Legal
Privacy Policy
Last updated: June 13, 2026
This Privacy Policy explains what information Emulation LLC ("we," "us," or "our") collects when you use UltraCodey and the ultracodey.com website, how we use it, and the choices you have. Our guiding principle is simple: your account stores only what you can see in the portal, and your project work is not uploaded to Emulation account systems.
The short version. Your code, chats, memory, project files, and AI provider keys are not uploaded to Emulation account systems. When you authorize AI-provider or plugin work, relevant prompts, file snippets, or context may be sent directly from your device to the provider or integration you choose. Your account holds your profile, your progression (XP, achievements, usage time), basic security records, and messages from us. We do not sell your personal information.
Contents
1. Scope
This policy applies to the UltraCodey desktop application, the ultracodey.com website, and your UltraCodey account. It does not apply to third-party services you connect to UltraCodey (such as AI providers), which have their own privacy policies.
2. Information we collect
Information you provide
- Account details — your email address, display name, and a password. We store passwords only as salted, hashed values; we never store or see your plaintext password. If you sign in with Google, we receive basic profile information from Google to create and identify your account.
- Requests and messages — beta-access requests (email, optional name and note) and any messages you send us for support or appeals.
Information collected automatically (account-related)
- Security & device records — when you sign in, we record sign-in events and the devices used, including timestamps, an approximate location derived from IP address (such as city and country), and basic client information (such as browser or app). This is shown back to you for your own security visibility.
- Progression & usage — your XP, level, achievements, and total time spent in the app, which sync to your account so your profile is consistent across devices.
- App and version metadata — basic technical details needed to operate sync, such as the app version and a per-device identifier.
Sources of information
We collect information from you, from the desktop app or website when you use account features, and from service providers that help with sign-in, hosting, security, or email delivery. We do not buy personal information from data brokers.
Google sign-in. When you choose Google sign-in, our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We use that information only to create and operate your account; we do not transfer or use it for advertising, resale, or any purpose unrelated to providing the Service.
3. What stays on your device
The following are processed locally on your machine and are not sent to or stored by Emulation account systems:
- Your source code, files, and project data;
- Your chats, prompts, and the agent's working context;
- Your saved memory and skills;
- Your AI provider API keys and any sign-in tokens for AI services.
When you use AI features, requests are sent directly from your device to the AI providers you choose, using your own credentials. Those requests may include prompts, file snippets, or other context needed for the work you authorize. The requests do not pass through us, and the providers handle that data under their own privacy policies.
4. How we use information
- To create and operate your account and sync your profile and progression across devices;
- To provide security features and show you your devices, sessions, and sign-in history;
- To respond to support requests, appeals, and beta-access requests, and to send you account and service messages;
- To operate, maintain, protect, and improve the Service, including preventing fraud and abuse;
- To comply with legal obligations and enforce our terms.
We do not use your information for third-party advertising, and we do not sell personal information.
5. Legal bases (where applicable)
If you are in a region with data-protection laws such as the EU/EEA or the UK, we process your information on these bases: to perform our contract with you (providing the account and Service); our legitimate interests (security, abuse prevention, and improving the Service); your consent where required; and compliance with legal obligations.
8. Data retention
We keep account information for as long as your account is active and as needed to provide the Service. Beta-access requests, support messages, account messages, and security records are kept for the periods needed to operate the Service, prevent abuse, maintain records, and comply with law. When you delete your account, we delete or anonymize personal information associated with it within a reasonable period, except where we must retain it to comply with legal obligations, resolve disputes, prevent fraud or abuse, or enforce our agreements.
9. Security
We use technical and organizational measures to protect your information, including encryption in transit, salted password hashing, and optional two-factor authentication. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. You can strengthen your account by enabling two-factor authentication and using a strong, unique password.
10. Your rights & choices
Depending on where you live, you may have rights to access, correct, update, delete, or export your personal information, to object to or restrict certain processing, and to withdraw consent. You can edit your display name in the app or web portal, manage sessions and security from your dashboard, and request access or deletion by emailing ultracodey@gmail.com from your account email. We will respond as required by applicable law. You will not be discriminated against for exercising these rights.
Your U.S. state privacy rights
Depending on your state (for example, California under the CCPA/CPRA), you may have the right to know the categories and specific pieces of personal information we collect, the sources and purposes, and the categories disclosed to service providers; to request access, correction, and deletion; and to be free from discrimination for exercising these rights. The categories we collect are described in Information we collect — identifiers such as your email, account and profile information, internet or electronic-network activity connected to sign-in and security records, approximate geolocation derived from IP address, and usage records such as XP, achievements, and time in app. We use these categories for the purposes in How we use information and retain them as described in Data retention. We do not use or disclose sensitive personal information to infer characteristics about you.
Do not sell or share
We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under U.S. state privacy laws. Where applicable, we honor opt-out preference signals such as Global Privacy Control (GPC). You may exercise these rights — including through an authorized agent — by emailing ultracodey@gmail.com, and we will verify your request as required by law.
11. International transfers
We and our service providers may process information in countries other than where you live, including the United States. Where we transfer personal information from the EEA, the UK, or Switzerland to a country without an adequacy decision, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK Addendum where applicable). By using the Service, you understand your information may be processed in these locations.
12. Children
The Service is not directed to children, and you must meet the minimum age in our Terms of Service to use it. We do not knowingly collect personal information from children under 13, or from anyone below the age required to use the Service. If you believe a child has provided us information, contact us and we will take appropriate steps to delete it.
13. Changes
We may update this Privacy Policy from time to time. We will revise the "Last updated" date above and, for material changes, take reasonable steps to notify you. Your continued use of the Service after changes take effect means you accept the updated policy.
14. Contact
For privacy questions or requests, email ultracodey@gmail.com. We are the controller of the personal information described in this policy.