Privacy Policy

Our Privacy Commitment

1. What Data We Collect

1.1 Local Data (Never Leaves Your Machine)

Whichi stores the following data locally on your computer:

• Projects & Code: All your apps, files, and version history
• Settings: App preferences, AI provider configurations, UI state
• API Keys: Your BYOK credentials (encrypted, stored locally only)
• Chat History: Conversations with AI within each project

This data never leaves your computer unless you explicitly sync it to third-party services (GitHub, etc.).

1.2 Optional Telemetry (Opt-In Only)

If you choose to enable telemetry (disabled by default), we collect anonymous usage statistics:

• Feature usage (e.g., "User clicked Deploy button")
• Error logs (crash reports, technical errors)
• Performance metrics (app load times, build durations)
• Operating system & app version

We do NOT collect: Your code, project names, prompts, or personally identifiable information.

1.3 License & Account Data

If you purchase a Whichi license (LTD) or request a trial, we may collect:

• Email address (for license delivery and support)
• Payment information (processed securely by the payment provider, never stored by us)
• License details (plan tier, seats) & activation status

2. How We Use Your Data

We use collected data (if any) to:

• Provide and improve the Software
• Fix bugs and optimize performance
• Manage licenses and support
• Send important updates (security patches, major releases) — email only if subscribed
• Understand feature usage to prioritize development

We never sell your data to third parties.

3. Third-Party AI Providers (BYOK)

When you use AI features with BYOK (Bring Your Own Key), your prompts and code are sent directly to the AI provider you configure:

• OpenAI: OpenAI Privacy Policy applies
• Anthropic (Claude): Anthropic Privacy Policy applies
• Google (Gemini): Google AI Privacy Policy applies
• OpenRouter: OpenRouter Privacy Policy applies
• Ollama (Local): No external data transmission

We do not see or store these interactions. Your data flows directly between Whichi (on your machine) and the AI provider.

4. Data Retention

Local data: Stored indefinitely on your machine until you manually delete it.

Telemetry: Anonymous logs retained for 12 months, then deleted.

Account data (Pro/Max): Retained while your subscription is active. Deleted 30 days after account closure, except where required by law (e.g., tax records).

5. Your Rights (GDPR/CCPA)

You have the right to:

• Access: Request a copy of data we hold about you
• Rectification: Correct inaccurate data
• Erasure: Delete your account and associated data
• Portability: Export your data in a machine-readable format
• Opt-Out: Disable telemetry anytime in Settings

To exercise these rights, contact: privacy@whichi.app

6. Security

We implement industry-standard security measures:

• API keys encrypted at rest (AES-256)
• HTTPS for all web communications
• Regular security audits (open-source, community-reviewed)
• No unnecessary data collection or transmission

However, no system is 100% secure. You are responsible for securing your local machine and API keys.

7. Children's Privacy

Whichi is not intended for users under 13. We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us immediately.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We'll notify impacted license holders via email for significant changes. Continued use of Whichi after updates constitutes acceptance.

9. Contact Us

Questions about this Privacy Policy?
Email: privacy@whichi.app