Privacy FAQ: How Thumper-Run Protects Your Data

Q: Does Thumper-Run collect any telemetry or analytics?

Telemetry behavior depends on the build and configured settings. Review the Privacy settings and deployment configuration before use; do not assume that every workflow is network-silent merely because inference runs locally.

Q: Where is my data stored?

Everything is stored locally on your device:

• App data: ~/.local/share/thumper-run/ (Linux), ~/Library/Application Support/thumper-run/ (macOS)
• Models: ~/.local/share/thumper-run/models/ or your configured model directory
• Generated outputs: Inside each app's output directory

No data is stored on any remote server unless you explicitly enable sync.

Q: What happens when I enable sync?

Current supported relay-assisted sync is server-assisted and uses encrypted transport. The relay may handle content or keys needed by the workflow. Private E2EE and relay-zero-knowledge guarantees remain gated.

Q: Can the service access my data?

Local-only data stays on your device until you enable a network feature. Current server-assisted workflows may make service data available to the relay as required to provide them. The E2EE design status documents the endpoint-held-key guarantees that are not yet shipping claims.

Q: What encryption does Thumper-Run use?

• At rest: AES-256-GCM for local storage encryption
• In transit: TLS 1.3 for network transport
• Gated E2EE design: BeeKEM/CGKA primitives under separate custody, admission, rotation, and release gates
• Key derivation: Argon2id for password-based key derivation

See the security docs for the full cryptographic specification.

Q: Do I need an account to use Thumper-Run?

Supported local-only workflows can run without an account after required apps and models are present. Accounts are required for selected network and cloud features. Key custody depends on the workflow; do not infer endpoint-only custody from account optionality.

Q: What about the AI models themselves – do they phone home?

The models in our catalog are open-source weights that run locally with no network access. Thumper-Run does not grant AI models internet access unless the app explicitly requires it (like Perplexica for web search). Network access is declared in the app manifest and visible before installation.

Q: How do I delete all my data?

Uninstall Thumper-Run and delete the data directory. On Linux: rm -rf ~/.local/share/thumper-run/. If you used sync, your encrypted data on the relay is automatically garbage-collected after 30 days of inactivity. You can request immediate deletion from Settings > Account > Delete Data.

Ready to try it? Download Thumper-Run free →