Zero telemetry, keys in Windows’ own vault, and an agent that asks before it acts.
Your data
Only where you send it.
Each line below exists only when you choose it. With a local model, your prompts never leave your computer.
Nothing on the right is reached until you turn it on: a provider key, a sign-in, a search, a friend. The sign-in screen only asks whether Alelyon’s sign-in service is up. The app sends no analytics.
The one request the app makes on its own: the sign-in screen asks Alelyon’s sign-in service whether it is up and which ways to sign in are on. It carries no account details.
Built in
Eight guardrails, built in.
Review every change
Keep or undo the agent’s edits by part, by file or all at once.
Approve before it acts
Commands, tools, posts and purchases ask you first.
One-key stop
Ctrl+Alt+End stops every running turn, from any program.
Works offline
Local models, your files, the IDE and saved research.
Zero telemetry
No usage analytics, no tracking.
Keys in Windows
API keys live in Windows Credential Manager.
Sealed sessions
“Stay signed in” is sealed to your Windows user.
Nothing types for you
A model never types in your terminal or presses Save.
Approvals
What asks you first
A command the agent wants to run
Every time, unless you always allowed that exact command.
A tool from an MCP server
The server starts only once you enable it; each call asks unless you always allowed that tool.
A change to your files
Waits in review until you keep it, by part, by file or all.
Posting, messaging, buying, deleting
In the agent’s browser and in auto mode: a card in the chat, then a confirmation.
A purchase, payment, sign-in or account change
Still asks in auto mode. The agent never types a password or card details.
Images to a model off your computer
Every time: the app cannot check a picture for passwords or keys.
What the agent never does
It never type into your terminal, your editor, or press Save.
It never act on Alelyon itself, a password manager or Windows’ sign-in prompts.
It never run a plugin’s hooks.
It never start an MCP server you have not enabled.
It never open this computer or its network in the agent’s browser.
It never send usage analytics or telemetry.
Ctrl+Alt+End stops every running turn at once, from any program.
Auto mode
Auto mode, on your terms.
Off until you say so
Only the app’s own confirmation turns it on. Until then the agent sees no screen.
What it does alone
In Agent mode it sees your screen, uses the mouse and keyboard, and posts, sends, edits and deletes without asking.
What still asks
Purchases, payments, sign-ins, security and account changes. It never types a password, and one key stops it.
Accounts and sessions
GitHub, Google, Hugging Face or LinkedIn, or a QR code from a phone that is already signed in. Provider sign-ins open in your own browser, never the agent’s. “Stay signed in” is sealed to your Windows user; “Use offline” skips accounts.
Friends and messages
Found by exact username, never by email. Messages are stored on Alelyon’s server in plain text, not end-to-end encrypted; the service logs no token, search or message text.
Builds you can check
Each release lists its files with sizes and SHA-256 digests from its own manifest, and says whether it is code-signed.
No third-party scripts and no analytics: the content-security policy allows this site’s own scripts only. Web chats and pasted keys live in the tab and are gone when you leave.
Report a vulnerability
Write to the security contact named in the Privacy Notice. A person reads it. Please do not test against other people’s accounts.