Privacy Policy

Last updated: July 6, 2026

The short version: Sky runs on your hardware. We never receive, store, or have access to your data. There is nothing to sell, share, or subpoena because we never have it.

1. What data Sky processes

Sky processes data locally on your device. This includes:

Conversations: Stored in brain/chats.json on your machine.
Memory and persona: Stored in brain/knowledge.json and brain/active_persona.txt on your machine.
Audit log: Stored in brain/audit.jsonl on your machine.
Sentinel data: Network baselines, alerts, and scan history stored in brain/sentinel.json on your machine.

None of this data is transmitted to us or any third party by Sky.

2. Network requests Sky makes

Sky is designed for local-only operation. The following are the only outbound network requests Sky makes, each requiring your explicit approval:

Breach check (k-anonymity): Sends a 5-character SHA-1 hash prefix to api.pwnedpasswords.com/range/. This is the Have I Been Pwned range API — it is mathematically impossible to determine your password from the prefix. Your password never leaves your device.
Tier 2 escalation (optional): If you choose to escalate a query to a cloud model (e.g., Claude), your query is sent to that provider. Sky asks for your explicit permission before every escalation. The third-party provider's privacy policy applies.
Auto-updates (Pro/Team): Checks for new versions. No user data is included in the request.

3. What we collect about you

Nothing. We do not operate telemetry, analytics, crash reporting, or any data-collection infrastructure. We do not know who uses Sky, how often, or what they use it for.

4. What we collect at purchase

If you purchase Sky Pro or Team, Stripe (our payment processor) collects your payment information. We receive your email address and purchase details from Stripe for the purpose of delivering your license and providing support. We do not receive or store your card number.

Stripe's privacy policy: stripe.com/privacy

5. Website "Try our AI" chat

The free chat demo on this website is the one place where data leaves your device, which is why it asks for your acceptance of this policy before the first message. When you use it:

Your messages are sent to our hosting provider (Cloudflare) and forwarded to our AI provider (Anthropic) solely to generate a reply. We do not store your conversation on our servers; replies are generated and returned, not logged by us.
Your IP address is used to enforce a fair-use daily message limit. The counter (IP + date) is kept in short-lived storage and expires automatically. It is not linked to your identity or used for anything else.
Local storage on your browser holds your policy acceptance (isri_privacy_ok) and, for developers, an optional access code. Nothing else; no cookies.
Third-party processing: Anthropic processes chat messages under its own policy (anthropic.com/legal/privacy); Cloudflare acts as our infrastructure provider (cloudflare.com/privacypolicy).

We do not sell chat data, build profiles from it, or use it for advertising. Don't paste secrets or personal data into the demo — it's a demo.

6. Cookies and tracking

This website uses no cookies, no analytics, no tracking pixels, and no third-party tracking scripts. The only browser storage used is the "Try our AI" acceptance flag described in section 5.

7. Data retention

Since your data lives on your device, you control retention. Delete the brain/ directory and your data is gone. We have no copy to retain.

Purchase records (email, license key) are retained for the duration of your subscription plus 90 days for support purposes.

8. Children's privacy

Sky is not directed at children under 13. We do not knowingly collect data from children — because we do not collect data from anyone.

9. Law enforcement

Because we do not possess your data, we cannot produce it in response to legal requests. Your data lives on your hardware; any legal process would need to be directed at you, not us.

10. Changes

If we update this policy, we will post the revised version here with an updated date. Material changes will be announced with at least 30 days' notice.

11. Contact

Privacy questions: privacy@skynetworksecurity.ai