Privacy Policy

Last updated: July 2, 2026

The short version: Sky runs on your hardware. We never receive, store, or have access to your data. There is nothing to sell, share, or subpoena because we never have it.

1. What data Sky processes

Sky processes data locally on your device. This includes:

Conversations: Stored in brain/chats.json on your machine.
Memory and persona: Stored in brain/knowledge.json and brain/active_persona.txt on your machine.
Audit log: Stored in brain/audit.jsonl on your machine.
Sentinel data: Network baselines, alerts, and scan history stored in brain/sentinel.json on your machine.

None of this data is transmitted to us or any third party by Sky.

2. Network requests Sky makes

Sky is designed for local-only operation. The following are the only outbound network requests Sky makes, each requiring your explicit approval:

Breach check (k-anonymity): Sends a 5-character SHA-1 hash prefix to api.pwnedpasswords.com/range/. This is the Have I Been Pwned range API — it is mathematically impossible to determine your password from the prefix. Your password never leaves your device.
Tier 2 escalation (optional): If you choose to escalate a query to a cloud model (e.g., Claude), your query is sent to that provider. Sky asks for your explicit permission before every escalation. The third-party provider's privacy policy applies.
Auto-updates (Pro/Team): Checks for new versions. No user data is included in the request.

3. What we collect about you

Nothing. We do not operate telemetry, analytics, crash reporting, or any data-collection infrastructure. We do not know who uses Sky, how often, or what they use it for.

4. What we collect at purchase

If you purchase Sky Pro or Team, Stripe (our payment processor) collects your payment information. We receive your email address and purchase details from Stripe for the purpose of delivering your license and providing support. We do not receive or store your card number.

Stripe's privacy policy: stripe.com/privacy

5. Cookies and tracking

This website uses no cookies, no analytics, no tracking pixels, and no third-party scripts. There is nothing to consent to because there is nothing to track.

6. Data retention

Since your data lives on your device, you control retention. Delete the brain/ directory and your data is gone. We have no copy to retain.

Purchase records (email, license key) are retained for the duration of your subscription plus 90 days for support purposes.

7. Children's privacy

Sky is not directed at children under 13. We do not knowingly collect data from children — because we do not collect data from anyone.

8. Law enforcement

Because we do not possess your data, we cannot produce it in response to legal requests. Your data lives on your hardware; any legal process would need to be directed at you, not us.

9. Changes

If we update this policy, we will post the revised version here with an updated date. Material changes will be announced with at least 30 days' notice.

10. Contact

Privacy questions: privacy@skynetworksecurity.ai