Privacy & telemetry

Semantic indexing embeds workspace chunks locally and stores them under the app data directory. Provider keys, plugin secrets, and SSH credentials are encrypted with the OS keychain. Sessions persist locally as JSONL.

Model requests are routed through Openference — see the gateway privacy policy linked in the footer for upstream handling. Diagnostics uploads contain a scrubbed log tail and redacted settings only when you trigger them; secrets are stripped before upload.

Anonymous feature-usage events are off by default. When enabled they flush under a random install id; when disabled nothing leaves the device.