Who we are
Calmbu is operated by Pipelion.co Ptd Ltd, trading as calmbu, from Melbourne, Victoria, Australia. References to calmbu, we, us, and our mean Pipelion.co Ptd Ltd unless the context says otherwise.
Privacy and support contact details are published in the app, purchase receipt, or website contact area. Do not send private Codex or Claude chats, code, backup archives, licence keys, or secrets unless support specifically asks for the minimum material needed to investigate an issue.
What calmbu backs up
Calmbu can back up local Codex and Claude work state, including sessions, history, config and state files, Claude project context, and supported Codex-managed worktrees. The backup destination is selected by you and can be a local or bring-your-own folder.
Backup contents are not sent to calmbu servers. Calmbu does not operate a cloud backup destination in this version, and backup location is controlled by the user. If you choose a synced folder, cloud drive, external drive, network share, or third-party storage provider as your backup destination, that provider's terms, security, and data location controls apply.
Information calmbu does not upload
- Codex or Claude chats and prompts
- AI chat history or generated responses
- Code or worktree contents
- Backup contents
- File names, folder paths, repo names, or usernames
- Snapshot manifests
- Diagnostic summaries
- Credential values or licence keys inside backups
Licence and billing data
Paid calmbu licences are planned to be processed through an authorised secure billing partner or merchant of record. The merchant of record may process billing details, tax details, invoices, receipts, refunds, chargebacks, fraud checks, and payment records according to its own checkout and privacy terms.
Licence validation may send the licence key, an instance or device identifier, app version, and product or variant identifier as needed to confirm access. Calmbu does not send Codex or Claude paths, manifests, backup contents, file names, folder paths, repo names, usernames, worktree names, logs, or diagnostic summaries to billing or licensing providers.
Local storage and security
Backups are created by the local calmbu installation and stored in the destination folder you select. Snapshots are encrypted and authenticated, and known credential files are excluded by default. Licence data is stored using platform secure storage where practical.
You remain responsible for protecting the backup destination, device access, and any external drive or sync folder you choose.
Website and infrastructure data
This website build does not include advertising trackers or analytics scripts. A production host may still process standard server logs such as IP address, user agent, requested URL, referrer, timestamp, and error details for security, abuse prevention, performance, and reliability.
For infrastructure controlled by Pipelion.co Ptd Ltd, we intend to host production website and service data on DigitalOcean infrastructure in Australia. Technical logs and backups for those services should remain in Australia where the infrastructure supports that configuration.
Calmbu downloads, static assets, installers, release files, checksums, and related public files may be distributed globally through BunnyCDN or another content delivery network. CDN edge nodes outside Australia may process technical delivery data such as IP address, user agent, requested file URL, timestamp, region, and cache/security metadata. Calmbu backup contents are not distributed through the CDN.
Overseas disclosure
Calmbu is operated from Australia, but some providers can process limited personal information outside Australia. This may include payment/licensing providers, BunnyCDN edge locations for downloads, software package distribution infrastructure, email or support providers if added later, and user-selected backup destinations outside our control.
Where we disclose personal information to an overseas service provider, we take reasonable steps to use reputable providers and limit the information shared to what is needed for the relevant purpose. We do not disclose Codex or Claude chats, prompts, code, worktree contents, backup contents, file names, folder paths, repo names, usernames, snapshot manifests, or diagnostic summaries to overseas licensing or CDN providers.
Support and diagnostics
If you contact support, we may collect your name, email address, message, purchase reference, app version, licence status, and any diagnostic summary or screenshots you choose to provide. Diagnostic summaries are designed to omit private Codex and Claude data, but you should review anything you send to support.
We use support information to respond to requests, investigate bugs, improve safety, manage licences, and comply with legal obligations. We do not use support messages to train AI systems unless a separate, explicit consent process is provided.
Retention
Local backups remain in the destination you choose until you delete them or calmbu retention settings remove them. Pipelion.co Ptd Ltd does not centrally retain your backup contents because they are not uploaded to us.
Website logs, licence records, purchase records, support records, and security logs are retained only as long as needed for security, billing, support, tax, accounting, dispute handling, fraud prevention, and legal compliance. Exact periods can vary by provider and legal requirement.
Your privacy rights
You can request access to, correction of, or deletion of personal information we hold about you, subject to legal, security, billing, and fraud-prevention limits. You can also ask how to complain about a privacy issue and how we handle privacy complaints.
For app data stored only on your device or in your chosen backup destination, use the app, your file system, or your storage provider controls to delete or manage that data. We cannot access or delete local backups that were never uploaded to us.
Your choices
You can delete calmbu backups from your chosen destination, change backup folders, deactivate a licence where supported, uninstall the app, and choose whether to send support information. Deleting a backup removes that local recovery point.
Changes and contact
We may update this policy as calmbu changes. Material privacy changes will be reflected by updating this page and, where appropriate, by notice in the app or purchase/support channels.
Use the support address shown in your purchase receipt, inside the app, or on the calmbu website for privacy and support requests.