Yaochi Desktop

Privacy

Last updated · 2026-08-19

Two parts: how this website handles data, and how Yaochi Desktop handles data.

This website

Yaochi Desktop

What follows applies to the first Windows version. That version has not been distributed; this notice takes effect with the first distributed build, and the copy shipped with it governs.

Data sovereignty

Yaochi is a local-first application. Tasks, conversations, workspace evidence, approval records, model exchanges and local settings are all stored in a SQLite database on your own device, under %LOCALAPPDATA%\Yaochi. Yaochi runs no cloud service that stores or processes any of it.

When data leaves your device

DestinationContentsTriggerYour control
The model endpoint you configuredTask context, workspace file excerpts, your messagesWhile a task runsYou choose the provider and enter the endpoint; change or delete it at any time
A search engine (Bing by default; DuckDuckGo or a self-hosted SearXNG instead)The search terms, composed by the model for the task at hand — they may contain fragments of your taskProposed by the model, approved by youApproved each time; pointing it at your own SearXNG keeps the terms on your own server
A local MCP server you reviewed and enabledArguments and results of MCP tool callsProposed by the model, approved by youDisabled by default; requires explicit install, digest check and enablement
A web address you approvedThe address itself, and nothing else. Yaochi fetches the page text; it submits no forms, signs in nowhere, and uploads none of your contentProposed by the model, approved by youHTTPS only; direct IPs, downloads and sign-ins are refused

What Yaochi does not do

Protections

Secret isolation
API keys are held in Windows Credential Manager and referenced from the database. The raw value is never persisted to SQLite, the interface, logs or artifacts.
Outbound inspection
Content is scanned a second time for suspected credentials before a model call, and is blocked or held for a one-time confirmation of that destination.
Workspace trust
An untrusted directory does not flow into model context on its own; writes, command execution and network actions are each approved individually.
Redacted diagnostics
A diagnostic export contains platform, version and aggregate counts only — no messages, task content, file paths, identifiers or secrets.
Backups without keys
A local backup includes database contents, but API keys in the OS vault are never exported.

What you can do

Scope

This notice covers the first local Windows x86_64 version. Enterprise control planes, remote MCP and later collaboration features will each carry their own privacy and compliance documentation.

Questions about this notice

Write to hello@yaochi.tech