CLUMPrivacy policy
Plain-language draft, pending lawyer review.Takes effect on the date shown once reviewed.
Responsible: Locally LLC, Ohio, United States, support@clumai.com. Effective: November 13, 2026.
The short version
CLUM collects nothing about you. It has no telemetry, no analytics, no CLUM account, and it contacts no CLUM server. This website uses no cookies and no trackers. The only personal data we receive is what our store needs to sell you CLUM, and the emails you send us.
1. This website
- No cookies, no trackers, no analytics, no outside fonts or scripts. Every file comes from this site.
- The device check runs only in your browser. It reads what your browser reports about its own system (operating system and processor), shows you the result, and sends and stores nothing.
- Like any website, the server that hosts this site receives your internet address when you visit. This website is hosted on Cloudflare Pages by Cloudflare, Inc. Cloudflare receives your internet address to deliver the pages and protect them from attacks, under its own privacy policy (cloudflare.com/privacypolicy). We do not use analytics or trackers, and we keep no visitor logs ourselves.
2. Buying CLUM (Payhip)
Our store is Payhip. When you buy, Payhip and its payment providers (Stripe or PayPal) collect what a purchase needs: your name, email address, billing country, payment details and order. Payhip collects and pays sales tax and VAT on digital products in the US, Canada, the EU and the UK, so it uses your country and address details for that. Payhip sends us your order details (name, email, product, country, amount) so we can support you and issue refunds. We never see your full card details. Payhip uses your email to send your receipt, download, license key and update notices. See Payhip's own privacy policy: payhip.com/privacy.
If you came through a partner link, Payhip records which partner referred the sale so they can be paid a commission.
We keep order records for as long as tax law requires. We keep order records for seven years, as US tax rules recommend.
3. The CLUM software
CLUM collects nothing and sends nothing to us. Your projects, files, chats and settings stay on your PC. CLUM Work, which handles your files, has no internet access at all. Your license key is checked on your PC only.
Some parts of CLUM do use the internet. Here is exactly what goes where:
| When | What is sent, to whom |
|---|---|
| Installation | The installer downloads CLUM's parts from their official sources (for example llama.cpp and SearXNG from GitHub, Python packages from PyPI, a headless browser via Playwright, system packages from Ubuntu or Debian). Those services see your internet address and what is downloaded. |
| Downloading AI models | Models download from where they are published, for example Hugging Face. Hugging Face sees your internet address and which model is downloaded. |
| CLUM Web research | CLUM Web's private search engine runs on your PC and sends your search words to outside search engines. They see the search words and your internet address, but not who asked, your files, or that you use CLUM. To read a page, CLUM Web loads it like a browser does, so that website sees your internet address. |
| CLUM Remote, public relays | Messages between your PC and your devices are end-to-end encrypted and pass through free public Nostr relays run by independent operators (for example nos.lol, relay.damus.io). They can see that your devices connect, when, and how much data passes, but not the content. |
| CLUM Remote, private relay | Uses Tailscale, which needs a free Tailscale account for your PC. Tailscale can see which of your devices connect to each other, not the content. Tailscale's privacy policy applies to that account. |
| Apps CLUM builds | An app gets internet access only if it needs it, and you can see each app's permissions in Settings › "Apps CLUM made". |
| Updates | There is no update check. New versions are downloaded by you from your Payhip receipt. |
4. Support emails and bug reports
If you email us, we use your email and what you send only to answer you, and we delete it when it's no longer needed. Support email is handled by Proton Mail (Proton AG, Switzerland), and we delete support emails within two years of the last message. Reports on the public issue tracker are public; don't post personal information there.
5. Your rights
You can ask us what personal data we hold about you (order records and emails at most), and ask us to correct or delete it, unless the law requires us to keep it (for example tax records). You can also complain to your data protection authority. Write to support@clumai.com.
6. Changes
If this policy changes, the new version will be on this page with a new date.