TERMS
OF USE.

NO WARRANTY

The software is provided “as is”, without warranty of any kind, express or implied, including but not limited to the warranties of merchantability, fitness for a particular purpose and noninfringement. In no event shall the authors or copyright holders be liable for any claim, damages or other liability, whether in an action of contract, tort or otherwise, arising from, out of or in connection with the software or the use or other dealings in the software.

That is the disclaimer from the MIT Licence the code ships under, restated here so it plainly covers the packaged application and not only the source.

FINDINGS ARE ADVISORY

Not authoritative.

Codescry’s output is produced by a statistical language model running on your machine. It is a starting point for your own judgement.

• Findings, severities and health scores can be wrong, incomplete or misleading. A clean report is not evidence that a project is correct, secure or production-ready — and a poor score is not proof that anything is broken.
• Codescry is not a security scanner, a licence-compliance tool, or an audit of record. Do not rely on it to satisfy a regulatory, contractual or customer obligation.
• Generated project ideas may resemble existing products or be encumbered by third-party rights. Verify novelty and freedom to operate yourself.
• You are responsible for reviewing every change you make on the strength of a finding. Read the diff before you commit it.

ACCEPTABLE USE

You agree not to use Codescry to:

• Scan code you are not authorised to read. Point it at directories you own or have permission to analyse.
• Violate applicable law, or the licence terms of the code you scan.
• Build or refine attacks against systems you do not own and have no written permission to test. Codescry surfaces weaknesses so they can be fixed.
• Circumvent the licence or acceptable-use policy of the language model you have installed — see (05).
• Misrepresent Codescry output as a professional audit, a certification, or the work of a human reviewer.

▸ Codescry runs entirely on your machine and reports nothing to us. This section states your obligations — it does not describe a control we are able to monitor or enforce.

YOUR DATA, AND THE NETWORK

Everything Codescry produces stays on your device, in the results folder shown in Settings → Data & privacy. We hold no copy and cannot recover it for you if you delete it. The full detail is in the privacy policy; the parts that carry an obligation for you are these.

Registry version checks. When the Outdated-tech axis is on, Codescry asks public package registries what the latest published version of a dependency is:

Only the package name is sent — no code, no file paths, no identifier for you or your machine beyond the IP address any HTTP request exposes. Two things follow. Package names can themselves be sensitive: looking one up tells that registry a dependency by that name exists in something you are building. And these registries are third-party services we neither operate nor control — npm, the Python Software Foundation and Microsoft respectively — each with its own terms, privacy policy, rate limits and logging. We make no promise about their availability, or about the accuracy of what they return.

Update check. Once per launch Codescry reads GitHub’s public releases endpoint to see whether a newer version of Codescry exists. It sends nothing about you or your projects, and it never downloads or installs anything on its own.

▸ Both are opt-in and revocable: “Go fully offline” stops them immediately, and with them off Codescry makes no network requests at all and stays fully functional. Traffic to the local model engine on 127.0.0.1:11434 is loopback — it never leaves the machine.

THE MODEL IS YOURS

Codescry does not include, distribute or host a language model. It connects to an Ollama engine that you install, running a model you download. You are solely responsible for that model, including:

• Its licence and acceptable-use policy. Model weights ship under terms distinct from MIT, and some restrict commercial or specific-purpose use. Choosing a model is accepting its terms.
• Its output. A model may be inaccurate, offensive, or reproduce training material. We neither generate nor review what yours says.
• Its provenance. Pulling weights runs third-party data through your system; fetch them from sources you trust.
• Its cost to your machine — compute, memory, disk, and the bandwidth of the download itself.

Ollama is a separate project under its own licence and terms. We are unaffiliated with Ollama, with any model provider, and with any package registry named above; naming them is not endorsement, and not a claim of support from them.

YOUR RESPONSIBILITIES

• Keep backups and use version control. Codescry proposes; you apply. Verify every diff before committing it.
• Secure your machine. Local-first means your results are exactly as protected as the device and OS account holding them.
• Honour any obligation you owe an employer, client or licence holder in respect of the code you scan.

CHANGES TO THESE TERMS

These terms may change with new releases. The version published here governs current use, and the “Last updated” date moves when the text does. Since we hold no contact details there is no mailing list to notify — this page is always the current copy.

INTERPRETATION & CONTACT

If any provision here is unenforceable, the rest stands. Where these terms and the MIT Licence differ about rights in the source code, the licence controls.

Questions: support@codescry.app or open an issue at github.com/makr07-sec/codescry/issues.

▸ This page mirrors TERMS.md in the repository, which is the canonical, version-controlled copy. Companion documents: the privacy policy for what does and does not leave your machine, and LICENSE.txt for the terms the source itself is under.