Data & Privacy
Anyy is local-first: the selected Profile Home is the canonical location for its configuration, memory, sessions, schedules, and operational state. External models, web services, MCP servers, and messaging platforms still receive the data required for the task you ask them to perform.
What stays in a Profile
Run anyy config to see the resolved Home instead of guessing it. Important paths include:
Path under <PROFILE_HOME> | Purpose |
|---|---|
config.yaml | Non-secret settings and credential references |
secrets/ | Anyy-managed credentials |
state.db | Sessions, messages, tasks, schedules, approvals, audit, and other durable state |
objects/ | Content-addressed durable payloads referenced by database records |
memory/USER.md | Durable facts and preferences about the user |
memory/MEMORY.md | Durable assistant memory |
SOUL.md, roles/ | Default and named Role identity instructions |
workspace/ | User and assistant working files |
skills/, system/skills/ | Profile-installed and bundled Skills |
channels/, cron/ | Channel and schedule files |
logs/, cache/ | Operational logs and rebuildable/cache data |
Named Profiles live under the configured Profile root and keep these resources independent. Nothing is shared automatically across Profiles.
Workspace is a context and artifact location. An authorized file or terminal tool can have broader reach according to its own policy, approvals, and runtime environment.
What can leave the host
Data may be sent externally when you use:
- a remote model provider for prompts, selected context, tool results, images, audio, or video;
- web search, public URL fetching, image generation, speech, or browser backends;
- MCP tools connected to another process or service;
- messaging Channels for inbound or outbound messages and attachments; or
- provider OAuth and API-key endpoints.
Only enable destinations you trust for the data involved. Keep secrets and unrelated private files out of prompts, attachments, references, memory, and Skill instructions.
Credentials
Supported setup and Dashboard flows store credential references in configuration and secret material under the Profile's protected secret storage. anyy config reports reference health without printing values.
Disconnect or clear credentials from the surface that owns them. If a credential may have leaked, revoke or rotate it at the external provider first, then update Anyy.
Backups
Normal backups include canonical Profile content such as configuration, memory, Workspace, Roles, Skills, schedules, Channels, scripts, and a coherent database snapshot. Temporary runtime files and caches are excluded.
Secrets are excluded unless you pass --include-secrets. Supported MCP/OAuth material is also included only in that secret-bearing mode.
Encrypt it, restrict access, and never upload it to an ordinary issue tracker or public file share.
See Backup & Restore for exact commands and restore guarantees.
Files and artifact delivery
Anyy can create files in the Workspace. To make one downloadable in a user surface, the artifact_export tool exports a Workspace-relative regular file of at most 50 MiB as a generated attachment that expires after 24 hours.
If export fails, the source Workspace file remains unchanged. A generated attachment is a delivery copy, not the authoritative source file.
Deletion and retention
Deleting a non-default Profile removes its entire Home after runtime and secret guards pass. Dashboard performs the forced, secret-purging variant; CLI requires explicit flags.
Role deletion archives an unreferenced named Role record so it is unavailable for new sessions. It does not delete the whole Profile.
Anyy's runtime has an internal session-deletion operation, but the current public CLI, TUI, and Dashboard do not expose a general session-delete action. Do not promise users that deleting a visible chat is available when the surface does not offer it.
External services keep data according to their own policies. Deleting local Profile data does not recall a message already sent to a provider or messaging platform.
Practical privacy checklist
- Use separate Profiles when people, accounts, or trust domains must not mix.
- Keep approval mode enabled for ordinary interactive work.
- Inspect Skills and MCP servers before enabling them.
- Attach or reference only the minimum source material needed.
- Exclude secrets from routine backups and protect any exception.
- Review configured Channels and pairing grants regularly.
- Rotate credentials immediately after suspected exposure.
See Security & Privacy for authority, approvals, Channel access, and incident response.