Last updated: draft, not yet in effect.
The CodeHerd app
- No telemetry, analytics or crash reporting. The app does not send usage data, crash reports or identifiers anywhere.
- No accounts. You don't sign in to CodeHerd. Pro is unlocked with a licence key, not an account.
- Pro licences. If you buy Pro, Polar, our reseller and merchant of record, takes the payment under its own terms and privacy policy, and emails you a licence key. The key you paste into CodeHerd is stored on your Mac. CodeHerd sends it to Polar to activate it, with your Mac's name so you can tell your Macs apart in Polar's customer portal, and to check it about once a day. The 14-day trial needs no network: when it started is remembered on your Mac, in the folder below and in your login keychain.
- No credentials. CodeHerd launches agent CLIs (such as Claude Code, Codex CLI and Gemini CLI) that you have installed. Each CLI handles its own sign-in, stores its own credentials and talks directly to its provider. CodeHerd never reads, stores, proxies or transmits those credentials or your conversations.
- Local data only. Your project list, layouts, settings and custom commands are stored on your Mac in
~/Library/Application Support/CodeHerd. Terminal output is kept in memory only and is not written to disk. Git worktrees CodeHerd creates for you live in~/.codeherd/worktrees. - Logs stay local. A diagnostic log is written to your Mac (in the folder above) and is never uploaded. It records events such as which CLIs were found, not what you type.
- Voice dictation. Off unless you turn it on. While you hold the dictation key, CodeHerd records from your microphone and turns your speech into text on your Mac with whisper.cpp. Audio is never uploaded or kept: it is deleted as soon as it has been transcribed. The speech model is downloaded once, from whisper.cpp's repository on Hugging Face, when you turn dictation on. Hugging Face sees that download like any other; nothing about you or your audio is sent.
- Update checks. When it opens and once a day, CodeHerd asks downloads.codeherd.app, our own server, whether there's a new version, and downloads it from there if there is. The request says only that it comes from CodeHerd: no version, licence key, identifier or anything else about you or your Mac. Like any web server, ours sees your IP address and the time (see This website below). You can turn automatic checks off in Settings › About.
- Network access. Apart from update checks, downloads you start (the speech model when you turn on voice dictation, and the simulator stream the first time you open the iOS Simulator) and checking a Pro licence key with Polar, the app makes no network requests of its own. Links you choose to open (documentation, install guides) open in your browser.
Agent providers
When you use an agent inside CodeHerd, your interaction with that agent is governed by its provider's terms and privacy policy (for example Anthropic, OpenAI or Google), exactly as if you ran it in any other terminal.
This website
- Anonymous visit counts. We count page views with Umami, which we host ourselves at analytics.danblock.dev. It records the page, the referring site, your browser, operating system, device type, screen size, language and approximate location (from your IP address, which it does not store). It sets no cookies and stores nothing that identifies you, and nothing is shared with anyone else.
- No advertising, tracking pixels or third-party scripts.
- No cookies. The only thing stored in your browser is your light/dark theme choice (local storage).
- Our web servers, including downloads.codeherd.app, may keep standard access logs (IP address, time, file or page requested) for security and reliability, retained for a limited period. Retention period to be confirmed by the operator.
Contact
Questions about privacy: support@codeherd.app.