Local data and security
Fox Git is local first: repositories and code are processed only on your computer. This page explains where data lives and when it leaves your device.
Data on your device
| Data | Location |
|---|---|
| Repositories, working tree files, commit history | Your repository folders, managed by Git |
| App settings, recent repositories | A local app settings file (JSON) |
| API keys for AI services | The system keychain (macOS Keychain, Windows Credential Manager, Linux Secret Service) |
Fox Git never uploads your repository contents to Fox Git servers.
Where data goes
- Git remotes: fetch, pull, push, and clone are handled by system Git talking directly to the remotes you configured; Fox Git does not relay them.
- Credential input: usernames, passwords, tokens, and passphrases typed into the prompt go only to the Git process that asked, and are never stored or logged.
- License service: activation and online checks send the license key, an irreversible device digest, the device name, and the platform, to count device allowance; no repository contents are sent.
- Version checks: once automatic updates ship, update checks send the current platform, architecture, and version.
- AI assistant (optional): only when you have configured a model service and actively send a message are the message and the context you attach sent to that provider. Without configuration or use, no AI requests are made.
Local first does not mean fully offline: syncing remotes, license checks, and the optional AI features need a network.
Read-only by default
File preview, diffs, history, and blame are read-only. Only flows you explicitly enter modify the working tree — staging / discarding, conflict resolution, checkout, and reset, for example. Operations that can lose data ask for confirmation first and list what they affect.