Privacy

What leaves your machine

• Hunk text, a few lines of surrounding context, and your free-text answers go to the model you chose: through the VS Code Language Model API (Copilot or a provider extension), or to the fallback provider you configured.
• With the mentor on, question prompts also carry short snippets of the code that calls or is called by the hunk, excerpts of matching skills (from the repository's .agents/skills, .claude/skills or .github/skills, from typeback.context.skills, or TypeBack's bundled Next.js, React and Node guidance; never the skills in your home directory), your level, your learning goal, and your weakest and strongest topics.
• The digest sends file paths, one-line hunk purposes, question kinds, the key points you missed, and topic tags to the doc-review model, with your level, your learning goal, your weakest and strongest topics, and up to three mentor notes. It never sends the code, your answers, or the grader's feedback.
• With typeback.grader set to jev, the hunk text, the generated reference, and your answers go to TypeSafe.
• With a Pro license, the key, a random label for this machine, and Polar's ids for TypeBack go to Polar when you activate and about once a week after. Nothing about your code does.
• A Read more link after I don't know or Explain opens a docs search in your browser, with the question's topic as the search term. Nothing is sent until you click one.
• The pull request check runs in your CI and sends nothing to TypeBack. With the workflow's token it asks GitHub whether GitHub verified the head commit's signature.

What stays on it

• The queue, results, the per-branch review history and the latest digest are in VS Code workspace state.
• The learner profile (level, goal, topic counts, streak, stats and milestones, mentor notes) and the license status are in VS Code global state.
• API keys and the license key are in VS Code secret storage.
• The hook receiver listens on 127.0.0.1 on a random port with a per-session bearer token, announced in ~/.typeback/receivers/ (mode 0600, removed on shutdown). Hook payloads never leave the machine.
• An edit that no TypeBack window was open to take waits in ~/.typeback/inbox/ (owner-only). It is deleted when a window takes it, or unread after 30 days. Turn starts and ends are never stored.
• No telemetry.

How to reset

• TypeBack: Clear Review Queue deletes the queue and its results.
• TypeBack: Reset Learner Profile empties the profile and can also forget the history and digest.
• TypeBack: Remove License from This Machine forgets the license.
• TypeBack: Set Fallback API Key or Set TypeSafe API Key with an empty value clears that key.

Questions

TypeBack is made by Raven's Raine Enterprise LLC. Open an issue with any question about privacy.