Privacy & data

Wikai is local-first. The short version: your wiki stays on your disk, and the things that do leave your machine are only what’s needed to deliver updates, billing, and the agent you chose to connect.

Stays on your disk

Your wiki content — pages, raw sources, ingested artefacts.
Your chat transcripts.
Your work documents and research notes.
We collect no analytics, no telemetry, no search queries or page-view tracking.

Leaves your machine (and why)

Update checks — to tell you about new versions; the update server logs an IP for up to 30 days.
Your agent — when you use the chat sidebar, your prompts and the relevant wiki context go to the agent you connected, under its provider’s terms: Anthropic for Claude Code and the Anthropic API, OpenAI for Codex, OpenRouter and the model’s own provider for OpenRouter. With llama.cpp or vLLM they go to the server you pointed Wikai at — this machine, one you own, or one you rent — and nowhere else; the Settings tab states which of those it is, derived from the address you typed.
Billing — for Supporter customers, payment and license details are handled by Paddle.
OCR models — fetched once, the first time you ingest a scanned page, and checked against a known checksum before use. The embedding model behind semantic search ships inside the app.
Web pages you fetch into a wiki go to the address you gave, which has to be on the public internet: addresses on your own machine or local network, and redirects to them, are refused.

An external agent reaches the wiki only through the local MCP endpoint, which is bound to this machine, requires a bearer token, and refuses requests that come from a browser page.

Internet search is off by default

Wikai runs wiki-only unless you turn on internet search and opt in for a conversation. When you do, your search queries route through an external search provider (Tavily or Brave) — not your model backend, and not us — and any harvested pages are labelled and marked unapproved until you approve them, so they never quietly become part of an answer.

More detail

The full, plain-English policy — including the sub-processor list and your rights — lives on the privacy page.

Last updated 2026-10-07.