Privacy policy for TalkToAi Code

Effective 30 September 2026. TalkToAi Code is a desktop coding assistant from TalkToAI. This policy describes the app, not every other TalkToAI service. For the broader site, see the TalkToAI privacy policy.

What stays on your computer

The app saves conversations, settings, drafts, connection aliases and selected-provider preferences under your operating-system user profile. Text extracted from a file you attach becomes part of the task message and remains in local conversation history. Editable project memory and screenshots or other evidence may be saved inside the project you choose. When you export a conversation as Markdown, the visible transcript is saved to the location you select; copying a conversation places it on your operating-system clipboard. The transcript shows attachment names rather than extracted file text, but the extracted text remains in local task history. The app may read or change project files and operate tools on your computer when you request it in Act mode. Uninstalling the app may leave user data and projects in place so you do not lose them; you can remove those separately.

What can leave your computer

Your chosen model destination matters. Local models process requests on your computer. A self-hosted server or third-party API receives the prompts, project context, selected file contents and tool results sent to that route. If you attach a supported local text or PDF file to a message, an extracted, bounded text excerpt can be included in the request to your chosen model route. The file is not uploaded as a separate artifact by this feature. If you connect Gmail and ask a mail question, selected message content can be included in context sent to your chosen model. An API provider may process and retain data under its own terms. In API mode, automatic fallback sends this same task context only to alternative profiles you enabled and marked free or self-hosted. Switching is shown in the app. Provider free eligibility and billing are governed by your account. The local Auto route does not switch to a cloud API. Vision-enabled API routes can receive a compressed screenshot from a requested computer/browser tool; text-only routes use accessibility and page text. Optional GitHub update checks contact GitHub. Browser tools open sites and search engines you request, which receive search queries and ordinary web traffic. If you select Serper search, your query and API key are sent to Serper; its account limits and policies apply. SSH tools connect to hosts you select.

Version and legacy integrations

The upcoming desktop update removes the legacy ZeroThink and Zmail integrations. Earlier Microsoft Store or separately installed versions may still display those connectors until you update. Removing these integrations does not delete credentials already held in your operating system credential store; you can remove those yourself using your system credential settings.

Keys and connected accounts

API keys may be kept only for the session, read from an environment variable, or—if you opt in—stored using Windows user encryption, macOS Keychain or a Linux desktop keyring. They are used to authenticate to the provider you select. Optional Gmail connections use browser-based OAuth sign-in with your own configured client; their tokens are saved in Windows Credential Manager, macOS Keychain or a Linux desktop keyring. The app's mail tools provide search and selected message reading, not sending. Google handles its sign-in and mail services under their own policies. Do not put passwords, secrets or sensitive personal information in chats or project memory, as those contents may be sent to a selected remote model.

Your choices and retention

You choose the project, model route, whether to link external accounts, and whether to enable desktop or SSH tools. Local history and project files remain until you remove them. Remote providers and websites apply their own retention policies; TalkToAI cannot delete copies held by a provider you chose. Review the provider's policy before sending sensitive work. You can request help with data or privacy questions using the contact below.

Security and limits

The app runs tools with your signed-in user's permissions; it is not an operating-system sandbox. Screenshots can capture visible private material. Close unrelated sensitive windows before using computer or screenshot tools, review changes before publishing, and maintain normal backups.

Contact

TalkToAI privacy contact: shaf@talktoai.org. For app support and security reports, see TalkToAi Code support.