Privacy Policy

Foxpit is built to keep your work on your computer. This page explains the little it does send, and why.

What we collect

• Your email address and an account id, so you can sign in.
• Your sign-in provider (email code, Google or GitHub). If you use Google or GitHub, we receive your email address and basic profile from them, nothing else.
• An anonymous device hash. A one-way fingerprint of your computer's id. It cannot be turned back into the id. We use it only so one computer gets one free trial.
• Your plan and trial dates, so the app knows whether your trial or Pro is active.

What we never collect

Your source code, terminal output, prompts, files, agent sessions or project names never leave your computer. Foxpit has no analytics and no telemetry. Agent events travel only over 127.0.0.1 on your own machine.

Where it is stored

Account data is stored with Supabase in the European Union (Frankfurt). On your computer, your sign-in session is saved encrypted with your operating system's secure storage.

Third parties

• Supabase runs our account server.
• Google and GitHub are contacted only if you choose them to sign in.
• GitHub Releases is checked for app updates.
• The npm registry is contacted when Foxpit updates your agent CLIs. You can turn this off in Settings → Updates.
• Your AI providers (Anthropic, OpenAI and others) are contacted by the agent CLIs you run, under your own accounts. If you use the built-in Foxpit engine, it sends your prompts and the files it works on to the provider you connected, with your own key or sign-in. Foxpit itself never receives them.

We do not sell or share your data with anyone else.

Deleting your account

Email info@foxpit.dev from the address on your account and we will delete your account data within 30 days. Signing out in the app removes the saved session from your computer right away.

Changes

If this policy changes, we will update this page and the date above. For important changes we will also email you.