Legal
Data use
Exactly which data CodeMorph touches, where it goes, and who can see it, in one place.
Last updated 2026年10月12日
Beta draft, pending legal review. This document describes how CodeMorph works today in plain language. It will be reviewed by counsel before general availability.This page is available in English only. The English version is the one that applies.
This page summarizes how data moves when you use CodeMorph. The privacy policy and security page have the details.
The desktop app
| Data | Where it goes | Who can see it |
|---|---|---|
| Your source code | Read on your machine to scan, plan, review and verify | You |
| Dependency graph | A local SQLite database on your machine | You |
| Typecheck, test and build output | Runs and stays on your machine | You |
| Conversion and Ask requests | Sent directly to the model provider you configure | You and your provider, under your agreement with them |
| Your API key | Encrypted in the editor's secret storage on your machine | You |
| Usage analytics and crash reports | Not collected. Telemetry is disabled | Nobody |
| Extension browsing and installs | Sent to Open VSX when you use the Extensions view | Open VSX |
CodeMorph has no server that receives your code. We don't train models on your code, and we can't, because we never have it.
Model providers
When you use conversion or Ask, the relevant code and context are sent to your provider, such as Anthropic, using your key. How long they keep it and whether it's used for training are set by your agreement with them. Check your provider's data terms, and use their business or zero-retention options if you need them.
This website
| Data | Why | Kept by |
|---|---|---|
| Email from waitlist or newsletter forms | To send what you signed up for | Resend, on our behalf |
| Name, email and message from contact forms | To reply to you, with an automatic confirmation that we received it | Resend and our inbox |
| Name, email and team size from Teams or Enterprise inquiries | To reply, and to send occasional updates for teams until you unsubscribe | Resend, on our behalf, and our inbox |
| Aggregated page views | To see which pages are useful | Vercel Web Analytics, without cookies |
| Standard request logs | To serve and protect the site | Vercel |
We don't sell data, and every email we send includes a way to unsubscribe.
Questions or deletion requests: support@codemorph.codes.