English version ↓

隐私政策

生效日期：2026 年 9 月 5 日

一句话

Vinez 是装在你自己机器上运行的软件。我们不运营任何服务器，也不接收你的任何数据。 下面这份政策的绝大部分内容，是在如实说明「软件会连到哪里去」，而不是说明「我们拿了你什么」。

我们收集什么

不收集。具体地说：

• 没有由我们托管的账号系统——管理员账号建在你自己安装的服务端里，密码哈希存在你的机器上
• 没有遥测、埋点或使用分析
• 没有崩溃上报
• 任务内容、代码、聊天记录、终端输出、git 历史、产物文件，全部存放在你安装 Vinez 的那台机器的 ~/.vinez/ 目录与你自己的代码仓库里

软件会连到哪里

以下是全部对外连接，没有别的：

1. 你自己配置的聊天平台（企业微信 / 飞书 / Slack）——凭据由你提供并保存在你的机器上， 连接是你的机器与该平台之间的直连。没配置就不会建立任何连接。
2. AI 编码工具调用的模型接口——Vinez 编排的是你机器上已安装的 agent 命令行工具 （如 Claude Code、Codex）。这些工具会把相关代码与对话内容发送给它们各自的模型提供方， 遵循你在那些工具里的账号与设置。这部分不经过 Vinez，也不由我们决定， 但我们认为你应该清楚它的存在。
3. 版本检查与下载——只在你主动执行安装脚本或 vinezd upgrade 时发生。 我们不做后台更新检查：服务端不会在你没要求的时候连接我们的分发点。
4. 跨网直连中继（可选，默认开启）——让手机 App 在任何网络环境下连回你自己的服务端。 中继只转发加密流量，无法解密其中的内容；且只在你已配对过设备、或刚请求配对时才建立。 不需要它可以在配置里设 builtin_cross_network: off 完全关闭， 关闭后服务端不会与任何外部中继建立连接。
5. 跳板机（可选，默认不启用）——一台由你指定的机器，用于让同事在跨网络时打开交付链接。

除以上之外，服务端不会主动连接任何 Vinez 项目方的服务器。

手机 App 与桌面客户端

• 只连接你自己的服务端，不与我们的任何服务通信
• 登录凭据保存在设备本地（iOS 钥匙串 / Android 应用私有目录），不上传
• 不包含任何第三方分析或广告 SDK
• 不读取通讯录、位置、照片或其他个人数据
• 相机权限仅用于扫描配对二维码，图像不保存、不上传

授权与设备标识

按并发容量售卖的授权包在本地离线校验，校验过程不联网。 校验会读取机器的硬件标识来生成设备指纹，用于确认授权与机器的对应关系—— 该指纹只在内存中计算，绝不写入磁盘、绝不上传。

数据保留与删除

全部数据都在你的机器上，保留多久由你决定。删除 ~/.vinez/ 目录即删除全部数据； 卸载软件不会自动删除它，以免误删你的任务历史。

政策变更

本页面若有实质性修改，会更新页首的生效日期。由于我们不持有你的联系方式，无法逐一通知—— 这既是这份政策的局限，也是它成立的原因。

联系我们

请在 GitHub Issues 提出。

↑ 中文版

Privacy Policy

Effective: September 5, 2026

In one sentence

Vinez is software that runs on your own machine. We operate no servers and receive none of your data. Most of this policy is an honest account of where the software connects to, not of what we take from you.

What we collect

Nothing. Specifically:

• No account system hosted by us — the admin account lives in the server you installed, and its password hash stays on your machine
• No telemetry, tracking, or usage analytics
• No crash reporting
• Task content, code, chat messages, terminal output, git history and produced artifacts all stay in the ~/.vinez/ directory on the machine you installed Vinez on, and in your own repositories

Where the software connects

This is the complete list:

1. The chat platform you configured (WeCom / Feishu / Slack) — credentials are supplied by you and stored on your machine; the connection is directly between your machine and that platform. Configure none and no such connection is ever made.
2. Model APIs called by AI coding tools — Vinez orchestrates agent CLI tools already installed on your machine (e.g. Claude Code, Codex). Those tools send relevant code and conversation to their respective model providers under your own accounts and settings there. This does not pass through Vinez and is not our decision — but you should know it happens.
3. Version checks and downloads — only when you run the install script or vinezd upgrade yourself. We do no background update checks: the server never contacts our distribution point unless you asked it to.
4. Cross-network relay (optional, on by default) — lets the mobile app reach your own server from any network. The relay only forwards encrypted traffic and cannot decrypt its contents; it is established only once you have paired a device or just requested pairing. Set builtin_cross_network: off to disable it entirely, after which the server connects to no external relay at all.
5. A jump host (optional, off by default) — a machine you specify, used so that teammates on another network can open delivery links.

Beyond the above, the server never initiates a connection to any Vinez servers.

Mobile and desktop clients

• They connect only to your own server, never to any service of ours
• Credentials are stored locally on the device (iOS Keychain / Android app-private storage) and never uploaded
• No third-party analytics or advertising SDKs
• No access to contacts, location, photos, or other personal data
• Camera access is used only to scan a pairing QR code; images are neither stored nor uploaded

Licensing and device identity

Capacity license packages are verified locally and offline; verification makes no network requests. It reads hardware identifiers to derive a device fingerprint that ties a license to a machine — that fingerprint is computed in memory only, never written to disk and never uploaded.

Retention and deletion

All data is on your machine and retained for as long as you choose. Deleting ~/.vinez/ deletes everything; uninstalling does not remove it, so your task history is not lost by accident.

Changes

Material changes will be reflected in the effective date above. Because we hold no contact details for you, we cannot notify you individually — which is both this policy's limitation and the reason it can be this short.

Contact

Please open an issue on GitHub.