This policy explains, in plain terms, what we collect and what we do not — written to match how Anvil is actually built: local-first, private by design. It is incorporated by reference into our End User Licence Agreement, which is presented to you when you install Anvil.
Vitkilabs, operated as a sole proprietorship · In force from publication
Anvil is a local-first memory layer. Everything that makes up your "brain" — memories, skills, prompts, reasoning traces, code, file paths, project data, and your Secrets Vault — is stored on your own machine. We do not store, forward, or process it, we claim no ownership of it, and we have no technical means of reaching it. Sensitive on-device data is encrypted at rest.
To provide accounts, licensing, and payments we hold only the minimum data needed to purchase and validate a licence:
Apart from bug reports you choose to send (below), that is the complete list of personal data we hold. We do not build profiles, and we do not collect your content to do so.
Bug reports you choose to send. If you use Report a bug in the app or anvil report-bug, the report contains what you write, the Anvil version, your operating system and processor type, and a health-check summary of which parts of Anvil are working. It never contains your memories, prompts, code or API keys, and you can read the whole report before you send it; a copy stays on your computer. Reports travel over an encrypted connection and are kept in a private issue tracker, hosted by GitHub, that only Vitkilabs can see. We use them only to fix problems. We do not store the network address a report came from: it is held briefly in memory to stop abuse and then discarded. Please do not put personal or confidential details in a report; if you did by mistake, email us and we will delete it.
Payments are handled by our third-party merchant of record, Lemon Squeezy, which processes the transaction and handles tax. We never receive or store your full payment-card details. Lemon Squeezy's handling of payment data is governed by its own privacy policy.
Any product telemetry is limited to your identity (name, email, country) and aggregate counts and averages — for example the number of memories written, sessions per day, and the app version and platform for compatibility. It never includes the content of any memory, skill, prompt, or code. It exists mostly for performance monitoring, so we can improve the software — for example how quickly your memories surface, and the accuracy of what is recalled. Telemetry is consent-based; you can review, adjust, or export what we hold about you.
vitkilabs.com uses privacy-preserving, server-side analytics to understand traffic in aggregate. The site does not set advertising or cross-site tracking cookies, and we do not sell or share site-visitor data.
All of our network traffic is encrypted in transit, and the limited data we hold is fully encrypted at rest. Credentials such as account passwords are salted and hashed and are never stored in a recoverable form. No customer data is held in cleartext anywhere. Our services sit behind a Cloudflare Web Application Firewall (WAF) for additional protection against common web attacks.
We do not, and will never, sell our customer base or any customer data as a data source. Because your private data lives on your device and we have no access to it — and will not design a means of gaining access — we cannot provide it to any third party, including upstream AI providers, other bodies, or government or law-enforcement requests. We can only ever produce the limited transactional data in section 2.
Your vault passphrase is never stored by us and never leaves your machine. Because we do not hold it, we cannot unlock, recover, or provide access to your protected data — for any reason, to anyone, including you. Keep your passphrase safe; if it is lost, the data it protects cannot be recovered by us or by anyone else.
If a breach affects the limited data we hold, we will handle it in accordance with applicable law and notify affected users without undue delay.
Anvil and our services are not directed at children, and we do not knowingly collect data from them.
We may update this policy from time to time. When a change is material we will make the updated policy available here and, where appropriate, notify you in-product. Continued use after a change takes effect constitutes acceptance for future use.