DefyCode operates on a strict zero-knowledge, zero-storage model. We never store, index, or retain your repository files, code snippets, or intellectual property on our cloud servers. GitHub, GitLab, and Bitbucket remain your single sources of truth. Code is checked out ephemerally on your paired runner machine and never persisted in our database.
When you sign in using Apple or GitHub, Supabase Auth stores your user identifier, email, and public profile avatar strictly for authentication, runner device pairing, and subscription status verification.
To prevent autonomous agent pushes without human oversight, DefyCode requires physical Face ID or Touch ID confirmation. Audit records containing timestamps, branch names, and commit messages are stored in your private database schema for compliance and security.
DefyCode integrates with Google Gemini for agent reasoning. Prompts are submitted directly to the Google GenAI API under your configured preferences and are not used to train global AI models.
For questions regarding our privacy practices, contact us at security@defycode.dev.