Privacy Policy

Last updated: 15 November 2026

This policy covers the Codjiva desktop app (macOS, Windows and Linux) and this website. Codjiva is free, open-source software made by Aayush Chawla. Its source code is public at github.com/aayushch/codjiva, so every statement below can be checked against the code.

In short: Codjiva has no servers and no accounts, and it collects no analytics, telemetry or crash reports. To offer updates, it asks GitHub which release is the newest. What it makes is stored only on your computer, in the folder you opened. Your code is read by the coding agent you chose, or sent to the model provider whose API key you entered, under your own account with them.

1. What Codjiva stores, and where

• In the folder you open: a .codjiva folder that holds the visuals, films and pipelines made for that folder, each of their versions, and the prompts and logs of recent jobs. When you send feedback with a picture of the film, that picture is saved there too.
• In your system's settings folder for the app: your settings and the list of folders you opened recently.
• In your system's credential store (Keychain on macOS, Credential Manager on Windows, the Secret Service on Linux): any API key you enter. Keys are never written to a file.

None of this is sent to the maker of Codjiva or to any server operated for Codjiva. There is no such server.

2. The coding agent or provider you use

Codjiva does not contain an AI model. A job is done in one of two ways, and you choose which in Settings.

• A coding agent on your computer (Claude Code, Cursor Agent, Codex CLI, Gemini CLI, Antigravity or Pi). Codjiva starts the agent you installed, under your own account with its provider, in the folder you opened. The agent reads the file you picked and the companion files you ticked, and it can read other files in that folder. It sends what it reads to its provider to do its work.
• An API key (Anthropic, OpenAI, Google Gemini, or a server you name that speaks the OpenAI chat format). Codjiva then sends the request itself, to that provider's address. The request holds Codjiva's instructions, what you wrote, and the contents of the files in the opened folder that the model asks to read.

What the provider does with that data is governed by your agreement with them, not by this policy. To limit what reaches them, open only the folder you mean to work on, and tick only the companion files a film needs.

3. Network connections Codjiva makes

• Requests to a model provider, only when you have set up an API key and run a job with it, as described in section 2.
• The agents. Agent programs connect to their own providers. Codjiva does not see or change those connections.
• Updates. A few seconds after it starts, and every two hours while it is open, Codjiva downloads a small file from the project's releases on GitHub that names the newest version. If that version is newer and you accept the update, Codjiva downloads the installer from the same release, checks its signature and installs it. These requests carry nothing about you or your code, but GitHub receives your IP address, under its own privacy policy. You can switch the automatic check off in Settings, under Updates; Codjiva then asks only when you click the button there.

Codjiva makes no other connections. It sends no analytics, telemetry, usage statistics or crash reports, to its maker or to anyone else.

The visuals and films themselves are shown in a sandboxed frame that cannot reach the network, your files or the rest of the app. An exported film is a single file that loads nothing from the internet.

4. This website

This site is hosted on GitHub Pages and has no analytics, cookies or trackers. Its fonts are served from the site itself. The download list asks GitHub for the latest release, so GitHub receives your IP address when you visit, under its own privacy policy. The site remembers your light or dark theme choice in your browser's local storage.

5. Keeping and deleting your data

You control all of it. Delete an artifact in the app's library to remove it. To remove everything Codjiva made for a folder, delete the .codjiva folder inside it. Remove an API key in Settings to delete it from the credential store. Data an agent or provider received is kept under that provider's policy; contact them to delete it.

6. Children

Codjiva is a tool for software developers and is not directed at children under 13. It collects no personal information from anyone.

7. Changes to this policy

If Codjiva starts handling data differently, this page will be updated with the release that makes the change, and the date at the top will change. The history of this page is public in the repository.

8. Contact

For questions about privacy in Codjiva, open an issue at github.com/aayushch/codjiva/issues.