Local by default.
Private by design.

Local product data. Wanju has no product telemetry or account server. Your projects, tasks, settings, audit log, and encrypted API keys live on your machine.

Optional cellular approvals. If you explicitly create a mobile approval session, Wanju sends encrypted approval payloads through a temporary relay so your phone can reach the running desktop. Encryption and decryption happen on your devices; the relay does not receive the encryption key. It stores ciphertext, session expiry, and one-way hashes of separate device credentials until you end the session or it expires, for no longer than 24 hours. Hosting infrastructure may process ordinary security logs such as IP address and request timing. Never share the private session link: possession of it grants approval access until revocation or expiry.

Third parties you choose to use. When you connect GitHub, the app talks to GitHub's API directly from your machine under GitHub's privacy policy. When you use AI features, the project context you can inspect is sent directly to the provider you configured (OpenAI, Anthropic, or Google) using your own API key, under that provider's policy. Credential-like files are always excluded from that context.

This website. The site is static and sets no cookies. If our hosting provider records standard access logs (IP address, user agent), we don't enrich, sell, or analyze them. We count page views and broad interactions such as scans started, share buttons used, and download clicks in aggregate using cookie-less Plausible analytics. Campaign labels such as utm_source and the referring site are kept only for this browser tab and attached to aggregate events; there is no visitor identifier or fingerprint, and Do Not Track is respected. The graveyard scan runs entirely in your browser against GitHub's API — usernames, tokens, repository names, and scan results never reach us.

Changes. Paid features run on your machine exactly like the free ones and send us nothing extra. If a hosted execution tier is ever offered, it will have its own explicit policy — this one will never silently expand to cover it.

Questions: contact us through the address on the About page. Last updated July 2026.