Privacy

Stored with your account#

The Privacy Policy is the full notice. In summary, Chat messages, projects, memory, files you upload, and preferences are stored with your account. Each message is also sent to the model provider you chose. Deleting a chat removes it from your account. Privacy filters limit which providers you can use. They don’t delete history you’ve already saved.

Privacy filters#

Settings → Advanced can require zero data retention, no training, or both. The model picker then locks any route that doesn’t offer that policy. Zero data retention controls whether the provider keeps your prompt. Your saved chats stay in the sidebar until you delete them.

Speech is a separate service and doesn’t offer zero data retention. The picker still shows whether a speech route is eligible for no training.

Stored on your computer#

Code keeps your repository, branches, worktrees, terminal history, task history, and vendor logins on your computer. Signing in to Chat doesn’t upload them. The runtime you choose may still send the task to its own model provider, under that provider’s terms. Code keeps your project on your computer, but that doesn’t mean the model runs on your computer.

Settings → Personalization can store a short local profile and a small local memory list. Both stay on that computer and are separate from Chat memory. See Memory in Code.

What a paired iPhone can access#

Mobile Gateway is off until you turn it on and confirm a device. Your computer sets the permissions. Your iPhone receives views that match those permissions, not a copy of the repository or a shell. You can turn off the gateway, revoke one device, or revoke all devices.

View app windows and Control app windows let your iPhone see or use an app that’s already open. Control screens is a separate permission for the whole display. Browser access doesn’t include any of these. While your iPhone controls a screen, your computer shows Your phone is controlling this screen with Stop. For limits, including the sign-in screen, see Remote access.

Bug reports#

Include diagnostics is on when you file a bug. Diagnostics include app and device details and recent errors, with private data removed. They don’t include your chats, your files, or secrets. The automated reviewer doesn’t see diagnostics. To send only your written report, turn off the switch. See Bug reports.