Trust · last changed 19 Oct 2026

Privacy

Yuki is built so that your day stays on your PC. This page says what that means, in plain words, for everyone who uses it: what stays on your PC, what this website keeps about you, what the services it uses can see, and how to leave.

Who runs Yuki

Yuki is a free personal project, in beta. It is run by Sudhanshu Pandit (sudhanshuk1140@gmail.com). Write to that address about anything on this page, or to have your account deleted if you can’t sign in.

What stays on your PC

• Memory. Everything Yuki remembers: chats, pages, calls, people, promises. It’s encrypted with a key only your PC has.
• Reading the screen. Yuki reads the window in front as text, on your PC. No screenshots, no OCR.
• Calls and voice recordings. What was said on both sides of a call is kept on your PC, never uploaded.
• Your AI keys. The key you bring (Claude, OpenAI, Gemini or OpenRouter) is stored on your PC. This website never sees it. With a cloud model, only what a question needs is sent to that provider. With Ollama there is no key, and nothing leaves.

What Yuki learns about you

What Yuki learns about you stays on your PC, encrypted. Record how I work is off until you turn it on, and it never records typing, the clipboard or the screen.

Never stored in our cloud

Your memory, facts, your portrait or the people in it; screen text, chats and messages; the pages Yuki shows; what you type to Yuki (except a task you queue while your PC is off, sealed so only your PC can open it); the steps or results of a task; call audio or transcripts; your AI keys.

What this website keeps about you

• Your account: your email, your name, a link to your picture and your GitHub or Google id, plus your GitHub user name if you sign in with GitHub. That’s what GitHub or Google send when you sign in. We copy only your name into your profile, or your GitHub user name when your GitHub account has no name.
• Sign-in records: when you signed in and from which IP address, kept 30 days so sign-in can keep you signed in and spot misuse; and, while you stay signed in, the IP address and browser of each signed-in session, removed when you sign out of it or delete your account.
• Your PC links, once you link a PC: each PC’s name, Windows version, Yuki version and public keys (a lock, not a key), and when you linked it.
• Only if you turn them on: a rough “last seen” time for your PC, and tasks you queue while it’s off, sealed so we can’t read them and deleted after 24 hours at most.

What passes through us, sealed

When you use Yuki in a browser, your PC streams what the page needs through our relay. The stream is end-to-end encrypted between your PC and the browsers you approved at your PC. We pass it on. We can’t read it, and we don’t store it. The person running Yuki can’t read it either; they can see the list of accounts (emails and names), and nothing from anyone’s PC.

What the cloud does see

• When your PC is online, and so roughly when you’re at your PC each day.
• IP addresses of your PC and your browsers, in the logs of the services below, for their own retention periods.
• How much data goes back and forth, though not what it is.

Other people who use Yuki

They can’t see anything of yours: not your account, not your PC, not even that you exist. Each account reaches only its own PCs.

Who else is involved

• Supabase: accounts, sign-in and the relay; servers in Mumbai, India.
• Vercel: hosts this website.
• GitHub: the Windows download, and GitHub sign-in if you use it.
• Google: Google sign-in, if you use it.
• Your AI provider: the one whose key you put in Yuki on your PC. Yuki on your PC talks to it directly; the website never does.

Cookies

Only the ones that keep you signed in on the web app, and one that remembers for ten minutes where to return after you sign in again. No analytics, no ads, no trackers, and nothing from other companies runs on these pages.

Keep your account safe

Signing in to Yuki uses your GitHub or Google account. Turn on two-step verification for it. Someone who got into it could sign in here, unlink your PC or delete your account. They still couldn’t add a browser to your PC or see what it streams: that is only ever approved at the PC itself.

Leaving

Delete your account in the web app (Your account, then Delete your account). Your account, your profile, your PC links and any rows that belong to you are removed at once. Copies can stay in Supabase’s backups until those backups expire (up to 7 days). Memory on your PC is never touched; uninstall Yuki to remove it. Forget any single memory from Yuki on your PC.

Age

Yuki is for people 18 or older.