Privacy policy

The short version: Karma is local-first. Your code, git history, agent sessions, and usage data stay on your machine. We do not sell data, show ads, or track how you work.

what stays on your device

Workspace, session, message, and event state in ~/.karma-build/.
Git worktrees created for your agents inside your projects.
Local token, cost, process, and debugging records.

when Karma uses the network

To check release.karma.build for a signed app update when update checks are enabled.
To fetch model pricing and brand metadata from models.dev when those sync options are enabled.
When configured, to establish an anonymous machine identity for account services. Your code and project data are not attached to it.
When the coding harnesses and services you connect contact their own providers.

telemetry

Karma does not send product analytics, advertising identifiers, crash reports, or diagnostic logs. Diagnostics remain in local, rotating log files.

your choices

You can disable Karma's update and model-metadata requests in Data & Sync, and remove local state at any time. Third-party harnesses and services follow their own privacy policies.

contact

Questions? Email dev@karma.build.