Privacy Policy

Last updated: June 2026

rak00n is self-hosted software. It runs entirely on hardware you control. There is no rak00n cloud service and no rak00n-operated server that receives your data. The author does not collect, store, transmit, or have access to any of your data or the data of any account you connect.

1. Who this covers

rak00n ("the software") is an open-source, single-user AI assistant published by Martin Nicolas Ausilio (the "author"). You install and operate your own instance. You are the data controller for everything your instance processes.

2. What data the software handles

Your conversations, files, and settings — stored locally in your instance (on your machine), never sent to the author.
Connected accounts — if you choose to connect Google or Microsoft, the software requests OAuth access tokens so it can act on your behalf. Tokens and any retrieved content stay on your instance.
Model inference — by default the AI model runs locally on your hardware. If you configure a remote/cloud model endpoint yourself, your prompts are sent to that endpoint under your own terms.

3. Connected accounts & scopes

Connecting an account is optional and initiated by you. The software requests only the scopes needed for the features you enable, for example:

Google — Drive (read your files), Calendar (read your events), and, where you enable it, Gmail. Used to display and act on your content inside your own instance.
Microsoft — OneDrive (files), Outlook mail, and Calendar, via Microsoft Graph, for the same purpose.

The software uses this access solely to provide the features you request within your instance. It is never used for advertising, profiling, sold, or shared with third parties.

Google Limited Use disclosure. rak00n's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide user-facing features within your own self-hosted instance, is not transferred to others except as necessary to provide those features at your direction, is not used for advertising, and is not read by humans except with your consent or as required for security/legal reasons.

4. Where your data lives

On your instance. Because the author operates no servers in this flow, your data is never received by the author. Connected-account tokens are stored in your instance's local store and used only to make API requests from your instance directly to the provider.

5. Revoking access & deletion

Disconnect any account from rak00n's Settings at any time — the stored token is deleted from your instance.
Revoke access from the provider directly: Google account permissions · Microsoft app access.
Delete your instance's data by removing its local storage/volumes.

6. Children

rak00n is not directed to children under 13 and should not be used by them.

7. Changes

This policy may be updated; the "last updated" date will change accordingly. Material changes will be noted on this page and in the GitHub repository.

8. Contact

Questions: open an issue at github.com/MrQbit/rak00n.