CHATDA — Privacy Policy

Version 1.8 · Effective 2026-10-19

1. In one line

CHATDA collects no personal data. All indexing and searching happens on your own computer, and nothing is transmitted anywhere. (If you turn on “Search from your phone”, data is exchanged only with your own phone that you paired yourself, on the same Wi‑Fi — never through our servers.) The website (chatda.dev) counts visits without cookies — see the Appendix at the end of this document.

2. What is processed

CHATDA indexes the file names, folder structure, file sizes and modification times of the folders you point it at, plus text extracted from documents if content search is enabled. This index exists only in your computer's memory and local storage.

Learning record. CHATDA learns which results you actually opened and uses that to rank future searches. What is written to disk is only 64-bit hashes of the path and of the query, plus counts and timestamps — never the path text or the query text itself. The file lives at %LOCALAPPDATA%\chatda\behavior.bin on your own computer and never leaves it. You can delete it any time with scripts\RESET_LEARNING.ps1, or prevent it entirely by setting the CHATDA_NO_LEARNING environment variable. The excludes.txt (exclusion rules) and searches.tsv (saved searches) files in the same folder are likewise settings that stay on your computer; you can open, edit or delete them at any time. A usage.tsv file in the same folder records the queries you typed and how many results they returned (a search that never returns anything is the only signal showing where search breaks down, so the admin view lists them). It likewise never leaves your computer, and the admin view's "Clear search history" removes it at any time.

3. What "no transmission" means

• CHATDA sends your index, search terms, file paths and usage statistics to no server at all.
• Update check (on by default, can be turned off). Once a day CHATDA asks https://chatda.dev/update/latest.json for the current version number. Nothing is sent with it — no search terms, no file names, no cookies, no identifier; just one request carrying the program name and version. If a newer version exists, the installer is downloaded and installed only after its SHA-256 and code signature match. You can turn this off under ⋮ More in the program, and with it off CHATDA does not even ask, so nothing leaves your PC at all. Everything exchanged is written down at https://chatda.dev/transparency.
• There is no remote crash reporting and no advertising identifier. The thin line at the top of the window is a link to other services by the operator; your browser opens it only when you click, and the program sends nothing.
• The local web interface (--http) accepts connections on 127.0.0.1 only. Other devices on your network cannot reach it. There is one exception — when you turn on “Search from your phone” (off by default), only phones you have paired yourself by scanning the code on the PC screen can search this PC over the same Wi‑Fi. That path is read-only (no launching, changing or settings), everything exchanged is encrypted with the key shared at pairing, and nothing passes through the internet or our servers. Turning it off or unpairing blocks it immediately.

Android apps

• CHATDA (Android) indexes and searches a phone’s files on that phone only. The app has no internet permission at all, so the operating system blocks every connection — it cannot send your queries, file names or document contents anywhere. Reading files requires you to grant “All files access”; the index and learning data stay in the app’s private storage, are excluded from backup and device transfer, and are removed with the app.
• CHATDA Remote (Android) connects only to the one PC you paired, on the same Wi‑Fi, over the encrypted path above. The pairing key stays in the app’s private storage, is not backed up, and is erased by “Unpair” or by uninstalling. Files you open from the PC are kept in the app’s temporary folder and deleted on the next launch. A pairing that arrives through a link is saved only after the app shows the PC’s name and address and you confirm it, and only private addresses on your own network are accepted. Searches typed on the phone are not added to the PC’s search history. If your browser opens the pairing code first, it loads the chatda.dev/p/ page once, but browsers never send the part of the address after # — where the key is — to the server.
• Neither app contains ad networks, analytics or crash-reporting tools. The thin line at the very top of the screen is a link introducing other services by the operator, Projectteamforyou; only when you tap it does your device's browser open projectteamforyou.com — the app itself connects to nothing and sends nothing.

4. When connected to an AI tool

In --mcp mode, connected to Claude Desktop or a similar tool, the search results and document text that tool requests are passed to it. What happens afterwards is governed by that tool provider's own privacy policy. CHATDA never reads outside the folders you name with --root. The AI-tool mode (--mcp) is read-only: it has no ability to write, delete or execute anything.

Optional file actions (off by default). Only when the local web UI (--http) is started with --allow-write can you copy, move, rename or zip the results you selected. Those actions (1) work only inside the folders given with --root, (2) always show a preview of what would change before running, and (3) do not include deleting files. Opening a file with its default program (--allow-open) is likewise off by default.

5. Retention and deletion

The index is stored on your computer and disappears when you remove the program or delete the index file. We hold no copy, so there is no deletion request to make.

6. Children's data

CHATDA collects no personal data, and therefore collects none from children.

7. Contact

Data protection contact · Project Team For You — projectteamforyou@gmail.com

Business information

---

CHATDA — Terms of Use

Version 1.8 · Effective 2026-10-19

1. Purpose

These terms govern use of the software "CHATDA" (the "Software").

2. Licence

You are granted a non-exclusive right to use the Software for personal and commercial purposes. You may not reverse engineer it, remove copyright notices, or redistribute it while impersonating the provider.

3. Your responsibilities

• You must hold lawful access rights to any file you index or search with the Software.
• You decide which folders to expose when connecting an AI tool, and you are responsible for what is consequently passed to that tool.
• Before exposing folders containing confidential or personal data, check your organisation's policy.

4. Disclaimer of warranty

The Software is provided "as is", without warranty of any kind, express or implied, including merchantability, fitness for a particular purpose and non-infringement. Completeness and accuracy of search results are not warranted.

5. Limitation of liability

To the fullest extent permitted by law, the provider is not liable for any direct, indirect, incidental or consequential damages (including data loss, business interruption or lost profits) arising from use of or inability to use the Software.

6. Governing law

These terms are governed by the laws of the Republic of Korea, with the Seoul Central District Court as the court of first instance.

7. Changes

Changed terms are published with a new version number and effective date in the distribution. Continued use after a change constitutes acceptance.

8. Contact

projectteamforyou@gmail.com

---

Appendix — About the website (chatda.dev)

Everything above concerns the program, which sends nothing to us or to anyone else (its update check only receives a version number and can be turned off; “Search from your phone” talks only to your own paired phone on the same Wi‑Fi). This appendix concerns the website that introduces it.

No cookies. There are no tracking cookies, no accounts, and no advertising or tracking scripts. One login cookie is used when the operator signs in to the admin page; it has nothing to do with visitors.

Visit statistics (Cloudflare Web Analytics). To see how the pages are read and how fast they load, the site uses one statistics script from Cloudflare, the company that serves it. That script uses no cookies and no browser storage, does not follow visitors across other sites, and does not identify individuals by IP address or browser details. What Cloudflare aggregates is the page address, the referring site, the kind of browser, operating system and device, the country, and how fast the page loaded. No other external script is loaded.

No IP addresses are stored. To count several page views by one person as a single visit, the IP address and browser string are hashed together with a random value that is used for one day only, and just 16 characters of that hash are kept. The random value changes daily and is deleted after two days, so yesterday's value cannot be traced to anyone today.

What is kept. The page address, the page's language, the host name of the referring site (the host only, never the full address), the country code, the device class (desktop, phone, tablet), the browser and operating system family, the screen width rounded to 100 pixels, the time spent on the page, and how far down it was scrolled. Search terms, form input and anything identifying a person are never received.

Retention. Those records are deleted after 180 days. What remains afterwards is daily totals — visits, views per page — which are not linked to any person.

Advertising. Ads on this website are chosen and served by the operator. No external ad-network script is loaded, so visit records never reach an advertiser or an ad company. Every ad carries an "Ad" label and the advertiser's name. Following an ad takes you to the advertiser's site, where that site's own policy applies.

Disclosure to others. None of these records are shared or sold. The website is served through Cloudflare, whose own policy governs the processing needed to deliver it and the visit statistics above.