YOUR WORK. YOUR BUSINESS.

Privacy, plainly put.

PandaCode is free, open-source software that runs on your computer. The only server we run is the optional Connect relay, and it can’t read your work. Here is exactly what the apps, the relay and this website do.

We collect nothing.No license checks. Connect, if you use it, keeps only your device list.
No telemetry.No analytics, usage tracking or crash reports. None.
Open to inspect.Every line is on GitHub, so you can check all of this yourself.

Last updated

The short version

  • Without Connect, PandaCode collects nothing. Unless you sign in to PandaCode Connect, there are no accounts, no license checks, no telemetry, no analytics, no crash reports and no PandaCode servers.
  • PandaCode Connect (optional, for the mobile app and for running tasks on another computer) keeps your GitHub account id and your devices’ names and public keys. Everything you send through it is end-to-end encrypted; we can’t read it. See Connect and the mobile app.
  • Your projects, conversations, tasks, bots, memories and settings are stored on your device. We never receive a copy.
  • The app talks only to the services you choose, directly from your computer, plus a few automatic requests that carry no personal data.
  • This website is static. It sets no cookies, runs no analytics and loads nothing from other companies.

The desktop app

PandaCode keeps its data in your operating system’s application data folder: a local database with your projects, conversations, tasks, board, team settings, bots and their memories, and usage figures, plus cached files such as screenshots you attach. Passwords, API keys, bot tokens and cloud credentials you enter are kept in a private file readable only by your user on macOS, and in the operating system’s secure store elsewhere (Credential Manager on Windows, Secret Service on Linux).

None of this leaves your computer unless a service you use needs it (see Services you choose). Uninstalling the app and deleting its data folder removes it.

Automatic requests

The app makes a few requests on its own. They carry no content from your work and no identifier for you, only what any internet request includes, such as your IP address:

  • Agent version checks, about every 6 hours, so PandaCode can tell you when your coding agents have updates: Homebrew (formulae.brew.sh), Anthropic (downloads.claude.ai), GitHub (api.github.com) and Kimi (cdn.kimi.com).
  • PandaCode’s own updates, at launch and about every 6 hours: the latest release’s update manifest on GitHub (github.com). Updates are signed and verified before they install. Turn this off in Settings → About.
  • A public model price list from GitHub (raw.githubusercontent.com), at most once a day, to estimate costs.

If you open the usage panel, the app asks your providers for your usage limits with the sign-in those tools already saved on your computer. These requests go straight to those companies. Links you click open in your browser or in the built-in browser, and those websites make their own connections.

Connect and the mobile app

PandaCode Connect is optional and off until you sign in, in the desktop app (Settings → Remote access) or in the PandaCode mobile app for iPhone and Android. It links your own devices so you can follow and answer tasks from your phone, or run a task on another of your computers. The mobile app never runs code; your computer does the work.

You sign in with GitHub. The sign-in asks GitHub for no permissions beyond who you are: no email, no repositories. Our relay, a Cloudflare Worker, then keeps:

  • your GitHub numeric user id, which names your account. At sign-in the relay also reads your GitHub login and avatar URL and passes them to your device, which shows them in Settings;
  • for each device you sign in: a random device id the app makes, the device name and platform, its public key, whether it accepts remote control, and when it was last online.

That is used only to make Connect work: to let your devices find each other. It is linked to your account, never used for tracking or advertising, never sold and never shared.

Your work is end-to-end encrypted. Tasks, prompts, replies and approvals travel between your devices encrypted with keys that never leave them (X25519 and XChaCha20-Poly1305). The relay forwards the ciphertext and stores none of it. We can’t read it, and neither can Cloudflare.

Like any web service, the relay sees your IP address. It uses it to rate-limit sign-ins, and Cloudflare may keep standard request logs to run and secure the service. We don’t use them to identify or track you.

The mobile app has no analytics, advertising, tracking or crash reporting, and it contacts only GitHub (to sign in, and to load your avatar) and the relay. Messages you write offline, your snoozes and pins, and your sign-in stay on the phone in its secure storage.

Deleting your account. In the mobile app, open Settings → Delete account. This removes your account and every device on it from the relay at once, and signs your devices out. Removing a single device from the device list deletes that device’s row. Deleting the account doesn’t change your GitHub account; you can also revoke PandaCode’s access in GitHub under Settings → Applications → Authorized OAuth Apps.

Services you choose

PandaCode is a workspace for tools you bring. When you use one, the app sends it what the work needs, directly from your computer, under your own account with that service and its privacy policy.

  • Coding agents and model providers, such as Claude Code, Codex, Kimi Code, OpenCode, Antigravity, Grok, GLM and MiMo, receive your prompts, the files and context they read, attachments and tool output.
  • GitHub, through the gh command-line tool you sign in to, when you link pull requests or use GitHub features.
  • Bots run on your computer. Messages you exchange through Telegram, Slack, Discord or WhatsApp pass through those platforms. Web chat is served from your own computer.
  • Virtual machines and cloud sandboxes. Local VMs run on your Mac. Daytona, Cloudflare and AWS sandboxes run in your own accounts and receive the commands, files and screen interactions you or your agents send.
  • Deploys to Vercel, Cloudflare or AWS run their command-line tools in your project with your credentials and upload what you deploy.
  • Jev (optional, off by default): decision assistance sends selected task excerpts, rules and saved diffs to TypeSafe; browser testing sends test goals and visible page content to TypeSafe and your configured text model provider.
  • Downloads you start, such as VS Code themes from Open VSX, or Tart and other tools from GitHub.

Agents act with the permissions you give them and can send your data to other services as part of a task. Review what you allow, especially with full access.

This website

This website is static. It has no cookies, analytics, advertising, social widgets, remote fonts or tracking pixels, and it loads nothing from other companies. Downloads come from GitHub Releases, where GitHub’s own privacy statement applies.

Like any website, our web host may keep standard server logs, such as IP addresses, browser details and the pages requested, to keep the site running and secure. We don’t use them to identify or track you.

Children

PandaCode is a developer tool and isn’t directed to children. We hold nothing about anyone beyond the Connect details above, which are a GitHub account id and device names.

Changes to this policy

We’ll update this page if PandaCode changes and show the date of the last update at the top. Because PandaCode is open source, every change to the app is public on GitHub.

Contact

Questions about privacy, or help deleting Connect data? Open an issue in GitHub issues. To report a security problem privately, follow our security policy (SECURITY.md in the repository).

See also the PandaCode License and Support for the mobile app.