Privacy policy — local by default.

1 — Introduction

This policy covers the Unmild Agent desktop app for Windows and the static marketing site at this domain. The app is a paid Microsoft Store app (ID 9P3RXL6LD5F1) distributed as MSIX with auto-updates. It has no account system. The site is hosted on GitHub Pages and does not run server code.

References to UNMILD mean the publisher of the app and site. When we say “you”, we mean the person who installed the app or visited the site. If you do not agree with this policy, do not use the app or site.

2 — What data Unmild accesses

Unmild itself accesses nothing from your device. We do not operate a back end that receives your files, prompts or keys. The app reads only what you give it — the working folder you pick, files you attach, and settings you enter.

Concretely, local processing includes:

• Listing and reading files under the project folder you chose (sandboxed — .. and absolute paths outside the folder are blocked).
• Writing or deleting files only when the agent executes write_file / delete_file inside that folder, subject to your permission mode.
• Running PowerShell via run_command in the project directory, and opening URLs + screenshots via open_url / screenshot on your machine.
• Storing per-project memory via remember (Smriti) and chat history locally — see §6.

3 — How data flows

Flow is deliberately narrow. Until you configure a provider and press Test or Send, the app makes no network requests.

That is the full path: local sandbox → your configured base URL → back. No UNMILD proxy sits in the middle, and we do not log your prompts.

4 — Third-party AI providers

When you send a message, file excerpts, attached images and Smriti notes you chose are transmitted to the provider for that configuration — for example OpenAI, Anthropic, OpenRouter, AgentRouter, or any OpenAI-compatible gateway you entered. That provider becomes the data controller for that request.

• OpenAI-compatible: supported_endpoint_types includes chat/completions; auth via Bearer token.
• Anthropic: /messages with x-api-key. The app sets the required version header automatically.
• Each configuration is separate — switching config switches provider. You are responsible for reviewing that provider’s terms and privacy policy.

5 — API keys and secrets

API keys are stored in plaintext on your device alongside your project metadata — this is intentional for a local-only app with no cloud vault.

• Keys never leave except inside authenticated requests to the base URL you entered for that key. They are never sent to UNMILD.
• Anyone with access to your Windows profile or a disk image can read them. Use Windows device encryption, screen lock, and per-provider key scoping.
• Do not paste keys into screenshots, issues or chat exports you share. Rotate a key with the provider if you suspect exposure.
• UNMILD has no ability to recover or reset your provider keys.

6 — Storage and retention — Smriti

Everything persists locally under %LOCALAPPDATA%\UnmildAgent\:

Retention is yours to control. Deleting a project in the app removes its JSON entry and associated history/notes on disk. Uninstalling the app does not necessarily purge %LOCALAPPDATA%\UnmildAgent\ — remove that folder manually for a full wipe. No cloud backup is created by UNMILD.

7 — Sharing and disclosure

UNMILD does not sell, rent, or share your data. We disclose only if required by law, to enforce our terms, or to protect rights and safety — and even then we have little to disclose because data lives on your device or with your chosen provider.

The static site has no cookies and no analytics. No advertising trackers are set by UNMILD. If you click through to unmild.store or apps.microsoft.com, those sites apply their own policies.

8 — Security measures

• Transport: API calls use ureq + rustls (TLS via rustls, no custom CA).
• Sandbox: Filesystem tools are scoped to the working folder; path traversal is rejected. Terminal runs as your user, in that folder.
• Bounds: Image attachments capped at MAX_IMAGE 5 MiB; outbound retries capped at 12; no background sync.
• Limitations: Keys are plaintext on disk and memory notes are not encrypted at rest beyond OS protections. Treat the device as the security boundary.

9 — Your privacy rights

You have the usual rights depending on where you live. Because UNMILD holds no hosted copy of your content, most requests are fulfilled by you acting locally — delete projects, clear %LOCALAPPDATA%\UnmildAgent\, or rotate provider keys.

• GDPR (EEA/UK): Legal bases are contract (to provide the app you paid for), legitimate interest (security), and consent (when you choose to contact us). Access/erasure/portability can be exercised by deleting local data; contact us for questions. We aim to respond within 30 days.
• CCPA (California): No sale or sharing of personal information by UNMILD. Request access/deletion via the contact below; we will confirm locally-held scope.
• Other regions: Similar access, correction and deletion rights apply under local law.

10 — International transfers

The app and site make no UNMILD-controlled cross-border transfers. When you configure a provider, your prompts, file excerpts and images are transferred to that provider’s infrastructure — which may be outside your country. Check the provider’s data residency statement. Site visitors fetch Google Fonts from fonts.googleapis.com, which may involve a cross-border request to Google.

11 — Children and sensitive information

The app and site are not directed to children under 13 (or 16 where applicable) and are not intended to process children’s data. Do not use the agent to handle sensitive categories (health, financial, biometric, etc.) unless you have a lawful basis and explicit permission — and understand that such content will be sent to your configured provider if included in context.

12 — Policy updates and contact

We may update this policy when the app or law changes. Material changes will be reflected by the Effective date above and, where appropriate, noted on unmild.store and the Store listing. Continued use after the effective date means acceptance.

Owner: UNMILD. For privacy questions, deletion requests or concerns, use subject [Privacy] via the contact on unmild.store or the support link on the Microsoft Store page for Unmild Agent.