Numar Privacy Policy
Last updated: 2026-06-17 · Effective: 2026-06-17
Numar is an AI code editor built on a bring-your-own-key (BYOK), zero-cloud architecture. This policy explains, in plain terms, the very limited data Numar handles. The short version: your code, files, prompts, and AI conversations never pass through a Numar server.
1. Who we are
Numar ("we", "us") is operated by the individual developer behind Numar (sole proprietor; legal entity name to be updated here if a registered company is formed later). We do not maintain a public postal address; contact us at evenzhi@gmail.com (privacy and general inquiries).
2. The core principle: we don't see your work
When you use Numar's AI features, the editor talks to your chosen AI provider (OpenAI, Anthropic, your self-hosted model, etc.) using your own API key. AI requests are sent from your computer to that provider through a local Numar component on your machine (127.0.0.1).
We do not receive, store, log, or transmit your source code, file contents, prompts, or AI conversations. There is no Numar cloud that processes your work. Your AI provider's handling of your requests is governed by their privacy policy, not ours.
3. What we actually collect
The only data that reaches a Numar-operated server (updates.numar.ai) is what is needed to deliver software updates and signed remote configuration:
| Data | Why | Personal? |
|---|---|---|
| Platform & version (OS/arch, app version, build commit) | Serve the right update | No |
| Update channel/quality | Serve the right update | No |
| A random rollout id ("cohort") | Stage rollouts; measure update success/crash rates | No — random, not tied to you or your hardware |
| Update outcome (success/crash) | Detect bad releases | No |
| Your IP address | Inherent to any network request | Standard; not used to profile you |
Remote configuration is fetched with a GET request that sends no request body and no user content — only standard HTTP metadata (including IP address).
The "cohort" id is a random value (or an anonymous hash). It is not derived from your identity, account, or hardware.
We do not operate an analytics or behavioral-telemetry backend. Editor usage events are not sent to us.
4. License & payment data (Pro)
If you purchase a Numar Pro subscription, payment is processed by Polar (polar.sh), our merchant of record. Polar collects your email, name, and payment details under Polar's own privacy policy. To show you your license status, the Numar client exchanges your license key and a randomly generated device id with Polar, and receives your email/name back to display. We do not collect your payment-card details.
For license and payment records, Polar acts as an independent controller (or processor, as applicable) under Polar's terms. We use the information Polar returns only to display your license status in the app.
5. Data stored only on your device
Your chat history, plans, wiki, memory, settings, and API keys are stored locally on your machine (API keys in your operating system's secure credential store). These never leave your device except — for API keys — when sent to the AI provider you configured.
6. What we do NOT do
- We do not sell or rent your data.
- We do not use your code or conversations to train models.
- We do not run server-side analytics on your editor usage.
- We do not track you across the web.
7. Your rights
Depending on your jurisdiction (GDPR, CCPA, PIPL, etc.), you may have rights to access, correct, delete, or port your personal data, and to object to or restrict processing. Because we hold almost no personal data, most requests concern license/payment data held by Polar; we will direct or assist as appropriate. Contact evenzhi@gmail.com.
8. Data retention
Update-server logs containing IP addresses and cohort ids are retained for 90 days for operational/security purposes, then deleted or aggregated. License-related records we receive from Polar are retained for the life of your subscription plus 7 years where required for accounting, tax, or dispute resolution.
9. International transfers
Numar's update server is hosted in the United States. Polar processes payments in the United States and the European Union (and other regions Polar supports).
If you are in the European Economic Area, UK, or Switzerland and we transfer personal data to countries without an adequacy decision, we rely on appropriate safeguards where required by law (such as the EU Standard Contractual Clauses or equivalent mechanisms offered by our processors, including Polar).
10. Children
Numar is not directed to children under 16.
11. Changes
We will post changes here and update the "Last updated" date. Material changes will be announced in-app or by email where appropriate.