With CodeHero, the platform, your code, your databases, the project history and its knowledge stay on your own computer or server. What leaves is the part of the work an AI model needs for the current job — sent to the AI company you chose, or to nobody if you run local models. The values of the secrets you store never leave.
What stays on your machine
The CodeHero platform itself; the code of every application it builds; the applications’ databases and files; the specification, the plan, every ticket, decision and change with its reason; the project knowledge base and its search index; backups and snapshots. They live in your installation, on hardware you control.
What an AI service receives
An AI model works on text, so it receives what the agent shows it for the job at hand: the task, the files it reads, the output of the commands it runs, and the pictures it looks at. That is sent to the AI company you connected — Anthropic, OpenAI, Google, xAI, GLM, Qwen or OpenRouter — under that company’s own terms.
If that is too much for a project, connect local models (through Ollama or vLLM) and the work stays on your own hardware.
What never leaves: your secrets
Passwords and keys you store as secrets are used by your applications, but their values are never sent to the AI service: a command that would carry one is refused, and any output that contains one is replaced before the AI sees it. They are kept out of the project’s git and ZIP backups by default.
The honest limit: protection covers stored secrets of eight characters or more. A password typed into a chat message or visible in a screenshot cannot be recognised — so store every password as a secret.
What reaches us
From your installation, CodeHero sends Smartnav only its licence check: the licence key, an anonymous identifier of the machine and, when the licence is activated, the machine’s name. No project, code or data. This website itself uses no cookies — see privacy and cookies.
Practical rules
Store every password and key as a secret. Choose the AI companies a project may use; use local models for the most sensitive work. Keep backups on your own storage. And remember that the applications you build run on your machine, under your own security and access rules.