Privacy policy

Last updated: 2026-09-30

HarnessTron is a desktop app published by Haytham M. Hisham, Egypt. Contact for everything privacy-related: support@harnesstron.dev. This policy explains what we and our processors collect when you use the app and this site, what never leaves your computer, how long data is kept, how it is protected, and your rights. It must be read with our Terms of use.

1. The short version

• Your chats, loops, agent output, settings and code index stay in a local database on your computer. We never receive them. The app has no analytics, no advertising and no crash reporting.
• We (through our processors) see: your license key + computer name + activation id when you activate or re-check Pro; your name, email and order details when you buy (Lemon Squeezy); IP address and request metadata when the app contacts our Cloudflare-hosted service; and whatever you put in support emails.
• Prompts and code you run through Claude Code, Codex or other tools go to those companies under your own accounts — never to us.

2. Personal data we collect

• License activation and checks. When you paste a key in Settings → License, and once a day while online afterwards: the license key, your computer's name (so you can tell machines apart when you release one), and the activation identifier our service issued that computer, plus the check result. Legal basis: performance of the license contract and prevention of key abuse.
• Purchases. Lemon Squeezy, as merchant of record, collects your name, email, billing details, payment information, order amount, date and license key, and handles tax. We see your order, email address and key in its dashboard. We never see your card number. Lemon Squeezy's privacy policy governs its processing.
• Service requests. When the app looks up the current price, downloads an update or installer, or validates a license, the request reaches our service hosted on Cloudflare, which necessarily sees your IP address, time, path and app version. Microsoft Store downloads and updates are handled by Microsoft under its own policies.
• Support and reports. Emails to support@harnesstron.dev (help, refunds, security reports, AI-output reports, rights requests), including headers, contents and attachments.
• This website. Plain static pages. We set no cookies, run no analytics, and store nothing about visitors beyond what Cloudflare logs to deliver the pages.

3. What stays on your computer

• Chats, loops, agent output, settings and the local code index: stored in the HarnessTron folder of your user profile. Never transmitted to us.
• API keys under Settings → Keys: stored in your operating system's credential store, not in the database.
• Antigravity usage meter: reads the Google sign-in token Antigravity saved in your credential store locally and asks Google for remaining quota. The token is not sent to us.
• Optional OpenRouter key: if you add one, recall/search text (and code text if you enable embeddings) goes directly from your computer to OpenRouter under your account. Without a key nothing is sent.

4. How we use personal data

We use it only to: confirm your license and deliver the correct Free/Pro behavior; deliver updates within your update year; process refunds and support requests; enforce the license against sharing, forgery and abuse; keep the service secure and debugged; and comply with law. We do not sell personal data, do not share it for advertising, and do not use your code, chats or prompts for model training — we never receive them.

5. How we share personal data

• Lemon Squeezy — orders, payment, tax, license issuance and validation. US/EU infrastructure.
• Cloudflare — hosting, delivery and operational logs of the license service, price lookup, installers and update feeds.
• Microsoft — Store downloads and updates of the Store build.
• Your AI providers (Anthropic, OpenAI, Google, OpenRouter if configured) — only what you send through your own accounts, under their terms. We are not in that path.
• Legal and safety. Where required by law, court order, or to protect our rights, users or the public — and to report unlawful content or vulnerabilities you submit.
• Business transfers. If the HarnessTron business is sold, merged or restructured, license and order data moves with it, and the buyer must honor this policy for existing keys.

We are based in Egypt. Buying or activating Pro means your key, computer name and order data are processed outside Egypt by the processors above to deliver what you bought.

6. Retention

• License records (key hash, activation ids, computer names, purchase and update-year dates) live at Lemon Squeezy for the life of the key plus any period tax law requires order records to be kept.
• Service request logs (IP, time, path, app version) are short-lived operational logs, kept only to run and debug the service, then deleted or aggregated.
• Support emails are kept as long as needed to handle the request, enforce a deactivated key, or defend a claim.
• Local app data remains on your computer until you delete the HarnessTron folder and uninstall.

7. Security

All traffic to our service uses HTTPS. License tokens are signed and verified against a built-in public key, so edited tokens are rejected. The app's local server listens only on 127.0.0.1. API keys are kept in the OS credential store. Access to Lemon Squeezy and Cloudflare dashboards is limited to the publisher. If we learn of a breach affecting your license or order data, we will email your purchase address, fix the cause, and notify authorities where the law requires it. Report issues to support@harnesstron.dev. No method of transmission or storage is fully secure.

8. Your rights and choices

• Use "Release this machine" in Settings → License to free an activation; remove keys under Settings → Keys at any time; delete the local folder and uninstall to remove local data.
• To access, correct, export or delete the personal data we hold about you (mainly order and license records and support emails), email support@harnesstron.dev from your purchase address. We answer within a reasonable time and will ask for proof you own the purchase address before acting. If we deny your request, reply to the same address to appeal and we will review it again. We will not discriminate against you for exercising your rights. Tax-required order records kept by Lemon Squeezy cannot be deleted early.
• We do not sell personal data and do not share it for cross-context behavioral or targeted advertising.
• EU/UK users: you have the GDPR rights of access, rectification, erasure, restriction, portability and objection, and the right to lodge a complaint with your supervisory authority. We process license and purchase data on the bases of contract performance, our legitimate interests in preventing abuse and keeping the service secure, and legal obligation.
• To report harmful or inappropriate AI output, or anything else, use the same address — the app also shows it in Settings.

9. Children

HarnessTron is a developer tool for adults (18+, or the age of majority in your country if higher) and is not aimed at children. We do not knowingly collect children's data. If you believe a child gave us data, contact us and we will delete what we can.

10. Changes

If the app starts collecting or sending anything new, this page is updated before that release ships and the date above changes. Material changes are announced on the site; continued use after posting is acceptance.