Privacy

Lingua treats your code and your filesystem as private. The default install reads nothing, sends nothing, and asks for nothing.

What we never collect

• Your source code. Snippets stay on your machine. The opt-in execution-history feature stores snapshots locally only — they never leave the device.
• Your filesystem. Project paths, file names, and directory listings are not transmitted to us.
• Your input. Keystrokes, clipboard contents, and command history are not logged.
• Personal identifiers. No email, name, IP-derived location, or device fingerprint is sent without explicit consent.

What we collect (only if you opt in)

Telemetry is off by default. The first-run consent prompt explains what gets sent if you opt in:

• Anonymous event names — for example, overlay.opened, runner.executed, feature.blocked.
• The Lingua version and platform string (darwin-arm64, win32-x64, linux-x64).
• A pseudonymous installation ID generated locally — not tied to anything personal.

Events are sent to a self-hosted endpoint we control. There is no third-party analytics vendor in the desktop app. You can revoke consent any time from Settings → Privacy; revocation stops transmission immediately and any locally queued events are discarded.

Crash reporting

Crash reports are opt-in under the same consent flow. Reports include a stack trace and Lingua version — they do not include your code, your input, or file paths.

AI features

Explain error, Explain selection, Ask AI in SQL and the cron phrase composer are off until you set a model in Settings. Lingua ships no remote endpoint or key, and sends nothing until you choose Send after seeing the exact payload. Secret-looking values are redacted first, and SQL sends table and column names and types, never rows.

• Local sends only to localhost or 127.0.0.1, such as Ollama. Nothing leaves the device.
• My endpoint sends to the provider you configure, under your account and its terms.

The key stays in the system keychain when one is available, otherwise in local storage. Conversations are never saved, and telemetry never carries prompts, answers, endpoints or keys.

This website

linguacode.dev is a static site on Cloudflare Pages. We do not run a third-party analytics script. If we add Cloudflare's first-party Web Analytics, it runs without cookies and without sending data to any other vendor.

The web build

app.linguacode.dev uses the same renderer as the desktop app. Pyodide is downloaded once from cdn.jsdelivr.net on first load and served from a Service Worker cache after that.

Contact

Questions about privacy? Email hello@linguacode.dev. Source for the telemetry pipeline is in themain repository.