Your work stays on your machine.

Consistent CEO is built and published by Baqshi Limited, a company based in New Zealand(“we”, “us”, “our”). This policy applies to:

• the Consistent CEO desktop app for macOS and Windows;
• the Consistent CEO gateway — the software that runs on your own computer (or a server you choose) and powers the desktop app, the web dashboard, and the mobile app;
• Consistent, the companion mobile app for iOS and Android; and
• this website, consistent.ceo.

Questions about privacy can go to [email protected].

• Local-first by design. Your workspace — entities, missions, tasks, chats, notes, files, and your vault — is stored by the gateway on a computer you control. We do not operate a cloud service that receives, stores, or processes it.
• Your account lives on your gateway, not with us. We cannot see it, and we cannot read your workspace.
• No analytics, advertising, or tracking. The desktop app, the mobile app, and this website contain no analytics, advertising, or tracking SDKs. We do not sell personal information or share it for advertising.
• Third parties only when you switch them on. AI model providers, push notifications, remote access, and integrations receive only what the feature you enabled needs, sent directly from your gateway or device — never through us.

Because Consistent CEO is self-hosted, Baqshi Limited collects very little:

• When you email us — your email address and whatever you write, used to reply and help you.
• When you join early access or ask to be notified on this website — the email address you enter, plus any optional details you choose to add (your name, role, what you are building, what you want to manage, and which platform you are interested in). We use this only to contact you about access to Consistent CEO.
• When you visit this website — our hosting provider, Vercel, processes the standard technical information needed to deliver a web page (such as your IP address, browser type, the page requested, and the time) and may keep it in server logs for a limited period. The website does not use analytics or advertising cookies and does not load third-party analytics or tracking scripts.
• Through the app stores— Apple and Google give app publishers aggregated statistics about downloads, and crash and usage reports from people who have chosen, in their device settings, to share them with developers. Apple’s and Google’s own privacy policies govern that data.

We do not collect the contents of your workspace, your chats, prompts, or AI responses, your files, your vault items or passwords, your voice, your contacts, your location, or any advertising identifier. There are currently no in-app purchases, and we process no payment details.

The gateway is software that runs on your computer, or on a server you choose to run it on. It keeps its database and files in a data folder in your user account (by default ~/.consistent-world/). That data is under your control, and we have no access to it. It includes:

• Account and sign-in data — your username; your password, stored only as an Argon2 hash; passkeys; one-time recovery codes, also hashed; active sessions; API keys you create; and the devices you have paired (platform, a device label, a per-install identifier, and a push token if you turned push notifications on).
• Workspace content — the entities, missions, tasks, approvals, reminders, notes, and chat history you create; documents indexed from folders you connect; and the execution journal and evidence (such as code changes) that work produces.
• Your vault — passwords, API keys, and other secrets, stored encrypted on your machine. Items are encrypted with AES-256-GCM under keys protected by your master password, which is stretched with Argon2id. While the vault is unlocked, the gateway holds the key in memory so agents can use the credentials you have allowed them to; the vault locks itself again when idle.
• Settings and logs — configuration and operational logs, kept locally.

Because this data sits on your own computer, you decide how it is backed up, where it is copied, and when it is deleted.

Consistent is a remote control for your own gateway. It connects only to the gateway address you pair it with, and it does not send your workspace to us.

Stored on your phone

The address of your gateway, your sign-in token, and the device key used to unlock your vault are kept in your phone’s secure storage (the iOS Keychain, or Android’s Keystore-backed storage). Display preferences such as your theme are stored on the device. The app’s diagnostic log is held in memory only and is never sent anywhere. Until you pair a gateway, the app runs in demo mode with built-in sample data.

Camera

Used only to scan the pairing QR code shown by your computer. The camera image is processed on the device to read the code; it is not saved or sent anywhere.

Microphone

Used only while you are actively using a voice feature, such as talking to your companion. Your audio streams to your gateway. For live voice conversations, your gateway passes the audio to Google’s Gemini Live API, using the Google API key configured on your gateway, which transcribes it and generates a reply. Replies are read aloud with your device’s built-in text-to-speech. If voice is not configured on your gateway, audio goes nowhere else.

Notifications

Reminders and heartbeat alerts can appear as notifications while the app is running. Push notifications that reach you when the app is closed are off by defaultand must be switched on both in the app (Settings → Notifications → Push when the app is closed) and on your gateway. When push is on, the app obtains a push token from Expo and registers it with your gateway. Your gateway then sends each notification’s title and a short text (up to 180 characters) to Expo’s push service, which delivers it through Apple Push Notification service or Google’s Firebase Cloud Messaging. Those services process the notification to deliver it. Turning push off removes the token from your gateway.

What the app does not do

The app contains no analytics, advertising, or tracking SDKs, does not use advertising identifiers, and does not access your location, contacts, or photo library.

The desktop app runs the gateway on your computer, so everything in section 4 applies. It contains no analytics, advertising, or crash-reporting SDKs.

Dictation runs on your computer using an on-device speech recognition model (Whisper); your audio is not sent anywhere. The first time you use it, the app downloads the model file from Hugging Face, which sees an ordinary download request (such as your IP address) but none of your audio or content.

You choose which AI models do the work, and you can mix them:

• Local models running through Ollama on your own computer — prompts do not leave your machine.
• Your own subscriptions — Claude (Anthropic) or Codex (OpenAI), through their official command-line tools signed in on your computer. Prompts and context are sent to Anthropic or OpenAI under your own account with them.
• API providers you configure with your own key — such as OpenAI, Anthropic, Google, or DeepSeek.

When you use a hosted provider, your gateway sends the prompt and the context needed to answer it — for example, the relevant entity knowledge, mission notes, conversation history, and tool results — directly to that provider. How the provider handles it is governed by your agreement with them and their privacy policy. Nothing is routed through Baqshi Limited, and we do not receive copies.

You set up how your phone reaches your gateway. There are three ways:

• Local network — the phone talks to your computer directly over your own network.
• Tailscale— if you use Tailscale, traffic travels over your private Tailscale network using HTTPS. Tailscale’s handling of data is governed by Tailscale’s privacy policy.
• A relay (optional) — a small forwarding server that lets your phone reach a gateway without opening ports on your network. We do not operate a public relay; a relay is run by you, or by someone you choose to trust. A relay forwards each request and response between your phone and your gateway — including the request address, headers (among them your sign-in token), and contents. Because the encrypted connection from your phone ends at the relay, whoever operates it is technically able to see that traffic as it passes through. The relay software does not store requests or responses; it records only when a gateway connects or disconnects. Only use a relay you trust.

Some features talk to outside services, but only when you set them up or use them. Each receives only what that feature needs, sent directly from your gateway:

• Web search (Brave Search or Tavily) receives the search queries your agents run.
• Email and social integrations (such as SendGrid or X) receive the messages you approve for sending.
• GitHub receives requests when you connect an account or import a repository.
• Password breach checks.When you check your vault against Have I Been Pwned, only the first five characters of each password’s SHA-1 hash are sent. The matching happens on your machine; your passwords and their full hashes never leave it.

Credentials for these services are stored on your gateway, and each service handles what it receives under its own privacy policy.

Consistent CEO is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has sent us personal information, contact us and we will delete it.

Keeping your data on your own computer removes a central store for anyone to breach. On top of that, passwords and recovery codes are stored as Argon2 hashes, vault contents are encrypted at rest, secrets on your phone are kept in the operating system’s secure storage, and remote requests to your gateway require a signed-in session.

No system is perfectly secure. Because the gateway runs on your computer, its safety also depends on that computer: keep it updated, use a strong master password, and only connect services and relays you trust.

• Data on your gateway and devices stays until you delete it. We have no copy.
• Early-access and notify-me sign-ups are kept while early access is running, or until you ask us to delete them.
• Emails to us are kept as long as needed to help you, and then deleted in the ordinary course.
• Website server logs are kept by Vercel for a limited period under its own retention settings.

Depending on where you live — including under New Zealand’s Privacy Act 2020, the GDPR, and California privacy law — you may have the right to access, correct, delete, or receive a copy of your personal information, and to object to or restrict how it is used.

Data on your gateway

Your workspace and account live on your own computer, so you can exercise these rights directly: view and edit your information in the app, back it up, or delete it.

• Delete your account in the mobile app (Settings → Delete account) or on your gateway. Deleting your account removes its identity and authentication data from your gateway.
• Remove everythingby deleting the gateway’s data folder and uninstalling the apps. Uninstalling the mobile app removes the data it stored on your phone.
• Turn features off at any time — push notifications, voice, AI providers, integrations, and relays are all optional.

Data we hold

For information we hold directly — emails and early-access sign-ups — contact [email protected]. We will respond within 20 working days. We do not sell personal information, and we do not share it for cross-context behavioural advertising.

If you are unhappy with how we handle your information, you can complain to New Zealand’s Office of the Privacy Commissioner or to the data protection authority where you live.

Baqshi Limited is based in New Zealand. Our website host, and any third-party service you choose to connect, may process information in other countries, including the United States, under their own safeguards and privacy policies.

We will update this policy when the product or the law changes. The date at the top shows when it last changed. If a change materially affects how your information is handled, we will say so clearly on this page.

Baqshi Limited, New Zealand
[email protected]

Need help with the app rather than privacy? Visit Support.