Privacy Policy

The short version

Suvadu stores everything locally on your machine. No data is sent to any server. There is no account system, no telemetry, and no cloud sync. Your shell history stays on your computer.

What Suvadu stores

Suvadu records the following data in a local SQLite database:

• Shell commands you execute
• Working directory at time of execution
• Command duration and exit code
• Session ID and executor (shell, AI agent, IDE)
• Timestamps
• User-created bookmarks and notes
• AI agent prompts (when captured via hooks)

Where data is stored

• macOS: ~/Library/Application Support/suvadu/
• Linux: ~/.local/share/suvadu/

The database file is protected with 0600 permissions (owner read/write only).

Secrets protection

Suvadu automatically detects and redacts sensitive values (API keys, tokens, passwords) before writing commands to the database. This happens at write time — secrets never touch disk in plaintext.

No network access

The Suvadu CLI does not make any network requests during normal operation. The only exception is the suv update command, which contacts downloads.appachi.tech to check for new versions. This is opt-in and only runs when you explicitly invoke it.

MCP server

The MCP (Model Context Protocol) server runs locally and communicates over stdio with AI agents on the same machine. It does not open any network ports and does not transmit data externally.

This website

This website (suvadu.sh) is a static site hosted on Cloudflare Pages. It makes one API call to GitHub to fetch the repository star count. No analytics, cookies, or tracking scripts are used.

Deleting your data

To remove all Suvadu data, delete the data directory listed above. Uninstalling the binary does not remove your history database.

Contact

Questions? Open an issue on GitHub.