Privacy Policy

taiku is a terminal-sharing and remote-development tool. This is what we keep, and who else sees it:

• Your account: your email and name from the GitHub or Google account you sign in with, and the devices you connect (their name, hostname and operating system). We don’t store IP addresses in our database.
• Terminal sessions: terminal traffic is encrypted (AES-256-GCM, with a key derived using Argon2id), and our relay forwards it as ciphertext. A shared link’s key is in the part after #, which browsers don’t send to our server. When you’re signed in, your devices send their session links to your account so you can open them anywhere, and those links include the key. A session you move to a cloud workspace runs on our machines, and its key is sent to our server too.
• Readable by our servers (encrypted in transit over HTTPS): chat, file previews and uploads, file names, agent conversations, recordings, remote desktop, clipboard sync, editor language-server traffic and port previews pass through our servers, and some are stored there, so the people you share with can see them. An agent’s conversation also goes to the model provider it uses.
• Payments: handled by Stripe; we never see your card number.
• Voice dictation: by default your microphone audio streams to Soniox, the speech-to-text provider taiku uses, for live transcription. taiku closes that stream when you stop. Soniox's privacy policy says it does not store Customer Content processed by its Services unless storage is explicitly requested or configured; stored content follows the applicable retention and deletion period described by Soniox. See Soniox's privacy policy. Pick the on-device engine under Settings > Voice to keep that audio on your machine instead; taiku also switches to it whenever you’re offline. While you’re online, whichever engine transcribed it, the text then goes through our server to OpenAI to work out what should be typed, and in a terminal that includes the shell’s working directory, its file names and its last few lines of output. Spoken replies use OpenAI's gpt-4o-mini-tts. Offline, that cleanup happens on your device.
• Analytics and crash reports: we use PostHog for product analytics, with typed text and form inputs masked, and Sentry for crash reports, and strip session keys from what they receive. Turn analytics off with Share usage analytics under Settings > Sharing & privacy; it then stops in the app, on this site and in the docs, in that browser. The taiku CLI and the desktop and mobile apps send crash reports by default, without your IP address or account; the apps' reports also leave out your computer's name. Turn them off with Send crash reports in the app's Settings; on a computer, that stops the CLI's there too. Setting TAIKU_SENTRY=0 also turns the CLI's off.
• Services we use: Stripe, Soniox, OpenAI, the model providers your agents use (such as Anthropic, OpenAI and Google), Composio, Resend for email, Twilio for phone numbers, GitHub, Sentry, PostHog, Apple’s and Google’s push notification services, Cloudflare, AWS, Fly and E2B each receive the part of your data they need to do their job.

We don’t use ad networks or advertising trackers.

To delete your account and data, email support@taiku.live. Questions about privacy go to the same address.