Local is the default, not a setting.

What stays on your machine

• Project indexing and relationship graphs
• Search and focused context assembly
• Project memory, prompt templates, and prompt history
• Learning signals and workspace verification
• Runtime data stored in the project’s private .context-engine/ directory

When source context can leave your machine

Source context is handed to an external AI only when you intentionally send or copy a prepared prompt through your editor, or when you explicitly enable optional AI prompt review. RepoLume does not silently upload the project index.

Provider credentials

Each enabled provider keeps its credential in macOS Keychain, the system credential service, Windows Credential Manager, or an encrypted owner-only fallback. Keys are not placed in command arguments, logs, project files, prompt history, or extension settings.

Local redaction

Credential-shaped values are removed locally before optional AI prompt review. Privacy scans are designed to identify likely secrets and private data before context is shared.

Website data

This launch website does not require an account, accept payments, or collect source code. The initial site contains no advertising trackers or behavioral profiling scripts.

Security reports

Do not publish vulnerabilities, credentials, private indexes, or proprietary source in a public issue. Follow the repository security guidance and share only the smallest safe reproduction.