Privacy Policy

1. Who We Are

Padu is an open-source software project licensed under the GNU General Public License v3.0 (GPL-3.0). This privacy policy describes how data is handled across the Padu native software, the marketing website (padu.dev), and self-hosted instances.

2. Local Application and Daemon Architecture

Padu runs directly on your computer hardware. All session management, Git worktree isolation, checkpoint tracking, and process supervision are handled locally by the background daemon (padu daemon) communicating over loopback sockets (127.0.0.1:4789).

• Zero Telemetry: Padu contains no analytics SDKs, telemetry beacons, user tracking, or advertising identifiers.
• Zero Remote File Storage: Your projects, files, and Git branches reside exclusively on your local filesystem.
• Zero Conversation Logging: Transcripts and checkpoints are saved in your local workspace directory (.padu/) and local application data folders.
• No Crash Telemetry: Crash logs remain on your device. Crash reports are only shared if you manually choose to submit a diagnostic log via a public GitHub issue.

3. Agent Credentials and API Keys

Padu connects to AI coding agents (including Claude Code, OpenAI Codex, OpenCode, Pi Agent, Amp, DeepSeek, Cursor CLI, and ACP-compatible drivers) installed on your system.

API tokens and provider credentials remain in your operating system's native keychain (macOS Keychain, Linux Secret Service, Windows Credential Manager) or your local environment files. Padu never proxies, intercepts, collects, or transmits your API keys to any external servers.

4. Direct Communication with AI Model Providers

When you prompt an agent, the subprocess executing on your computer communicates directly with the respective AI provider's endpoints (for example, api.anthropic.com or api.openai.com) using your own API keys or CLI authentication tokens.

Your interactions with AI providers are governed strictly by your agreement and privacy terms with each individual provider. Padu does not act as an API middleman, does not proxy tokens, and cannot inspect or store the data exchanged between your local agent process and the provider.

5. Remote Daemon Connectivity (Web & Mobile)

Padu supports connecting remote clients (the Progressive Web App at app.padu.dev or companion mobile apps) to your devbox daemon.

These connections are established peer-to-peer or directly across your own private network infrastructure (such as Tailscale, WireGuard, local Wi-Fi, or an SSH tunnel). Padu does not route your unencrypted workspace traffic through proprietary centralized relay clouds.

6. Marketing Website and Update Checks

padu.dev Website: The static marketing website is hosted via global CDN networks. Standard transient HTTP server logs (such as IP address and user-agent) may be processed temporarily for DDoS mitigation and infrastructure security. We do not use tracking, advertising, or third-party profiling cookies.

Software Update Checks: Packaged desktop releases check the public GitHub Releases API for new version availability. GitHub receives standard network requests according to its own privacy policy.

7. Security & Vulnerability Disclosure

We take software security seriously. If you discover a potential security vulnerability in Padu, please review our Security Policy or report it confidentially to support@padu.dev.

8. Contact & Inquiries

If you have questions about this Privacy Policy or Padu's data practices, please contact us at support@padu.dev or open a discussion on our GitHub repository.