Narrate (“we”, “us”) turns your repository into a map you can navigate. It comes as a desktop app, which runs on your computer, and a hosted app, which runs on our servers. This policy covers both, along with our website, waitlist, and integrations. The first sections apply to everything; the desktop and hosted sections cover how each one handles your code.
In short
- The desktop app keeps your code on your computer. Code, indexes, and canvases stay there. It sends us your sign-in, a daily summary of the features you used (which you can turn off), and bug reports you choose to send.
- The hosted app stores an index of the repositories you connect, and that index contains metadata from your source code, but never retains your source code directly.
- We do not sell personal information or repository data, and we do not use your repository data to train AI models.
What we collect from everyone
- Details you provide. Your email, language preferences, and other details you submit when requesting updates or contacting us.
- Your account. The email and name you sign in with, and the organizations you belong to.
- Website usage. Pages you visit and actions you take on our website.
- Basic logs. Request and error logs on our servers may include IP addresses, browser information, timestamps, and request paths.
The desktop app
Your code, the indexes Narrate builds from it, and your canvases stay on your computer. Indexing runs on your computer and doesn’t upload anything. The app connects to us only for:
- Sign-in. The first time you open the app, you sign in through your browser, and the app registers the install with an install ID, the app version, platform, and processor type.
- Usage data. Once a day, unless you turn it off, the app sends which features you used, such as canvases created and opened, walkthroughs started, and agent tool calls, each with the time it happened, along with your account and install details. It never sends code, file or repository names, or paths.
- Update checks. Every few hours, the app checks our update server for a new version and downloads it. These requests don’t include your account or install ID.
- Bug reports and feature requests. Only when you send one: your description and the diagnostics you leave checked, such as the app’s logs, the canvas you were on, and a screenshot. Logs can include repository paths, branch names, and error messages. We replace your home folder with
~in them and delete the diagnostics after 90 days.
The app also uses your own git and GitHub CLI sign-in to fetch branches and look up pull requests and review requests. Those requests go from your computer straight to your git host and GitHub, not through us. Agents you connect to the app receive code and canvas information on your computer; their providers’ own privacy practices apply to what they receive.
The hosted app
- Your GitHub connection. Your account ID, username, profile details, email if available, organization membership, repository permissions, and credentials needed to maintain your connection.
- Repository and workspace data. Code and pull request details from repositories you authorize, the index we derive, and canvases, notes, and other content you or your connected tools create.
- App usage. Usage events and session recordings in the hosted app. Session recordings leave out the source files and diffs we fetch from GitHub.
We index your repository in a temporary checkout on our servers, which the indexing job removes when it finishes. We keep the index, which includes details such as file paths, symbol names, signatures, docstrings, relationships between symbols, and commit information. The index contains information from your source code. To display source files or diffs, we proxy file contents from GitHub as needed.
Your organization’s authorized members can see shared repositories and workspaces. Tools and agents you connect can receive repository and canvas information through the access you authorize; their providers’ own privacy practices apply to what they receive.
Disconnecting GitHub stops future access through that connection; it does not automatically delete existing indexes or canvases. If you ask us to delete your account, shared organization work may remain in place.
How we use information
We use information to sign you in, build code maps, save your work, understand how Narrate is used, fix bugs, and protect Narrate. We use contact details to respond to you, send updates you requested, and deliver necessary account notices.
We do not sell personal information or repository data, and we do not use your repository data to train AI models.
Who else is involved
Render hosts our servers and the hosted app’s data. Cloudflare provides domain, DNS, and network services, and stores desktop app downloads and bug report diagnostics. Resend stores email signups and sends emails. PostHog stores usage events from our website and both apps, and session recordings from the hosted app, in the United States; the desktop app’s events reach it through our servers. Slack notifies us of new bug reports and feature requests. GitHub handles sign-in and repository access under its own privacy policy. These providers process information needed for their role, in the United States and other countries.
We also share information with tools you authorize, or when required by law or needed to address abuse. If Narrate changes ownership, information may transfer with it under this policy.
Cookies and browser storage
On our website and in the hosted app, we use cookies for sign-in, security, and product analytics, and browser storage to remember preferences such as your theme and canvas view.
How long we keep information
We keep account details, indexes, and saved work while needed to provide Narrate. We keep email signup details while sending requested updates, unless you unsubscribe or request removal. Limited records may be kept for security, disputes, or legal requirements. Deleted information may remain in backups until those backups are routinely replaced.
Your choices and privacy requests
You can revoke Narrate’s access in GitHub’s settings, disconnect tools, unsubscribe from product updates, and turn off the desktop app’s usage data in its Settings › Account. Your organization’s device management can also turn off the desktop app’s usage data and update checks. Depending on where you live, you may have rights to access, correct, export, or delete personal information, object to certain uses, or complain to your privacy regulator.
For privacy questions or requests to access, correct, export, or delete your data, email [email protected].
Security and children
We use HTTPS and access controls to help protect information. GitHub OAuth tokens are encrypted at rest. No service can guarantee complete security. Narrate is intended for adults, and we do not knowingly collect personal information from children under 13.
Changes
We will update this page as our practices change and give notice of material changes before they take effect. Where a new use of information requires consent, we will ask for it.