Privacy
Horon reads your data where it already is, and your work stays on the computer you own unless you point it somewhere else. The only thing we keep for you is your account.
What is protecting your data today.
Nine protections this repository can show, and two things it does not hide: your account and your download records are stored on our servers.
- It runs on your computerOn this computer
- There is no cluster behind this page. The part that does the work runs on the machine in front of you, so your files never have to leave it.
- Off the network by defaultThis computer by default
- The parts of Horon that run on your computer answer this machine only. The assistant, mail, messenger, and the service that keeps your devices in step answer this computer alone. Reaching the assistant from another device takes a switch you turn on, and that switch is off by default.
- Inbound networkNone
- Nothing on the internet can reach it. The assistant answers only inside the work you started on this computer, and nothing is opened for another machine to connect to unless you turn on that switch.
- Provider credentialsA private file only you can read
- Saved provider credentials are written in one step, so a crash cannot leave a half-written key behind, and nothing else on the machine can read them.
- TelemetryOff by default
- The agent reports nothing until you turn it on.
- Verification codesScrambled form only
- The one-time code we text you is never stored as you typed it. Only a scrambled form of it, with a secret mixed in, is kept, so the stored value cannot be turned back into the code.
- Sign-inPasskey or social
- A passkey, Google, or Apple signs you in without a password. Email and password also works, and a provider appears only once its credentials are configured.
- Access tokensA signed key we can verify
- An access token is signed when it is issued, and the signature is checked against a published list of keys before anything trusts it. A forged token fails that check.
- Device permissionsPer device, audited
- The helper on a computer refuses file, messenger, and command work without a consent file for that device, and writes every allow or deny to a log you can read.
- Your accountStored on horon.ai
- Your account, its sign-ins, and your passkey entries live in our own database on horon.ai (Cloudflare D1). Your files are not part of that.
- Download records180 days
- A Korean mobile number is stored with your account, and each download records your IP address, browser user agent, and the time it happened. Download records are deleted after 180 days.
How Horon handles your data
Your files stay on your disk
Horon opens and reads your files where they already are, on the computer you own.
Model requests go only where you point them
Every model request goes to the provider and the key you set up, and that key stays on your computer.
Only your own account can read your credentials
Saved credentials sit in a private folder that only your own user account can open, so no other account or program on that computer can read them.
Nothing outside this computer can connect to it
The part that runs in the background answers only inside the work you started on this computer, and opens nothing for another machine to connect to. The one exception is the small receiver that catches you when you come back from signing in, and even that accepts connections only from your own machine.
Telemetry is off until you turn it on
The assistant on your computer sends no usage data by default. It stays off until you enable it yourself.
Your account and its sign-ins are stored on horon.ai
Signing in keeps your account and your sign-in state in our own storage on horon.ai (Cloudflare D1). Your files are not part of that.
You can delete your local data at any time
Your files stay where they are on your disk, and saved credentials are ordinary files in your own settings folder. Delete them and they are gone from your machine.