Scaffold is local first. Your memory stays on your Mac. The desktop app does not run telemetry or product analytics.
What stays on your Mac
Knowledge, chats, embeddings, and exports live on your device. API keys and connector credentials are encrypted at rest with AES-256-GCM. The encryption key stays on your Mac and is never sent to our servers. We do not receive, store, or back up your memory on our servers.
Embeddings run locally. Inference can run locally too. If you choose cloud inference, only the active request goes to the provider you configured, using your API keys. Scaffold is not in that path.
What the app does not collect
The Scaffold desktop app does not collect or send:
- Your memory, knowledge graph, chats, or messages
- Telemetry, product analytics, or usage tracking
- Automatic crash reports, logs, or diagnostics
- Your API keys or connector secrets
If you sign in (optional)
An account is not required. If you choose to sign in, we store only:
- Your email and authentication data, so you can sign in
- Bug reports you submit: the message you write, app version, and platform. Sign-in is required. We do not attach logs, chat history, or memory dumps.
- MCP relay routing while your app is open. This is in-memory transport only. We do not store your memory, messages, or tool results on our servers.
Third parties you choose
- Supabase — account sign-in
- Model and connector providers you configure — OpenAI, Anthropic, OpenRouter, GitHub, Linear, Are.na, and others you connect; they receive only what you send them under their policies and your keys
Website downloads
If you download from this website and optionally leave an email, we store that signup on the site. That is separate from the desktop app and does not include your memory or app usage.
Retention
Account data and bug reports you submit are kept until we delete them or you ask us to remove account-related data. There is no automated purge today.
Your choices
Use Scaffold without an account. Keep inference local. Choose your own connectors and files. Export your data from the app.
Contact
Privacy requests: use the channels listed on this site.