Privacy Policy

KernelHub v1.0.0 · Last updated 21 August 2026

This policy describes what KernelHub v1.0.0 handles. It is written against the shipping product, not against an intention.

1. The short version

Your source code stays on your machine. KernelHub executes the coding agent locally; what crosses the network is the task you typed, its progress, the diffs you asked to see, and your approvals.

2. What we never upload

• Your repository. There is no source mirror, no cloud sandbox, no background indexing of your files.
• Credentials. SSH keys, cloud configuration, .env files and keychains sit behind a deny list that no permission grant can lift.
• Anything from a workspace you did not pair.

3. What is processed, and why

• Task text. What you typed. It has to reach the machine that will do the work.
• Execution progress and results. Which phase it is in, which commands ran, whether it succeeded — so the screen in your hand can show it.
• Diffs you asked to see. Excerpts of files the task changed, so you can review before approving. These are fragments of changed files, not the repository.
• Device and workspace identifiers. A device id and a workspace UUID, so permissions can be recorded per device and per workspace.
• Pairing tokens. Held so a paired client stays paired. Tokens are credentials and are kept out of URL query strings so they do not end up in server logs or referrer headers.

4. What we do not do

• No advertising, and no sale or sharing of personal information for advertising.
• No third-party analytics, attribution or tracking SDKs in the apps or on this website.
• No use of your task text or code to train models.

This site loads web fonts from Google Fonts, which means your browser contacts fonts.googleapis.com and fonts.gstatic.com. That is the only third-party request the website makes.

5. The coding agent is a separate product

KernelHub does not bundle a model and never calls one itself. It drives a CLI agent you installed — Claude Code, Codex, Antigravity (agy) or another. When that agent contacts its own provider, that exchange is governed by that provider's terms and privacy policy, not by this one.

6. Retention and deletion

Task history, progress and diffs live in the workspace they belong to and are deleted when you delete the task or the workspace. A task-scoped permission expires the moment the task reaches a terminal state — evaluated at read time, so there is no window in which an expired grant is still honoured.

Local state on your own machine lives in ~/.kernelhub, ~/.kernelhub-gate (identity credentials) and ~/.kernelhub-protected (if present). Deleting those three directories removes it.

7. Children

KernelHub is a developer tool and is not directed to children under 13.

8. Contact

Questions about this policy, or a request to access or delete data: privacy@icloser.xyz.

iCloser Ltd., 1580 N Logan St, Suite 660 #30327, Denver, CO 80203, USA.