localctx

Legal · Version 2026-11

Privacy Policy

Effective date: November 2026 · Controller: ApollosWave LLC · Contact: localctx@apolloswave.com

localctx is engineered around a strict architectural boundary: your codebase, questions, and answers stay on your Mac. This policy lists every piece of data localctx and localctx.apolloswave.com never collect, the exact records we do collect to run licensing and support, and your privacy rights.

1. What We Never Collect

Neither the localctx CLI/daemon nor localctx.apolloswave.com ever uploads, logs, or stores:

  • Your source code, syntax graphs, local NVMe cache files, or repository files;
  • Your file names, directory paths, symbol names, or git commit history;
  • The questions or prompts you or your coding agent pass to localctx; or
  • The answers or citations generated on your Mac.

2. Exact Data We Collect

  • Account, Waitlist & Billing Records: Your email address, optional name, waitlist hardware/agent preferences (if submitted on /beta), Stripe customer ID, subscription/payment intent IDs, and license status. Card numbers and tax details are collected directly by Stripe Checkout and never touch our servers.
  • Seat Activation & Lease Refresh: When you run localctx activate or localctx login, the CLI sends a one-way, domain-separated salted SHA-256 hash of your Mac hardware UUID (the raw hardware UUID never leaves your device), your Mac model/chip string (e.g. Apple M2 Max), RAM in GB, macOS version, localctx version, accepted terms version, and client IP address (used for abuse rate-limiting and lease audit logs).
  • Opt-In Daily Usage Counts (Disabled by Default): Telemetry is off by default. Only if you explicitly answer y during activation (telemetry_opt_in = true), the daemon sends one daily summary per seat containing aggregate integers only: daily ask count, search count, error count, answer latency p50/p95 in milliseconds, estimated cloud tokens avoided, model name (e4b or 26b), and CLI version.
  • Opt-In Public Benchmarks & Share Cards: Only when you explicitly run localctx bench --share or localctx stats --share, the CLI posts an anonymous machine_id hash, chip, core counts, RAM, and throughput timings to render the public leaderboard or share card.
  • User-Initiated Feedback: When you run localctx feedback, we receive the message you typed. If you pass --attach-diagnostics, the CLI prints the redacted doctor --json payload (with your home directory replaced by ~ and repository paths replaced by 8-character hashes) and asks for your confirmation before sending.

3. Infrastructure and Sub-Processors

We do not sell personal data, run advertising pixels, or load third-party analytics scripts on localctx.apolloswave.com. We rely only on the following infrastructure processors:

  • Stripe, Inc. (USA/Global) — Payment processing, VAT/sales tax calculation (Stripe Tax), and Customer Billing Portal.
  • Cloudflare, Inc. (Global Edge) — DNS, Full-Strict TLS termination, and HTTP rate-limiting against brute-force key attacks.
  • Wasabi Technologies, Inc. — Object storage for AES-256 encrypted PostgreSQL backups and signed macOS release tarballs.
  • Self-Hosted Postal (ApollosWave LLC) — Outbound transactional email (magic sign-in links, waitlist confirmation, beta invites, and license receipts) sent directly from our own infrastructure without third-party marketing trackers.
  • Hugging Face, Inc. — Direct client-to-Hugging-Face HTTPS download of Gemma 4 model weights during localctx init (subject to Hugging Face's privacy policy).

4. Data Retention and Security

  • Session cookies use HttpOnly, Secure, and SameSite=Lax flags; activation keys are stored only as one-way cryptographic digests at rest (plaintext keys are never stored; temporary encrypted invite tokens are wiped upon email dispatch).
  • IP rate-limit counters expire automatically within 24 hours; encrypted database backups in Wasabi rotate out after 30 days.
  • Account and license records are kept while your license is active; billing ledger entries are retained for 7 years where required by tax and accounting law.

5. Deletion Requests and EU / EEA / UK Rights

Regardless of where you live, you may request a copy of your account/seat records, revoke telemetry opt-in, remove public share cards, or request account deletion at any time by emailing localctx@apolloswave.com from your registered email address. We respond within 30 days.

If you are located in the European Economic Area, Switzerland, or the United Kingdom, our legal bases under GDPR / UK GDPR are contract performance (Article 6(1)(b) for licensing, billing, and transactional support), consent (Article 6(1)(a) for opt-in daily telemetry and waitlist double opt-in), and legitimate interests (Article 6(1)(f) for rate-limiting and fraud prevention). You have the right to access, rectify, erase, restrict, port, or object to processing of your personal data, withdraw consent at any time, and lodge a complaint with your local data protection authority.