# Privacy Policy

**Last updated: February 2026**

## 1. Introduction

Diana ("the Software") is an open-source interactive .NET development agent that runs locally on your machine. This Privacy Policy explains what data is collected, how it is used, and your rights regarding that data.

## 2. Data Collection

### 2.1 Data Stored Locally
- **Configuration files**: LLM provider settings and API keys are stored in `~/.netbrain/config.json` on your local machine.
- **Onboarding state**: Your language preference and acceptance timestamps are stored in `~/.netbrain/onboarding.json`.
- **Vector database**: Code embeddings for semantic search are stored locally in `.netbrain/vectors.db`.
- **Knowledge base**: Any files you place in `.netbrain/knowledge/` remain on your local machine.

### 2.2 Data Sent to Third Parties
- **LLM Providers**: When you configure an AI provider (OpenAI, Claude, Kimi), your code queries and context are sent to that provider's API. Each provider has its own privacy policy.
- **No telemetry**: Diana does not collect telemetry, analytics, or usage data.

## 3. Data Storage and Security

All data is stored locally on your machine. API keys are stored in plain text in configuration files. You are responsible for securing access to your machine and configuration files.

## 4. Your Rights

- You can delete all stored data by removing the `~/.netbrain/` directory.
- You can revoke LLM access by removing your API key from `config.json`.
- You can reset the onboarding by deleting `~/.netbrain/onboarding.json`.

## 5. Changes to This Policy

This policy may be updated with new versions of Diana. Significant changes will be communicated through release notes.

## 6. Contact

For privacy-related questions, please open an issue on the project's GitHub repository.
