Data and privacy

Olyvr is local-first. You sign in with a free Olyvr account, which keeps only your name and email; your workspace lives in a folder on your computer: documents, chats and memory never go to Olyvr. Unless you turn it off, Olyvr also sends usage data (which features are used and how much, never what’s in them), linked to your account while you’re signed in.

What stays on your machine

Everything Olyvr stores is in your data folder:

OS	Folder
macOS	~/Library/Application Support/Olyvr Cowork
Windows	%APPDATA%\Olyvr Cowork
Linux	~/.config/Olyvr Cowork

Each Olyvr account you sign in with on this computer has its own folder inside it, accounts/<account>/state/. Before you sign in, Olyvr uses accounts/_guest/state/. Each folder holds:

• olyvr.sqlite3: your sources, document text, search index, chats and their summaries, Snapshot cards and what they showed before, projects, memory, preferences, tasks and settings
• blobs/: Olyvr’s copies of imported files and saved documents
• vault.id: the name of this folder’s credential key in your system keychain (not the key itself)
• local/: local models and the llama.cpp runtime, if you installed them
• subscription/: the subscription proxy’s configuration and sign-in tokens, if you signed in

On macOS and Linux these folders can only be read by your user account.

Several accounts on one computer

Olyvr only opens the folder of the account you’re signed in to. Signing in as a different account switches folders: Olyvr restarts its engine in the same window, so nothing from the previous account stays open. Sign-ins to Slack, Gmail and websites inside Olyvr are kept per account too. A folder import never reads Olyvr’s own data folder, so one account can’t import another’s files.

The accounts’ folders are separated by Olyvr, not encrypted from each other: other programs running as your user can read them. Turn on FileVault (macOS) or BitLocker (Windows) so your data is encrypted if your computer is lost.

To delete an account’s data from this computer, open your account and choose Remove this account’s data from this computer. Olyvr signs out and deletes that account’s folder, including its documents, chats, memory, connected accounts and its key in your keychain. Your Olyvr account itself isn’t deleted; for that, see Delete your account.

Backups

Time Machine and other backup tools copy your data folder like any other, so your backups hold your Olyvr data too. Keep backups encrypted: in Time Machine, choose Encrypt backups for the backup disk. To leave Olyvr’s data out of Time Machine backups instead, run:

tmutil addexclusion ~/Library/Application\ Support/Olyvr\ Cowork

Excluded data isn’t restored with a backup: you would import your files again and reconnect your accounts.

What leaves your machine

Besides its own checks, and usage data unless you turn it off, Olyvr only contacts the services you set up:

When	Sent to	What
You use the agent or generate memory or tasks	Your chosen model provider	Your message, recent conversation, memory notes, summaries of related earlier chats, matching preferences and skills, and passages from documents the agent reads
A chat is summarized for Knowledge	Your chosen model provider	That chat’s messages (only the new ones when a summary is updated) and its previous summary
You open Snapshot or refresh a card	Your chosen model provider, and the sources the model asks	As for a chat: the card’s prompt, the date and your time zone, memory notes, matching preferences, and passages from documents and past chats the card reads go to the model. To answer, it may also look up a place with Open-Meteo, read Google News, search DuckDuckGo, or read a public web page; those requests carry only what the model asks for, such as a place or a search
You sign in, and when the app starts while signed in	Olyvr’s account service	Your name, email and profile picture from the provider you chose, and a check that your session is still valid
When the app starts, once a day, and when you open Skills	olyvr.ai	A request for the list of standard skills, and downloads of the ones you install or that update. Nothing about you, your files or your own skills is sent.
Shortly after the app starts, then every hour	olyvr.ai	A check for a newer Olyvr release: your version and platform, and the random install ID if you turned usage data on
Every five minutes, unless you turned usage data off	Olyvr’s account service	Usage events, with your account while you’re signed in: which features were used and how much, never your content
You connect or refresh an account	Google, Microsoft or GitHub	Sign-in and read-only API requests
You connect or refresh Slack, or send a message to Slack	Slack, and for sign-in Olyvr’s account service	Sign-in, then API requests to list and read the conversations you import. A message is posted only when you click Send. The account service passes your Slack sign-in on to the app and then deletes it. See Olyvr for Slack
You ask a question while a Cielara source is on	Your company’s Cielara dataplane (Reasonara)	The question, or the agent’s search query, with the collection name and the source’s settings. Nothing you imported is sent.
You ask a question while an Olyvr TeamMind source is on	The memory server of the colleague who hosts it	The question, or the agent’s search query, with the collection name and the source’s settings. Nothing you imported is sent, and the token can only read. See Olyvr TeamMind
You host an Olyvr TeamMind and share it	Everyone with a token to your memory server	The documents of the data sources you chose to put in it, read-only. With Let people connect from the internet on, olyvr.ai also checks that it can reach your computer. See Host a team’s memory
You install a local model	GitHub and Hugging Face	Downloads of llama.cpp and the model file
You connect a plugin	That plugin’s server	Tool calls and their arguments
You click a link	Your browser	The link

With a subscription, requests go through the local proxy on your machine directly to OpenAI or Anthropic. With a local model, model requests never leave your computer.

Note

Model providers handle your data under their own terms. Check your provider’s data-retention and training policies.

Credentials

API keys, account tokens, and plugin secrets and tokens are encrypted at rest. The key is kept in your system keychain, not in the data folder: the login Keychain on macOS, protected with your Windows sign-in (DPAPI) on Windows, and the Secret Service (such as GNOME Keyring) on Linux. Where none is available, the key stays in the account’s folder. Each account on this computer has its own key. Saved keys are never shown again in full.

Signing out of an account deletes its token from your machine. It doesn’t revoke access on the provider’s side; do that in your account’s security settings.

The local engine

Olyvr’s engine runs on your machine and listens only on 127.0.0.1, on a port between 9420 and 9429. It only accepts requests from the Olyvr window that started it, using a random session token created at each launch, and rejects requests from websites and other apps. The app window can’t access your camera, microphone or location.

Deleting your data

• Remove a source to delete its documents from the workspace.
• Delete chats and projects from the sidebar.
• To delete everything, quit Olyvr and delete the data folder.

To delete your Olyvr account itself, see Delete your account.