Privacy Policy

Rubra Candela reads your source code. So the only thing that matters in this document is a precise answer to one question: what leaves your machine?

The answer is: your name, your email address, and a handful of facts about the install — sent once, when you create an account. Nothing else. Not your code, not your file names, not your questions, not the AI's answers.

This policy lists everything, exhaustively. If something is not on the list below, the Software does not transmit it.

---

1. What we receive

When you create an account

Sent once, to our registry, at the moment you sign up:

The country code is derived from the network address of that single request. Your IP address is not stored — there is no column for it in our database. Our hosting provider may retain request logs containing IP addresses for a short period as part of normal server operation, as any web host does.

When you verify your email

A six-digit code, stored alongside your email address, with an attempt counter and an expiry. It is deleted the moment you verify, or automatically after 30 minutes, whichever comes first.

That is the complete list.

There is no analytics SDK, no crash reporter, no telemetry, no session recording, no advertising identifier, and no third-party tracker in the Software.

---

2. What never leaves your machine

All of the following is created, stored, and used entirely on your own computer and is never transmitted to us or to anyone else:

• Your source code, and the contents of every file
• File names, folder names, and the absolute path of your project
• The dependency graph, module relationships, and every metric derived from them
• Git history, commit messages, branch names, and author details
• Every question you ask the AI, and every answer it gives
• Cached file explanations and search results
• Your password

Your password is hashed on your machine using scrypt and stored only on your machine. The password and its hash are never transmitted anywhere, including to us.

Where it lives

To erase everything the Software has stored locally, delete that folder.

---

3. Every network connection the Software makes

There are exactly four, and three of them are optional.

1. Local AI runtime — http://localhost:11434. This never leaves your computer; it is your own machine talking to itself. Your code is analysed here.
2. Account registration — one request when you sign up, carrying only the table in section 1.
3. Email verification — a request asking our server to mail you a code.
4. Update check — only when an update channel is configured; a plain request asking what the latest version is. It sends no personal data.

If registration and verification are not configured for your build, the Software makes no outbound connections at all beyond localhost, and works fully offline.

A connection that is not ours

The Software requires Ollama, installed separately by you. The first time you run it, Ollama downloads a language model from Ollama's servers. That connection is between you and Ollama, under Ollama's privacy terms, and reveals your IP address to them. No part of your code is included in that download. We are not party to it.

---

4. Who else sees your data

Two service providers process the data in section 1 on our behalf:

• Supabase — hosts the database holding install records, and runs the function that receives them.
• Resend — delivers verification emails. Resend receives your email address and the verification code, because it has to in order to send the message.

Neither receives, and neither has any means of receiving, anything from section 2.

We do not sell your data. We do not share it for advertising. We do not share it with anyone beyond the two processors above, except where we are legally required to.

---

5. How long we keep it

• Install record — until you ask us to delete it.
• Verification code — deleted on successful verification, or after 30 minutes.
• Local data on your machine — until you delete it. It is yours, and we have no ability to reach it.

---

6. Your rights

Write to hello@rubracandela.com and we will, within 30 days:

• tell you exactly what we hold about you;
• correct anything wrong;
• delete your record entirely;
• send you a copy in a portable format.

Deleting your record does not affect the Software on your machine. It will keep working; it is not licence-checked against our server.

Depending on where you live you may also have the right to object to processing, restrict it, or complain to your data protection authority.

Grievances

Rubra Candela is operated from India. If you are dissatisfied with how we have handled your data or your request, write to hello@rubracandela.com with "Grievance" in the subject line. We will acknowledge within 7 days and respond substantively within 30.

Users in India may escalate to the Data Protection Board of India. Users in the UK or EU may complain to their national supervisory authority.

7. Legal basis

India (DPDP Act 2023). We process the data in section 1 on the basis of your consent, given when you create an account after being shown notice of exactly what is collected. You may withdraw consent at any time by asking us to delete your record; withdrawal does not stop the Software working, because it does not check with us to run.

UK and EU (GDPR). We process that data to perform our contract with you — creating and verifying your account — and on the basis of our legitimate interest in knowing how many people use the Software and on which platforms.

We do not transfer your data outside the jurisdictions our two processors operate in, and we do not use it for automated decision-making or profiling.

8. Children

The Software is not directed at children under 16, and we do not knowingly collect their data.

9. Security

Our registry is protected by a shared secret; the database denies all access by default and is reachable only through that authenticated function. Traffic is encrypted with TLS in transit.

10. Changes

We will update the version and date at the top when this policy changes. Material changes will be announced in the release notes. We will not retroactively broaden what we collect without telling you.

11. Contact

hello@rubracandela.com