Privacy Policy

Account information

Agent features are powered by an optional Hypery account. When you sign in, Dunu receives your Hypery user ID, email address, and display name so it can show who is signed in and authorize agent requests. Sign-in uses OAuth; Dunu never sees your password. Hypery's own handling of your account is governed by Hypery's privacy policy.

Authentication tokens

OAuth access and refresh tokens are stored locally on your device and are sent only to Hypery to authenticate requests. Signing out removes them.

Your code and prompts

Files you open and edit stay on the machine running Dunu or your own dunu-server. When you use agent features, the prompts you write and the code context you attach are sent to Hypery's AI gateway to generate responses. Nothing is sent anywhere unless you invoke the agent.

Server addresses

The iOS app asks for the address of a dunu-server you run yourself. That address is stored on your device only, so the app can reconnect. Connections to servers on your local network may use plain HTTP; use HTTPS for servers exposed beyond your network.

No analytics SDKs, no crash reporters, no advertising identifiers, no fingerprinting, no third-party trackers — in the desktop app, the iOS app, or this site. We do not sell, rent, or share your data. The iOS app requests no device permissions: no camera, microphone, location, contacts, or photos.

Data stored on your devices (tokens, server addresses, editor state) is yours to delete — sign out or remove the app. For data associated with your Hypery account, contact Hypery or manage it from your account settings at hypery.ai.

Dunu is a developer tool and is not directed at children under 13, and we do not knowingly collect information from them.

We will post any changes to this policy on this page and update the date above. Questions? Open an issue at dunudev/dunu or email support@dunu.dev.