Privacy policy

This policy explains what personal data Akagi Universe, a sole proprietorship owned by Hyeonu Kim ("we") handles for the Tiller app, tillerstudio.app and Tiller Sync. Questions go to akagiuniverse@gmail.com.

The app

The app keeps your conversations, projects and settings in folders on your computer. It does not send us analytics, usage tracking or crash reports.

When you use an AI engine, the app sends your prompts, files and conversation content to the provider you choose (for example Anthropic for Claude Code, OpenAI for Codex), under your account with them. Their privacy policies apply to that data. Your sign-in to those providers is handled by their official engines and stored on your computer; we never receive it.

Pages you open in the app's built-in browser are loaded directly from those sites.

This website

The site sets no cookies and uses no analytics. It is served by Cloudflare, which processes technical request data such as IP addresses to deliver and protect the site.

Tiller Sync

If you use Sync, we store:

• Account: your numeric GitHub user ID, used to sign you in. The GitHub token is used once and not stored; we do not request access to your repositories, and we do not store your name or email from GitHub.
• Your encrypted vaults: file contents and file records encrypted on your device with AES-256-GCM, and your vault key wrapped by a key derived from your password. We cannot read them.
• Operational data: vault names you choose, device names and kinds, sizes, versions, which encrypted records belong to the same conversation (through an opaque identifier), timestamps and daily request counts. We need this to sync, enforce limits and stop abuse.
• Subscription status: the plan, its status and expiry, received from Paddle.

Sync runs on Cloudflare (Workers, R2 storage and D1 database).

Payments

Paddle.com, our Merchant of Record, collects and processes your payment and billing details (name, email, address, payment method, tax information) under Paddle's privacy policy. We receive order and subscription records from Paddle, not your card details.

Why we use it

We use this data to provide the service you asked for (contract), to keep it secure and prevent abuse (legitimate interests), and to meet tax and accounting duties (legal obligation). We do not sell personal data or use it for advertising.

How long we keep it

• Encrypted vaults: until you delete them. After a subscription ends they stay downloadable for 30 days, and we may delete them after that.
• Account and device records: until you ask us to delete your account.
• Daily request counts and short-lived sign-in records: no longer than needed for limits and security.
• Order records: as long as tax law requires.

Transfers

We are based in the Republic of Korea. Cloudflare and Paddle may process data in other countries, including the United States and the European Union, under their own safeguards.

Your rights

You can ask to access, correct, export or delete your data, or object to how we use it, by emailing akagiuniverse@gmail.com. You can delete cloud vaults yourself from the app at any time. You may also complain to your data protection authority.

Children

Tiller is not meant for children under 14, and we do not knowingly collect their data.

Changes

We will post updates here with a new date, and tell Sync subscribers about material changes.