Privacy policy
Effective 17 October 2026
Junxion runs on your Mac, and what it learns about your projects stays there. Our servers hold your account, the list of your devices, and, only if you turn on sync, data that is encrypted on your device before it leaves, so we can't read it. We don't sell data, show ads, or track you.
Who we are
Junxion is a desktop app for macOS that hosts AI coding agents (Claude Code, Codex, Gemini CLI) and keeps a local record of what they learn about your projects. This policy covers the app, the website at this address, and the web demo.
What stays on your Mac
Everything Junxion learns from your work is stored only on your computer, in the
~/.junxion folder:
- your projects, the sessions you run, their transcripts, and the files your agents touched;
- the knowledge Junxion extracts (decisions, rules, preferences, open work) and the briefs it writes;
- your settings, and any API key you add for an agent (readable only by your user account).
Learning runs on a local model on your Mac. Junxion does not send your code, transcripts or project knowledge to our servers. Secrets such as keys and passwords are masked before anything is stored.
Your agents and their providers
The agents you run through Junxion (for example Claude Code or Codex) work exactly as they do on their own: they sign in with your own accounts and send your prompts and code to their providers (such as Anthropic, OpenAI or Google) under those providers' terms and privacy policies. Junxion doesn't read the agents' sign-in credentials.
What our servers store
Accounts and sync use Supabase as our database and sign-in provider.
| Data | Why |
|---|---|
| Your name, email address, profile picture link and account ID, from Google sign-in | To identify your account across your devices |
| Each device you sign in on: a random ID, the device name, platform, app version, and when it was last seen | So you can see and remove your devices |
| With sync on: your synced knowledge, encrypted on your device (AES-256-GCM) with a key only your devices hold | To keep your knowledge the same on all your Macs |
| With sync on: each device's public key, sealed copies of the sync key, and short-lived requests to link a new device (device name, a verification commitment) | So a new device can join only after you approve it |
Synced data is end-to-end encrypted: we store it, but we can't read it. If you lose all your devices and your recovery code, we can't recover it for you.
Google sign-in
Junxion asks Google only for your basic profile (name, email address and picture) to create your account. It does not access your Gmail, Drive, Calendar or any other Google data. Junxion's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
The website and the demo
This site has no analytics and no tracking cookies. It is hosted by Vercel, which keeps standard server logs (such as IP addresses) to deliver and protect the site. The web demo runs entirely in your browser on sample data; what you do in it isn't sent anywhere, and the few preferences it remembers stay in your browser's storage.
Updates
The app checks for new versions on GitHub, where releases are published. That check is an ordinary download request.
What we don't do
- We don't sell or rent your data, or share it for advertising.
- We don't use your data to train AI models.
- We don't add analytics or tracking to the app.
Keeping and deleting your data
- On your Mac: delete the
~/.junxionfolder to remove everything Junxion stored there. Uninstalling the app leaves it in place on purpose. - A device: remove it from your account in the app (Settings, Account).
- Sync on one machine: turning sync off there forgets the key on that machine.
- Your account: email us and we'll delete your account, your devices and all synced data from our servers.
We keep account data while your account exists, and delete it when you ask.
Security
Data travels over HTTPS. Synced data is encrypted on your device before it's uploaded, and each device keeps its own key. Access to our database is restricted so that each account can only reach its own rows.
Children
Junxion is a developer tool and isn't meant for children under 16.
Changes
If this policy changes, we'll update it here and change the date at the top. For significant changes, we'll also tell you in the app.
Contact
Questions, or a request to delete your account: hello@junxion.app.