Privacy in the app
Local models process conversations, documents and code on your computer. Ancilo sends no telemetry. Downloads, web search and optional cloud models involve external connections, described separately below.
Stays on your computer
With local models, prompts, answers, code, local search indexes and text recognition are processed on your computer. Attachments are read in a separate process without network access. Ancilo stores their text, not a copy of the attached file; the text is deleted with the conversation.
Document conversations use local models only, including their earlier messages. Chat project folders are read only; their indexed text is forgotten when you remove the project from the list. Tasks work in a copy of the chosen folder.
External connections under your control
Local processing does not exclude the following connections. Search queries can contain words from your documents even though the files themselves are not sent.
- Models: downloads and model searches go to Hugging Face or your chosen server. The current model list comes from GitHub; comparison with your computer happens locally.
- Web search: by default, you see and approve each query. You can allow automatic searches. Wikipedia or Serper receive the search terms; Serper also receives your key. Websites receive your IP address when search results are fetched.
- Cloud models: the provider receives requests you send to its model. Project code, coding sessions, delegation and document conversations use local models.
- Updates: the version check contacts GitHub when you start it or allow automatic checks.
No telemetry
Ancilo sends no usage data, analytics or crash reports. Cloud provider and Serper keys are stored in the system keychain, not in files or logs. The local service listens only on 127.0.0.1 and requires an access token.
Full privacy notes
The privacy documentation in the app repository describes individual connections and stored data. This website’s privacy page separately covers hosting and website visits.