Data-flow map

First-pass counsel input: what stays local vs what may leave the machine.

Local MIT CLI

Local MIT CLI and engine: workspace source, local prevention rules, context packs, and lesson DB stay on disk under paths such as ~/.thumbgate/ and project .claude/. Workspace source does not leave the machine by default.

What may leave the machine

• Account registration and license checks for Pro / hosted features
• Stripe payment tokens and billing metadata when you check out
• Device pairing identifiers for thumbgate.app
• Cloud-runner operational logs (timestamps, success/fail, error summaries)
• Optional CLI telemetry (disable with THUMBGATE_NO_TELEMETRY=1)
• Support email content you voluntarily send

Full map: docs/legal/DATA_FLOW_MAP.md · Privacy Policy