What pitupitu keeps, and why

What pitupitu is for

  • pitupitu keeps track of your projects and your coding agents, so it can tell you what they did and help you with them.
  • It keeps only what it needs for that.

From each machine you link

  • Its name and its home folder.
  • Which coding agents are installed on it, and their versions.
  • The version of herdr on it.
  • The project folders you worked in recently.

From your agents’ sessions on that machine

  • This is on unless you switch it off.
  • It covers sessions from the last 7 days.
  • What you asked your agents: the first 1000 characters of each message.
  • The gist of their replies: the first 600 characters of each.
  • Which files they touched.
  • The commands they ran: the first 120 characters of each.
  • Each session’s title, folder, git repository and branch.
  • The titles of your commits from the last 7 days.

Never

  • What is inside your files.
  • What the commands printed.
  • The changes to your code (diffs).
  • The agent’s private reasoning.
  • Your API keys or passwords. Anything that looks like a key is blanked on your machine, before it is sent.
  • Your voice. Audio is never stored.

Your conversation with pitupitu

  • What you and pitupitu said to each other is stored until you clear it.

Where, and for how long

  • On Amazon’s servers (AWS) in the United States (us-east-1).
  • Encrypted when stored.
  • Records from your agents’ sessions: 30 days.
  • Summaries and project notes: until you forget them.
  • Our system logs hold only who, when and how long. Never what was said or done.

Who else sees it

  • Anthropic: to write the summaries and pitupitu’s answers.
  • ElevenLabs: to turn your voice into text, and pitupitu’s answers into speech.
  • Stripe: to take payments.
  • Clerk: to sign you in.
  • If you turn on notifications: your own words (a reminder’s text, a session’s name) show on your lock screen, and Apple’s, Google’s or Mozilla’s push service carries the message to your phone, encrypted so they cannot read it.
  • Each one only for that job.

Switch it off, or delete it

  • On the app page, open What pitupitu knows. Each machine has its own switch.
  • Forget everything, in the same place, deletes what pitupitu knows about your work.
  • On a machine, run pitupitu box history off.
  • Deleting your account removes everything. Only what tax law makes Stripe keep stays with Stripe.

Who is responsible

  • Klarluft B.V., in the Netherlands.
  • European data protection law (GDPR) applies.
  • To see, change or delete your data, write to privacy@pitupitu.chat.

← pitupitu.chat