Data and privacy
What Kettu keeps on your computer, what it sends nowhere, and how to remove it.
Kettu has no account and no server of its own, and collects no telemetry. Your sessions stay on your computer, and each agent talks only to its own provider, as it does in your terminal.
Where Kettu keeps its data
~/Library/Application Support/Kettu
%APPDATA%\Kettu
~/.config/Kettu
Settings › Advanced › Data folder shows the exact path, with Copy path and a button to show it in Finder, Explorer or the file manager.
| In the folder | What it holds |
|---|---|
settings.json | Your settings |
state/ | Your projects, the session list, every session’s conversation, the usage record, your routines and their runs |
artifacts/ | Artifact pages and their previews |
attachments/ | Images and files attached to drafts and sent messages |
scratch/ | The working folders of No project sessions |
agents/ | What Kettu installs for agents: the Claude Agent SDK, ACP adapters and packages, and downloaded agent programs |
agent-config/ | Configuration folders Kettu makes for agents you add in Settings › Agents |
themes/ | Themes you installed |
Partitions/ | The browser pane’s profile: sign-ins, site data and cache |
The agents keep their own data where they always do, such as ~/.claude for Claude Code and ~/.codex for Codex: their transcripts, settings and sign-in. Kettu does not move them.
Credentials
Each agent signs in with its own flow, and Kettu never sees your credentials. An API key you enter in Settings › Agents goes to the agent: Claude Code keeps it in the settings.json of that agent’s folder, and Codex keeps it through its own codex login. Kettu keeps no copy.
The Cloudflare token for sharing artifacts is kept encrypted by the system, only on this computer. On a Linux system without a keyring it is stored without that encryption, and Settings says so.
What goes over the network
Your conversations go from each agent to its own provider. Kettu itself connects only to:
- check for and download updates;
- install and update agents, through npm or by downloading their archives;
- load the theme catalog from GitHub when you browse themes;
- show pull request authors’ avatars from GitHub;
- publish to your Cloudflare account, when you share an artifact.
While remote access is on, Kettu also takes connections from the devices you paired, straight over your own network and end-to-end encrypted, and it connects to the hosts you added in Settings › Hosts.
Session titles and outline summaries are written by the session’s own agent, with its small model, on your plan or credits. Usage on this computer reads the agents’ logs on this computer and sends nothing.
Removing Kettu’s data
- Settings › Advanced › Remove all sessions from Kettu clears the session list. The agents keep their transcripts, so you can import the sessions again.
- Settings › Usage › Clear Kettu’s record deletes the usage Kettu recorded.
- Settings › Sharing › Remove forgets the Cloudflare token. Published pages stay online until you unpublish them.
- To remove everything, quit Kettu and delete the data folder above. Removing the app does not delete it.
Diagnostics
Export diagnostics in Settings › Advanced saves a file with recent agent messages, logs and paths. It can contain code and prompts, so share it only with people you trust.