Privacy
Ocadox is built to keep your work on your computer. The app has no accounts, no analytics and no tracking, and it does not send your prompts, files, chats or voice anywhere.
Last updated October 13, 2026.
In short: models run on your machine through Ollama, speech is turned into text on your machine with Whisper, and your chats, bots and settings are files in your user folder. Ocadox only goes online for the specific things listed below, most of which you start yourself.
What stays on your computer
- Your chats, bots and their transcripts, routines, settings and checkpoints.
- Everything the agent reads or changes in the project folder you give it.
- Your voice: the microphone is recorded and transcribed locally, and the recording is not kept. Meeting recordings you make are saved as files in your project folder, with their notes, and stay there until you delete them.
- Voice samples you add for speech, and the images, videos and speech Ocadox makes.
- The Poster's accounts: app passwords, tokens and webhooks are kept only on your computer.
- Energy and temperature history, and crash logs.
When Ocadox goes online
| For | Talks to | What is sent |
|---|---|---|
| Running models | Ollama on your computer, or an Ollama server you choose | Your prompts go to that Ollama only. If you choose one of Ollama's cloud models (marked CLOUD in Ocadox), Ollama sends your prompts and the files the agent reads to its servers. Settings can hide cloud models. |
| Downloading models | ollama.com, Hugging Face | The name of the model you asked for. Only when you download one. |
| Speech models | Hugging Face (whisper.cpp) | Which speech model to download. Only when you download one. |
| Updates | GitHub (ocadox-releases) | A check for a newer version (the Android app checks each time it opens). GitHub sees your IP address, as with any download. |
| Ocadox Pro | Gumroad | Your license key, when you activate it and about once a month after, to check it was not refunded. Pro keeps working offline. |
| Web tools (off by default) | DuckDuckGo and the pages the agent opens | The agent's searches and page requests, only if you turn web access on. |
| The Poster | The platforms you connect (Bluesky, Mastodon, Discord, Slack, X, Reddit) | The posts you publish or approve, with their images, directly to that platform with your own account. Nothing goes through Ocadox. |
| Image, video and speech models | Hugging Face, GitHub (stable-diffusion.cpp, llama.cpp) | Which model or engine to download, once, when you set the feature up. |
| Cloud models with your own key (off by default) | The provider you add a key for (such as OpenRouter, OpenAI or Anthropic) | When you pick one of its models: your prompts and the files the agent reads, under that provider's privacy policy. Your key stays on your computer. |
| Your Claude Code or Codex (off by default) | Anthropic or OpenAI, through their own apps on your computer | When you pick one of their models: your prompts and the files they read, under Anthropic's or OpenAI's terms and privacy policy, on your own plan or key. You sign in through their app; Ocadox never sees your sign-in. |
| Sign in with OpenRouter (off by default) | OpenRouter | Approving the sign-in in your browser creates a key that stays on your computer; after that, as for cloud models with your own key. |
| Music | GitHub (ocadox-releases), Hugging Face | Which engine and models to download, once, when you set music up. The music engine is built from open-source code by Ocadox and checked against a published checksum. |
| Android: scanning a PC's code | Google Play services on your phone | Google's code scanner reads the code on your phone; Ocadox gets only the code. Google may collect usage data under its own privacy policy. Phones without Play services use the camera inside the app instead. |
| Ocadox in other agents (MCP) | The agent you add Ocadox to (Claude Code, Cursor, Codex) | Ocadox makes things on your computer and tells that agent what it made; what the agent then sends to its own provider is under that provider's terms. |
| The browser tool | The pages the agent opens | Ordinary page requests from a private, temporary browser. Pages other than your own computer's need web access turned on. |
| Things you connect | Your Forge image server, MCP tool servers, your other computers | Only what that feature needs, only to addresses you set up. |
Your other computers
With Ocadox Pro, a laptop or the Ocadox Android app can use an always-on PC's bots and chats. They talk directly (over your network or Tailscale), encrypted, after you pair them with a one-time code. Nothing passes through any server of ours; there isn't one.
Buying Ocadox Pro
Checkout is handled by Gumroad, which processes your payment and email under Gumroad's privacy policy. Ocadox itself only stores your license key, on your computer.
Bug reports
Dictate anywhere puts what you said on the clipboard for a moment to type it into the other app, then puts your clipboard back. "Send feedback" copies details (Ocadox version, system, GPU, and a crash report if there is one) to your clipboard and opens a GitHub issue. Nothing is sent unless you paste it and submit it yourself, so you can read or trim it first.
This website
This website (not the app) is hosted on GitHub Pages and counts visits with Cloudflare Web Analytics. It sets no cookies and doesn't use your IP address or anything else to identify or follow you, and only counts things like which pages are visited, the country, the browser and the site that linked here. GitHub may keep server logs, such as IP addresses, under GitHub's privacy statement, and Cloudflare handles the visit counts under Cloudflare's privacy policy.
Who is responsible
Ocadox is made by Kenneth York, Georgia, USA. Because Ocadox keeps your data on your own computer, we don't hold your chats, files, voice or accounts, and can't see, sell or share them. We don't sell or share personal information, and we don't use it for advertising.
Your rights
Depending on where you live (for example under the GDPR in the EU and UK, or US state laws such as California's), you may have the right to know what personal information is held about you, and to have it corrected or deleted. Almost everything Ocadox keeps is in your own user folder, so you can see and delete it yourself: uninstall Ocadox and delete the .ocadox folder in your home folder. For your purchase details, contact Gumroad, or email us and we'll help. We'll answer within 30 days.
Children
Ocadox isn't aimed at children under 13 (or under 16 where the law requires), and we don't knowingly collect their information.
Changes
If this policy changes, we'll update the date at the top and mention significant changes in What's new.
Questions
Email kenneth.york@kennethyork.com, or open an issue at github.com/kennethyork/ocadox-releases.