Privacy Policy

1. On-Device Architecture & Execution

Synergoi runs as a local engine and desktop client directly on your personal computer. Conversation transcripts, database ledgers, and context handoff packs are stored in your local application data directory (e.g., ~/Library/Application Support/Synergoi on macOS, %APPDATA%\Synergoi on Windows).

• Cloud processing: Content used with a cloud AI provider leaves your computer for that provider. The desktop connector does not send credentials or file contents through a Tracewyn-hosted relay. The optional iPhone companion uses the encrypted relay described below.
• No Intermediate Proxies: Inference is orchestrated by spawning official local agent binaries on your machine through their supported interfaces. Communication occurs locally between the desktop app and the CLI.
• Context Packs: When switching providers mid-thread (the Baton handoff), the compiled briefing file is written to local application data—never into your git repository—with secret-redaction safeguards. Redaction cannot detect every secret; review sensitive content before sharing it.

2. Provider Credentials & Authentication

Synergoi operates on a Bring Your Own Subscriptions (BYOS) model. We do not host or manage your AI provider accounts.

• Official Local Keychains: Authentication for Claude, OpenAI Codex, Grok, Cursor, and Antigravity is handled directly by each provider’s official CLI (e.g., claude auth login, codex login, grok login). Credentials reside in the vendor's default OS Keychain or configuration folders.
• Multi-Account Directory Isolation: When connecting secondary accounts (such as a Work profile alongside a Personal profile), Synergoi isolates configuration environments locally under secure user permissions (0600).
• Connected-app credentials: Google Drive, Microsoft, and Linear sign-in tokens are encrypted in local app data using a key protected by the operating system. Tokens are sent to the relevant service for authentication and authorized API calls, but are not included in agent tool results or chat messages.

3. Local Voice Dictation (Whisper.cpp)

Voice input in Synergoi is powered by a bundled on-device whisper.cpp engine.

• Audio captured from your microphone is sampled in-memory at 16kHz PCM and transcribed strictly on your local CPU/GPU.
• Zero audio buffers, voice waveforms, or temporary WAV files are ever transmitted over the network.
• The speech model (multilingual Base, quantized) and the voice-activity model ship inside the app bundle. Nothing is downloaded to enable dictation.

4. Attachments & Image Scrubbing

Images pasted or dropped into the composer are content-addressed and saved locally by SHA-256 hash. Before any AI provider sees an image, all EXIF/metadata tags are stripped and long edges are normalized to prevent unintended location or device data leakage.

5. iPhone Companion

The Synergoi iPhone app pairs with a computer that already runs Synergoi. It does not create an account, does not sign in to Claude, Codex, Grok, Cursor, or Antigravity, and does not collect analytics, crash reports, or advertising identifiers.

• Pairing keys live in the on-device Keychain. Transcript cache and usage snapshots live in SwiftData on the phone.
• The computer dials out to the relay (relay.tracewyn.com). The phone never needs an inbound port. The relay stores ciphertext of application frames, opaque pairing tokens, hashed device tokens used to route Apple Push Notification service, and timestamps. It cannot decrypt application plaintext.
• Apple Push Notification service carries the same ciphertext. The Notification Service Extension decrypts on the device.
• Licence validation happens between the computer and Lemon Squeezy. The licence key never reaches the phone.

6. Licensing & Billing Data

Payments and subscriptions are processed by our merchant of record, Lemon Squeezy.

• Payment Information: Tracewyn does not collect, process, or store credit card numbers or billing addresses. All transactions are securely handled by Lemon Squeezy.
• License Validation: To activate and validate your SynergoiPro license, the local engine communicates with Lemon Squeezy's License API over HTTPS. Validation snapshots verify only order ID, active status, and license nonces.
• Offline Grace Period: Validated licenses feature a 72-hour offline grace period, ensuring you can continue coding without an active internet connection.

7. Data Ownership & Privacy Rights

You control local app data. Connected services, cloud AI providers, backups, and the paired iPhone may retain separate copies:

• Export & Portability: All session transcripts and ledgers are stored in standard SQLite databases and JSON files that you can inspect, backup, or delete at will.
• Local deletion: Quit the app before deleting its application data folder to remove the local records stored there. This does not erase repositories elsewhere, device backups, paired-phone data, or copies held by external services. Disconnecting an app does not delete previous chats.
• Privacy requests: Contact us about access, correction, or deletion of information you provide to Tracewyn, such as support correspondence or purchase records available to us. Applicable rights and retention obligations depend on your location and the information involved. We do not sell Google user data or use it for advertising.

8. Google Drive & Other Connected Apps

Connections are optional. In supported desktop builds, Google Drive lets you choose files to use in a conversation, summarize or answer questions about their contents, and approve creation or editing of supported text files. See how Google Drive works with Synergoi.

• Data accessed: With Google’s drive.file permission, the app accesses files you select or that it creates, including file IDs, names, types, and requested contents. Supported reads include plain text, Google Docs exported as text, and the first sheet of Google Sheets exported as CSV. It also reads your Drive account identifier, name, and email to label and distinguish the connection. This connection does not request Gmail, NotebookLM, or access to your entire Drive.
• Purpose: Google data is used to provide the connected-file features you request. Tracewyn does not sell this data, use it for advertising, or use it to train generalized AI models.
• Sharing and AI: When you ask a cloud agent to use a file, its contents and related context may be sent to the AI provider selected in that chat through its official CLI. Switching providers can carry conversation context to the next provider. Their account settings and policies govern their processing and retention; Tracewyn cannot promise that every provider or subscription excludes training. Choose a provider and settings appropriate for your data. If you pair the iPhone companion, chat content can also reach that device through the encrypted relay described above.
• Storage and retention: Account labels, scopes, and capability choices are stored locally. Sign-in tokens are encrypted locally and used until they expire, are revoked, or the connection is removed. File content returned to an agent may remain in local chat history, context packs, and the provider’s history. Tracewyn does not operate a central Google-file content store for this connection.
• Your controls: Capability switches restrict the tools Synergoi can use; they do not revoke the underlying Google consent. Supported writes require approval of the proposed action. Disconnect in Settings → Integrations to remove local credentials; the app also attempts Google token revocation. You can independently remove Synergoi access from your Google Account connections. Delete relevant local chats or app data separately and use external providers’ controls for their copies.
• Other services: Linear connects to your workspace for supported project and issue actions. Microsoft connects to your Outlook mailbox and calendar for supported read, email-send, and event-creation actions. These connections use service-specific permissions, encrypted local tokens, and per-account capability controls. Writes require approval. Microsoft consent must be removed separately in Microsoft’s account settings if you wish to revoke it there.

We handle Google data for the disclosed features under the Google API Services User Data Policy. If you send file content or diagnostics to support, that submission is separate from connecting Google Drive and may be retained to address your request. Share only what is necessary. Local encryption reduces risk but cannot guarantee protection against a compromised device or account. Changes to data use will be disclosed here and, where required, in the app before new use begins.