Privacy Policy

Yep Anywhere is self-hosted software. There is no hosted product account or hosted transcript database. Your server state and provider sessions stay on the machines you control, except when you deliberately use an optional network service described below.

Network Requests

The application makes minimal network requests:

• Yep Anywhere update service — The app periodically checks updates.yepanywhere.com for version information, and opening Settings → About or using the manual update check triggers a fresh check. These requests include the running app version and an installation identifier so we can maintain relay compatibility, monitor rollout reliability, and support backwards compatibility.
• Your AI provider — When you run sessions, requests go directly to your configured AI provider (Anthropic, OpenAI, etc.) using your own API keys.
• Optional remote-access and notification services — Enabling the public relay or browser push creates the connections needed for those features. They are not required for local use.

We do not send session contents, prompts, or files to the update service. Cloud AI providers receive the content needed to run their agents under their own terms.

Local Data Storage

All data is stored locally on your machine:

• Session transcripts (managed by the Claude SDK in ~/.claude/projects/)
• Server state including logs, uploads, and settings (npm/source: ~/.yep-anywhere/ on macOS/Linux or %USERPROFILE%\.yep-anywhere\ on Windows; desktop app: ~/.yep-anywhere-desktop/ on macOS or %USERPROFILE%\.yep-anywhere-desktop\ on Windows)
• Push notification VAPID keys (generated locally, no third-party service)
• Optional password hash if you enable authentication

End-to-end encrypted public relay

The optional public relay enables remote access without requiring a VPN or port forwarding. If you enable it:

• Application messages are end-to-end encrypted; the relay cannot read their contents or your password.
• The relay can observe connection metadata such as the username, timing, and traffic sizes.
• The feature is opt-in. You can continue locally, use another direct-access method, or self-host the relay.

Public Session Shares

Public sharing is opt-in because it has a different privacy boundary. No session is shared until you deliberately create a read-only link. Anyone with the secret link can read the shared content until access is revoked or the live share ends, and the current public-share relay path is not private from a relay operator. Review session content before enabling a share.

This Website

The public marketing, news, and documentation pages use Cloudflare Web Analytics to understand aggregate page traffic and page-load performance. The beacon receives page and referrer information, browser and device categories, approximate geography, and performance measurements. Cloudflare states that Web Analytics does not collect or use visitors' personal data and does not use cookies or local storage for usage metrics.

The hosted /remote/ application does not include the marketing analytics beacon. Prompts, files, approvals, session contents, and product actions are not sent as marketing analytics events.

The website also loads Inter from Google Fonts, so a page view makes font requests to Google.

Open Source

Yep Anywhere is 100% open source under the MIT license. You can inspect the code to verify these claims.

We publish to npm using trusted publishing with provenance attestation directly from GitHub Actions. Every published package links back to the exact source commit and CI workflow run, so you can verify that the code on npm matches the code on GitHub.

Last updated: August 1, 2026