Ablit Privacy Policy

Version 2026-12-04. Provided by Ablit LLC, Wyoming, USA. Contact: AblitCodeSupport@gmail.com.

Ablit is built to collect nothing. It has no accounts, no analytics and no telemetry. The only online part is the optional paid models (section 2). This policy follows Brazil's LGPD (Law 13.709/2018), the EU and UK GDPR, and the California CCPA/CPRA.

1. Data that stays on your device (we never receive it)

Chats, attachments, file checkpoints, memories, settings, your AI provider keys (encrypted with Windows DPAPI) and your PIN (stored only as a salted scrypt hash) are kept in your user folder (%APPDATA%\Ablit). Deleted chats stay in a local trash for 7 days, then are erased. Anonymous chats are never written to disk. We have no access to any of it.

2. Data sent to third parties you choose

• AI model providers (for example NVIDIA, Anthropic, OpenAI, OpenRouter, or a custom endpoint) receive your prompts, attachments and tool results directly from your device, under your own account and their privacy policies. We do not see or store this traffic.
• OpenRouter public model list. To show each model's real context size, the app downloads OpenRouter's public model catalog at most every 3 days. No personal data or keys are sent; OpenRouter sees your IP address as with any web request.
• Ablit models, only if you buy them. If you pay by card or bank, thirdweb and its partner (Stripe, Coinbase or Transak) receive the payment details you give them and may check your identity under its own privacy policy; the amount, the payment method and the blockchain transaction are visible to them and, on the public blockchain, to anyone. Ablit's license service (a small program on Cloudflare) sees your license, your IP address and the payment's ID; it keeps an anonymous account number with what your license bought, the hash of your recovery code, a running spend counter for each model key (deleted when the key retires), and, per model, whether recent requests worked and how long they took (never who sent them). It never receives your name, email or card. Your prompts pass through it on their way to the model provider and back; it does not store or log them. Ablit's service also sees the country your connection comes from, only to check whether Ablit models can be sold there and which VAT applies; the country of each sale and its amount are kept for tax records (to know when a country's sales tax registration is needed, and for EU and UK VAT).
• The web, when you or the agent use web tools.

3. What we collect

Nothing. We do not use analytics, advertising, tracking cookies, profiling or automated decisions, and we do not sell or share personal information (CCPA). We do not use your content to train AI models. If you email us, we use your message only to answer you.

4. Your rights

Under LGPD art. 18, GDPR arts. 15 to 22 and the CCPA you have the right to access, correct, port and delete your data, among others. Because your data lives only on your device, you exercise these rights directly in the app, at Customize > Data: - Export my data: your chats and settings as files. - Delete all data on this device: erases chats, trash, memories, settings, keys and the PIN.

For anything else, write to AblitCodeSupport@gmail.com. We answer within 15 days (LGPD art. 19). Data protection officer (encarregado): Ablit LLC, AblitCodeSupport@gmail.com.

Launch waitlist (website only). If you type your email on Ablit's website to hear when Ablit models open, we keep that email, your language and your country only to send you that one email. We delete it after that email is sent, or sooner if you ask: use "Remove me" on the same form or write to AblitCodeSupport@gmail.com. It is stored by Cloudflare in the United States. You must be 18 or older to sign up.

International transfers. If you buy Ablit models, Ablit's license service (Cloudflare) and the payment companies may process your license, IP address and payment data outside your country, for example in the United States, as needed to carry out the purchase you asked for (LGPD art. 33, IX; GDPR art. 49(1)(b)). You can also complain to a supervisory authority (in Brazil, the ANPD at gov.br/anpd; in the EU, your local authority).

5. Security

API keys are encrypted with Windows DPAPI. The PIN is never stored, only a salted scrypt hash of it, and repeated wrong guesses are slowed down. The PIN locks the app; for protection against someone with full access to your Windows account, also use your Windows sign-in and disk encryption.

6. Children

Ablit is not intended for anyone under 18 without a parent's or guardian's consent, and not for children under 13 at all. We do not knowingly collect data from children; Ablit collects no data about anyone.

7. Changes

When this policy changes, the app shows the new version and asks you to accept it before you continue.