# Koder CLI privacy statement

Updated October 20, 2026.

KARMENLOOP Official Team, Shanghai, China. info@karmenloop.com. https://karmenloop.com.

Basic local use is free and does not require membership. Ordinary tasks send your message, needed history, and file contents/tool results actually read to the model you select. Review its service, plan, region, and data policy. Local CLI API configuration and environment variables are not the desktop encrypted key store. Accepting the license does not enable optional learning, sync, or computer access.

A birthday saves only a month and day after your explicit choice, and you can delete it. A casual mention offers a choice; a clear request to remember your own birthday can save it locally. Another person's birthday is not yours. Optional language learning keeps local counts. Holiday notices, six-second effects, and music can each be skipped or switched off without preventing ordinary tasks.

IP country lookup and birthday music are off by default. Country lookup requires its own confirmation; ipapi.co receives your public IP, while Koder saves only a country code. Separately enabled birthday music opens at most one automatic browser tab that day. The default melody is generated locally. An external music platform receives ordinary access data only when you select or visit it. A browser may require a click to play, and Koder does not bypass that restriction.

Feedback provides an address and blank template without sending email or attaching history. Website and kernel introductions describe public capabilities. Permissions, confirmations, redaction, and checksums do not replace operating-system protection or guarantee that installed runtime code cannot be extracted.

Full terms: koder privacy consumer. Complete original official consumer notice and agreement: koder privacy desktop / agreement. Origins and SHA-256 hashes: koder privacy sources. Remove a birthday: koder celebrate birthday forget; turn music off: koder celebrate music off; hide automatic notices: koder celebrate auto off. All full texts ship in the package for offline reading.


Execution approval settings stay in the local execution-permissions.json with host/workspace scope. Rules store action hashes, risk labels and timestamps, not raw commands or keys; authority is never memory-synced. Smart approval allows low-risk checks and ordinary project edits. Sensitive actions ask and offer Always allow. Explicit full access can cover one workspace or an explicitly selected profile; it can execute code, modify/delete files and use existing app grants without action prompts, but cannot grant OS permissions or supply passwords. Inspect with permissions execution status; revoke/reset withdraws settings. Private thinking protocol state stays in the live tool loop. Restored history uses a bounded visible-history reference without inventing or persisting hidden reasoning.


Official remote references: local CLI tasks can retrieve selected licensed workflows. The official service receives short search keywords and selected resource IDs, offsets and limits; the client does not attach full conversations, model keys or private collections. Hosting infrastructure receives normal network metadata, including IP. The handler does not log query or response bodies. Selected excerpts and required notices reach the task model and may remain in task history. No full library is downloaded at startup. Disable with KODER_REMOTE_RESOURCES=0. Private local collections never fall back to remote search. Encrypted GitHub assets are decrypted only by the official server; readable excerpts can be retained. Unknown-license materials are withheld. See docs/REMOTE-RESOURCES.md.