Privacy Policy

Effective 18 October 2026. Siklab Core is a Philippines-based sole proprietorship. Siklab Core is not on sale yet: nothing can be bought or installed from this site today, and this page describes how it will work when it ships. Payments will be handled by Paddle as Merchant of Record. Questions: [email protected]

Effective date: 18 October 2026 · Contact: [email protected]

The short version

Siklab Core runs on your own machine. We do not operate a server that holds your projects, and we cannot read your code. But "runs locally" is not the same as "nothing leaves your machine," and this policy says plainly what does.

1. What Siklab Core sends off your machine

Your AI provider — always. Siklab Core has no AI of its own. It drives an AI command-line tool you already installed and pay for (for example Claude Code, Codex, Aider, OpenCode or Qwen; Google models through an API key). To build anything, that tool sends your brief, and the code being worked on, to that provider's servers. That transfer is between you and your provider under *their* privacy policy and terms — we are not a party to it and never see the content. If you do not want a brief or a file leaving your machine, do not put it in a build.

Problem reports — only if you send one. If you use the in-app "report a problem" button, the report is sent to our relay server (on Cloudflare), which files it as an issue in our private GitHub repository. A report contains what you write (title, steps, what you expected and what happened), the app version, your operating system, an installation identifier, a shortened form of your name, and a screenshot if you attach one. Your own AI provider may be used to classify it before it is sent, and our relay may use Anthropic's API to triage it. Do not paste secrets into a report. If you never file one, nothing is sent.

Update checks. The app asks our update server (on Cloudflare) whether a newer version exists, when it starts and every 30 minutes while it runs. The request carries your IP address, as any internet request does, and, if you have a licence, the licence itself, which includes your licence ID and, for a bought licence, the email address you bought with.

Licensing. If you buy a licence, our payment provider handles the transaction and we receive the information needed to issue and support your licence — see §3. Once a day, a licensed app sends your licence ID and a device identifier (derived from your machine's hardware ID) to our licence server, to renew a 14-day lease and to count your devices. No project data is sent.

No product analytics. We do not embed analytics, tracking pixels, or session recording in the application. The only automatic requests are the update and licence checks above.

2. What stays on your machine

Your projects, briefs, generated source, build artefacts, evidence files, chat history, agent configuration, and local database live in Siklab Core's folder on your machine. We have no copy and no access. Deleting that folder deletes them.

3. Information we do hold

status, and the device count your licence permits. Used to issue your licence, honour renewals and refunds, and provide support. Lawful basis: performance of a contract.

We do not sell personal information, and we do not use it for advertising.

4. Processors we rely on

ProcessorPurposeNotes
PaddleMerchant of Record — checkout, tax, refundsPaddle is the seller of record; it holds payment details. We never receive your full card number.
GitHubHosts releases, and the issue tracker a filed problem report becomes
CloudflareHosts this website, the update, licence and problem-report relay, and licence recordsSees request data such as IP addresses.
AnthropicMay triage problem reports you fileReceives the report text.
Your chosen AI providerRuns the buildGoverned by your agreement with them, not by us.

5. Retention

Licence and purchase records are kept while your licence is active and afterwards as long as tax and accounting law requires. Support mail and problem reports are kept while useful, then deleted.

6. Your rights

Depending on where you live — including under the EU/UK GDPR, the Philippine Data Privacy Act, and the CCPA — you may request access to, correction of, a copy of, or deletion of the personal information we hold, and may object to or restrict some processing. Write to [email protected]. We will respond within the period the applicable law requires. You may also complain to your data-protection authority (in the Philippines, the National Privacy Commission).

7. Children

Siklab Core is not directed to children under 16 and we do not knowingly collect their information.

8. Changes

Material changes will be posted here with a new effective date, and announced in-app or by email where the change affects you.