Privacy Policy

What we cannot see

Everything you sync is encrypted on your device or in your browser before it reaches us. That includes file contents and the names of your skills, agents and other items. We never receive your master password or your Recovery Key, so we cannot decrypt your data, and neither can anyone who gets access to our servers.

What we store

• Account: your name, email address and profile picture from GitHub or Google, and which of them you sign in with.
• Sign-in sessions: the IP address and browser of each session, so you can see and end them.
• Devices: the name and operating system you give each connected computer, and a keyed hash of its IP address.
• Encrypted data: the encrypted files themselves, their sizes and timestamps.
• Security events: sign-ins, new devices, shares and similar account changes, with a keyed hash of the IP address.
• Token usage: how many tokens each AI assistant on your connected computers used per day and model, read from the assistants’ logs by the SkillPouch CLI. Only the counts, never your prompts or replies.
• Billing: your plan and subscription status. Payment details are handled by our payment provider; we never see card numbers.

Why we use it

Only to run the service: signing you in, syncing your devices, showing you your account's security activity, preventing abuse, and billing. We do not sell your data, show ads, or use your data to train AI models.

Cookies and tracking

We use only the cookies needed to keep you signed in. There are no analytics, advertising or third-party tracking scripts.

Services we rely on

• GitHub and Google, when you sign in with them.
• Polar, our merchant of record, for payments and invoices.
• Cloudflare, which carries traffic to our servers.

Each of them processes data under its own privacy policy.

How long we keep it

Your data stays while your account exists. Sync history and older versions expire automatically according to your plan. When you delete your account, everything is deleted after a 7-day grace period in which you can change your mind.

Your rights

You can see your sessions, devices and security activity in your account settings, and delete your account at any time. To request a copy of the personal data we hold about you, or a correction, write to info@skillpouch.net.

Children

SkillPouch is not intended for anyone under 16.

Changes

If this policy changes, we update this page and the date above. For significant changes we also notify you by email or in the app.

Contact

Questions about privacy: info@skillpouch.net.