|
| 1 | +# GitMem Privacy Policy |
| 2 | + |
| 3 | +**Last Updated:** February 20, 2026 |
| 4 | +**Version:** 1.0 |
| 5 | + |
| 6 | +## Our Commitment |
| 7 | + |
| 8 | +Your institutional memory is yours. GitMem telemetry is **opt-in, anonymous, and transparent**. We collect only what helps improve the product, and you can inspect everything before it's sent. |
| 9 | + |
| 10 | +## What We Collect (When Enabled) |
| 11 | + |
| 12 | +When you enable telemetry, we collect: |
| 13 | + |
| 14 | +```json |
| 15 | +{ |
| 16 | + "event": "tool_called", |
| 17 | + "tool": "recall", |
| 18 | + "success": true, |
| 19 | + "duration_ms": 234, |
| 20 | + "result_count": 3, |
| 21 | + "version": "1.2.0", |
| 22 | + "platform": "darwin", |
| 23 | + "mcp_host": "claude-desktop", |
| 24 | + "tier": "free", |
| 25 | + "timestamp": "2026-02-20T12:34:56Z", |
| 26 | + "session_id": "7a4f2c91" // Random per-session, not persistent |
| 27 | +} |
| 28 | +``` |
| 29 | + |
| 30 | +**Purpose:** |
| 31 | +- Understand which tools are most useful |
| 32 | +- Identify error patterns to prioritize fixes |
| 33 | +- Measure performance across platforms |
| 34 | +- Guide feature development |
| 35 | + |
| 36 | +## What We Never Collect |
| 37 | + |
| 38 | +❌ **Your content:** |
| 39 | +- Queries or search terms |
| 40 | +- Scar text or descriptions |
| 41 | +- Learning/decision content |
| 42 | +- Session reflections |
| 43 | +- Code or file paths |
| 44 | + |
| 45 | +❌ **Personal identifiers:** |
| 46 | +- Email addresses |
| 47 | +- IP addresses |
| 48 | +- Persistent user IDs |
| 49 | +- Project names |
| 50 | +- GitHub usernames |
| 51 | + |
| 52 | +❌ **Environment data:** |
| 53 | +- API keys or credentials |
| 54 | +- Environment variables |
| 55 | +- Directory paths |
| 56 | +- Database connection strings |
| 57 | + |
| 58 | +## How It Works |
| 59 | + |
| 60 | +### 1. Default State: Disabled |
| 61 | + |
| 62 | +Telemetry is **off by default**. No data is sent unless you explicitly opt in. |
| 63 | + |
| 64 | +### 2. Transparent Collection |
| 65 | + |
| 66 | +All events are logged locally at `.gitmem/telemetry.log` BEFORE being sent: |
| 67 | + |
| 68 | +```bash |
| 69 | +$ cat .gitmem/telemetry.log |
| 70 | +{"event":"tool_called","tool":"recall","success":true,"duration_ms":234,...} |
| 71 | +{"event":"tool_called","tool":"session_close","success":true,"duration_ms":567,...} |
| 72 | +``` |
| 73 | + |
| 74 | +You can review every event before it's transmitted. |
| 75 | + |
| 76 | +### 3. Batch Transmission |
| 77 | + |
| 78 | +Events are sent in batches every 24 hours or when you run `gitmem telemetry flush`. This gives you time to review before transmission. |
| 79 | + |
| 80 | +### 4. Anonymous Session IDs |
| 81 | + |
| 82 | +Each session gets a random ID (like `7a4f2c91`) that's **not stored** or linked across sessions. We can't correlate activity to individual users. |
| 83 | + |
| 84 | +## Controlling Telemetry |
| 85 | + |
| 86 | +### Enable Telemetry |
| 87 | + |
| 88 | +```bash |
| 89 | +$ gitmem telemetry enable |
| 90 | +✓ Telemetry enabled |
| 91 | + Data logged to: .gitmem/telemetry.log |
| 92 | + Review anytime: gitmem telemetry show |
| 93 | + Disable anytime: gitmem telemetry disable |
| 94 | +``` |
| 95 | + |
| 96 | +### Check Status |
| 97 | + |
| 98 | +```bash |
| 99 | +$ gitmem telemetry status |
| 100 | +Telemetry: Enabled |
| 101 | +Session ID: 7a4f2c91 (random, not persistent) |
| 102 | +Events logged: 47 (last 24 hours) |
| 103 | +Last sent: 2 hours ago |
| 104 | +Next batch: in 22 hours |
| 105 | +``` |
| 106 | + |
| 107 | +### View Pending Events |
| 108 | + |
| 109 | +```bash |
| 110 | +$ gitmem telemetry show |
| 111 | +Showing last 100 events that will be sent: |
| 112 | + |
| 113 | +[2026-02-20 12:34:56] tool_called: recall (success, 234ms, 3 results) |
| 114 | +[2026-02-20 12:35:12] tool_called: confirm_scars (success, 45ms) |
| 115 | +[2026-02-20 12:40:33] tool_called: create_learning (success, 123ms) |
| 116 | +... |
| 117 | +``` |
| 118 | + |
| 119 | +### Disable Telemetry |
| 120 | + |
| 121 | +```bash |
| 122 | +$ gitmem telemetry disable |
| 123 | +✓ Telemetry disabled |
| 124 | + Pending events: cleared (not sent) |
| 125 | + Local logs: preserved at .gitmem/telemetry.log |
| 126 | +``` |
| 127 | + |
| 128 | +### Clear Local Logs |
| 129 | + |
| 130 | +```bash |
| 131 | +$ gitmem telemetry clear |
| 132 | +✓ Cleared all local telemetry logs |
| 133 | + (Remote data cannot be deleted — it's already anonymous) |
| 134 | +``` |
| 135 | +
|
| 136 | +## Data Storage & Retention |
| 137 | +
|
| 138 | +- **Local logs:** Stored in `.gitmem/telemetry.log`, rotated after 30 days |
| 139 | +- **Remote storage:** Plausible Analytics (privacy-first, no cookies, GDPR compliant) |
| 140 | +- **Retention:** 90 days aggregate statistics, no raw events stored |
| 141 | +- **Location:** EU servers (GDPR compliant) |
| 142 | +
|
| 143 | +## Your Rights |
| 144 | +
|
| 145 | +✓ **Right to disable:** One command, instant effect |
| 146 | +✓ **Right to inspect:** View all data before it's sent |
| 147 | +✓ **Right to clarity:** This policy, in plain English |
| 148 | +✓ **Right to privacy:** No tracking, no profiling, no ads |
| 149 | + |
| 150 | +## Public Dashboard |
| 151 | + |
| 152 | +We publish aggregate telemetry data publicly: |
| 153 | + |
| 154 | +**https://gitmem.ai/stats** |
| 155 | + |
| 156 | +- Most-used tools |
| 157 | +- Error rates by version |
| 158 | +- Platform distribution |
| 159 | +- Performance percentiles |
| 160 | + |
| 161 | +This transparency helps the community understand product health and priorities. |
| 162 | + |
| 163 | +## Changes to This Policy |
| 164 | + |
| 165 | +If we change what we collect, we'll: |
| 166 | +1. Update this document with a new version number |
| 167 | +2. Require re-consent before collecting new data types |
| 168 | +3. Announce changes in release notes |
| 169 | +
|
| 170 | +## Contact |
| 171 | +
|
| 172 | +Questions about privacy or telemetry? |
| 173 | +- **Email:** privacy@gitmem.ai |
| 174 | +- **GitHub:** https://github.com/gitmem-dev/gitmem/issues |
| 175 | +
|
| 176 | +--- |
| 177 | +
|
| 178 | +**Summary:** |
| 179 | +- **Opt-in only** — disabled by default |
| 180 | +- **Zero PII** — no way to identify users |
| 181 | +- **Local-first** — inspect before sending |
| 182 | +- **Easy control** — enable/disable in one command |
| 183 | +- **Transparent** — public dashboard with aggregate stats |
0 commit comments