@ -22,6 +22,7 @@ CodePilot is source-available for noncommercial use. It is not OSI open source.
 - [Privacy](PRIVACY.md)
 - [Support](SUPPORT.md)
 - [Changelog](CHANGELOG.md)
+- [App Store metadata draft](APP_STORE_METADATA_DRAFT.md)
 - [Screenshot plan](SCREENSHOTS.md)
 
 ## Beta Limits

diff --git a/ops/agents/escalations/presence-maintenance.md b/ops/agents/escalations/presence-maintenance.md
@@ -4,5 +4,6 @@ Approval needed before public publishing:
 
 - Confirm beta privacy copy in `docs/PRIVACY.md`.
 - Confirm public positioning in `README.md`, `docs/index.md`, and `docs/FAQ.md`.
+- Review `docs/APP_STORE_METADATA_DRAFT.md` before any TestFlight/App Store metadata is entered publicly.
 - Enable or confirm GitHub Pages source for the repository, preferably the `docs/` folder.
 - Approve sanitized screenshot capture before screenshots are committed or used in App Store/TestFlight metadata.