Privacy

Your work stays on your computer

Projects, papers, notebooks, notes and chats are stored on your own machine. We do not upload them, back them up or index them anywhere. The search index the assistant uses is kept locally too (what building it sends, if you choose a cloud provider for it, is below). We receive no usage statistics and no crash reports. Uninstalling the app does not reach into your project folders.

Your account

Signing in stores your email address with our account provider, Supabase (servers in Seoul). Sign-in codes are emailed through Resend. If you sign in with Google, Google tells us your email address and name; we do not receive your Google password or access to anything else in your Google account.

To check your licence and count your machines, the app sends, when you sign in and when it starts with a connection: a one-way hash that identifies this computer (not its hardware serials), the computer's name, the app version and a build identifier. You can see and remove your machines on your account page.

Joining the beta waiting list stores what you type in the form — your name, institution, field, what you would use Stupidon for and your operating system — beside your account, along with where you heard of us if the link said so. We read it to decide who to let in, and delete it with your account.

The AI models you choose

Stupidon runs on your own key. Requests — your messages, notebook pages read into LaTeX, LaTeX you ask it to edit, the files you attach and the papers you focus — go straight from your computer to the provider you chose (Google, Anthropic, OpenAI, or a model on your own machine), under that provider's terms. They do not pass through us, and your key stays encrypted on your computer. On Google, a paper focused in full is held in Google's short-lived context cache for the length of a conversation, under your key, and then deleted.

Indexing. To make your library searchable, the app reads each paper and file in a project as it arrives. By default this runs on your own computer (a small on-device model), whatever keys you have saved. If you choose a cloud provider for it instead (Settings → Library & search), the text of each paper and file is sent to that provider as it is indexed — whether or not you ask about it. Separately, new papers are summarised and their equations read by the models you chose under Providers.

Local-only mode (Settings → Providers) refuses every cloud model and embedder on your computer. It does not switch off paper searches, downloads or updates.

Searches and downloads the app makes for you

Searching for papers sends your search words from your computer to the public research indexes the app queries: arXiv, OpenAlex, Crossref, and, when you turn them on, Europe PMC, INSPIRE and Semantic Scholar. Unpaywall is asked for free copies of the papers found. When the assistant searches the web, the query goes to a search engine. Pages and papers it opens, and the pages behind link previews in your notebooks, are fetched from their own sites.

Some things are downloaded when you first need them: Python packages from PyPI into a project's environment, LaTeX packages the first time a document uses them (through MiKTeX, or the bundled tectonic engine's package bundle), and the add-ons you enable (the Lean prover, FORM, MCP servers) from where those projects publish them.

Updates and crashes

The app checks our download server for a newer version, sending its version and build identifier. It sends us no usage statistics.

Crash details are written to a log file on your computer and are not sent anywhere; if you report a problem, the About page lets you copy them into an email yourself.

The tablet companion

Pairing a tablet happens entirely on your own network, between your own devices. The desktop app does not accept connections from other devices until you turn tablet pairing on, and you can turn it off again in the same place. The connection between them is not encrypted, so someone else on the same Wi-Fi could read what passes over it: pair only on a network you trust, such as your home Wi-Fi or your computer's own hotspot.

A key you add on the tablet itself sends the tablet's questions straight to that provider; local-only mode on your computer does not govern it. The tablet downloads its Python engine from cdn.jsdelivr.net and, only if you ask for one, an on-device model from Hugging Face.

What we do not do

We do not sell or share your data, we do not use your work to train anything, and we do not read your requests. Payments, when they arrive, will be handled by a payment company that sees your payment details; we will not.

Deleting your data

Write to hello@stupidon.com from the address on your account and we will delete the account, its licence and machine records. Stupidon is made by Kaalmaya.