kellerai companion

Privacy Policy

Last updated: April 2026

Overview

kellerai companion is a local-first, privacy-by-default coding companion. Your data belongs to you. We believe developer tools should earn trust through transparency, not terms of service.

What Data Is Collected

Data collection is organized into four tiers. You control which tiers are active.

Tier 1 — Hook Signals (Always On)

Basic signals from Claude Code hooks: tool call names and duration, test pass/fail counts, commit frequency, lint results, file paths edited, session start/end times. Collected by virtue of installing the companion plugin.

Tier 2 — Git History (Opt-In)

Analysis of your local git commit history for deeper personality insights: commit patterns, branch behavior, merge frequency. No file content is read. Requires explicit opt-in.

Tier 3 — Extended Signals (Per-Signal Opt-In)

Optional detailed signals: time-of-day patterns, tool preference rankings, error recovery patterns. Each signal can be individually enabled or disabled.

Tier NEVER — Prohibited Signals

The following are NEVER collected, not configurable, and architecturally impossible to capture: keystroke timing, raw file content, clipboard contents, idle/away detection, window focus tracking. No code path exists for these signals.

Where Data Is Stored

  • Raw events: Local only, in ~/.kellerai-companion/events/. Never uploaded, never synced.
  • Personality state: Local SQLite database at ~/.kellerai-companion/state.db. Derived from events, deterministic.
  • Shared snapshots: If you choose to share via companion share, a curated personality snapshot is uploaded to kellerai.fun (Vercel KV). Contains ONLY: companion identity, five personality axis values, session count, and starred observations.

Data Retention

  • Local data: Retained indefinitely until you delete it via companion purge.
  • Shared data: Retained until you revoke sharing. Deletion is immediate and complete.
  • Aggregate data: Anonymized contributions are removed when you opt out or delete your account.

Third-Party Sharing

None. Ever. Your data is never shared with third parties, never sold, never used for advertising, and never used for model training. The only data that leaves your machine is what you explicitly choose to share via companion share.

Your Rights

  • Access: All your data is on your machine. You can inspect it directly.
  • Portability: Your data is stored in standard formats (JSON, SQLite). Export at any time.
  • Deletion: Delete local data with companion purge. Delete shared data from Settings.
  • Consent withdrawal: Change consent tiers at any time from Settings. Changes take effect immediately.

Contact

Questions about privacy? Contact privacy@kellerai.io.