What we collect — and what we never touch
Empryo is a free, bring-your-own-key tool with no accounts and no backend between you and your model provider. This page states plainly what leaves your machine.
Your code and prompts
Your code, prompts, file paths and repository contents go to one place only: the model provider you configured (Anthropic, OpenAI, a local model, or any of the 22 supported providers), directly from your machine, using your own API key. Empryo has no server that sees, stores or proxies them. API keys are stored locally — in your OS keychain where available, otherwise in a local secrets file — and are never sent anywhere except to the provider they belong to.
The anonymous install census
Shipped release builds send one tiny beacon when a session starts, so we can count active installs. It carries: a random install id (used only to count distinct installs), event, surface (terminal / headless / desktop), app version, OS, arch, and a first-run flag. Coarse country comes from the receiving edge; the client IP is never stored in the payload.
It never carries: prompts, file contents, file paths, working directory, hostname, username, API keys, custom model ids or custom provider URLs.
A second, opt-out tier adds coarse usage details (model family, provider id, agent mode, theme, terminal bucket, locale). One keystroke in the in-app /developer panel turns it off, as do DO_NOT_TRACK=1 or EMPRYO_TELEMETRY=0. Running from source sends nothing at all — only shipped artifacts report. The full field list is disclosed verbatim in the app.
Downloads and the website
Download counts are a bare, anonymous +1 — no id, no body, no reply. The website is a static site served by Cloudflare; standard edge logs (as with any CDN) apply. It sets no tracking cookies and runs no third-party analytics.
Feedback
In-app feedback sends the text you wrote plus version, OS and surface. A contact field is optional and used only to reply to you.
Data requests
There is no account to delete because none exists. The install census is keyed by a random id stored at ~/.empryo/anon-id.json — delete that file and this install becomes indistinguishable from a new one. Questions: /contact.