# Privacy and data

Your data is always yours: we never sell it or train on it, wherever aixplain runs. This article explains what aixplain Desktop keeps on your computer, what is sent to the model you choose, how zero data retention models work, how crash reports and feedback are handled and how to report a security issue. For our controls and certifications, see **[Security](https://www.aixplain.com/security)**.

> This applies to every plan. On the Enterprise plan, aixplain runs on your own servers, so your data stays there.

## Your data isn't sold or used for training

We never sell your data or train on it, on cloud, on your own servers or in aixplain Desktop.

## What stays on your computer

aixplain Desktop and Koder keep your projects, sessions and settings on your machine.

- **Sessions and local state** live under `~/.local/share/koder`.
- **Global configuration** lives in `~/.config/koder/koder.json` or `koder.jsonc`.
- **Source-control tokens** live in your system keychain.

Protect that profile as you would your project files.

## What is sent to the model

- **Hosted models** receive the inputs sent to them. The parts of your code or documents a task needs go only to the model you choose.
- **A local model** keeps inference on your machine. Connected tools may still send data to their own services.
- **Connected apps** such as email or calendar receive what Omni sends or changes, and each send, create, change or delete is shown to you and approved first.

> **Important:** Files such as `.env` always ask before they are read, in every access mode, including reads inside shell commands. The approval names the exact file.

## Use zero data retention models

Zero data retention (ZDR) models keep nothing you send. To use only these models:

- **In aixplain Desktop:** pick **ZDR only** in the model picker.
- **In the terminal:** run `koder models --zdr` to list them.
- **In the web app:** use the **Data retention (ZDR)** filter on the Models page.

## On cloud

- **Encryption:** your data is encrypted at rest and in transit.
- **Audited:** our cloud is SOC 2 Type I and II audited.
- **Your rights:** EU residents have GDPR rights over their data.

## On your own servers

With Enterprise, aixplain runs on-prem, in your VPC or air-gapped. Your data never leaves your servers, air-gapped installs never phone home and aixplain staff have no access to your environment. See **[Enterprise](https://www.aixplain.com/enterprise)**.

## Crash reports and feedback

- **Crash reports are off by default.** Turn them on in **Settings → General → Privacy**, or set `"crashReports": true` in your global config. A report says what kind of error happened and where in the app's code, never your messages, files, folder names or keys.
- **Nothing is sent** when sharing is off, when your data residency policy doesn't allow it, with `DO_NOT_TRACK=1` or `KODER_TELEMETRY=0`, in CI or when an admin policy can't be read.
- **Feedback is private.** The bug button includes logs and a chat only if you tick them. They are scrubbed on your device first: keys, tokens, your home path and personal details are removed, and you see and can edit the exact text before it is sent.

## Contact us

- **Report a security issue:** email **care@aixplain.com**. Remove credentials and private data from logs and screenshots first.
- **Privacy rights:** email **care@aixplain.com**.
- **Security questionnaires:** contact our security team from **[Security](https://www.aixplain.com/security)**.