Privacy
SIN

Seven pieces of code in SIN can open a network connection. Here is all seven.

This page is written from the source rather than from intent. Where SIN cannot yet do something it is claimed to, that is said here rather than left out.

Do you need an account?

No. SIN does not have a login, does not have a user identity, and does not know who you are. There is nothing to sign up for and no way to. The SINVAUX account on this website is for the other products; SIN does not use it and cannot see it.

What stays on your computer

Everything you type, everything SIN answers, your tasks, reminders, memories, agents, personalities, Office layout, themes and settings live in a SQLite database in your Windows application data folder. Screenshots SIN takes are written to your temporary folder. None of it is uploaded anywhere, because there is nowhere for it to be uploaded to — SINVAUX runs no service that stores SIN data.

What the model sees

Your conversations go to a model running on your own machine, reached at 127.0.0.1. That restriction is enforced in code: the endpoint setting refuses any address that is not your own computer, so the interface cannot be persuaded to send your conversations to a remote server. The model is Ollama's, not ours, and it runs as a separate program you installed.

Everything that can leave your machine

Six of the seven are things you switch on. The seventh is the update check.

Always local

Reasoning, vision, model downloads

Three separate paths, all to Ollama on 127.0.0.1. Model downloads go through your Ollama, which fetches them from its own registry — SIN does not proxy that and never sees the traffic.

Off unless you configure it

Web search

Disabled until you supply your own search API key. Without a key SIN reports the feature as unconfigured and makes no request. When on, your search query goes to that provider.

Off unless you configure it

Image generation

Disabled until you supply your own key. Your prompt goes to the engine you configured. The key is read from your machine and is not transmitted anywhere except to that engine.

Off unless you configure it

Model suggestions

An optional external helper, off without a key.

Your network only

Phone pairing

SIN can accept a connection from an iPhone on your own network, over TLS with a certificate SIN generates. It listens only when you open a pairing window, and a paired phone is granted nothing until you grant it.

On by default

The update check

Described below. The only thing SIN does on its own that leaves your machine.

The update check, exactly

At most once every six hours, and on startup if that interval has passed, SIN asks this website whether a newer version exists. The request is an ordinary HTTPS GET for a small JSON document. It carries no identifier, no account, no machine fingerprint, no usage data and no conversation content. Your version number reaches our server the same way it reaches any web server you visit — as part of an ordinary request — and we do not build a record from it.

If you would rather it never asked, the check can be switched off in Settings, and pressing Check for updates yourself still works.

What our server does log: like almost every web server, the hosting platform records request logs, which include IP addresses. We do not analyse them, join them to anything, or use them to count installs. We are telling you they exist because a privacy page that omits ordinary server logs is not being straight with you.

Telemetry and crash reporting

There is none. No analytics library is present in SIN — not disabled, not opt-out: absent. Nothing counts your sessions, times your actions, or reports your errors to us. When SIN fails at startup it writes a log file on your own disk, which stays there unless you choose to send it.

If analytics are ever added, they will be opt-in, they will be described on this page before they ship, and they will never include conversation content.

Deleting your data

Uninstalling SIN through Windows offers to remove its application data folder. Be aware of what that currently misses: provider keys you configured and screenshots in your temporary folder are not removed by the uninstaller today. Until that is fixed, delete them yourself if it matters to you. We would rather write that sentence than let you assume otherwise.

What this page deliberately does not say

SIN is not audited, not certified, and not reviewed by anyone outside SINVAUX. It is not end-to-end encrypted, because there are no ends — your data does not travel. The strongest honest claim is the one made above: your conversations go to your own computer, and the only thing SIN sends anywhere on its own is a question about its own version.

Documentation | Releases | hello@sinvaux.com