Security & Privacy
CommitFox is designed from the ground up with privacy in mind. Your code stays on your machine. Always.
No External APIs
CommitFox uses local AI models to generate commit messages. Your code is never sent to external servers. There's no cloud dependency, no API calls, and no network requests during commit generation.
No Telemetry
Analytics are disabled by default. We don't track which commands you run, which files you commit, or how you use the tool. There's nothing to opt out of because there's nothing to collect.
Open Source
CommitFox is open source. You can audit the code, verify our claims, and contribute improvements. We believe transparency is the foundation of trust.
Offline Capable
Once installed, CommitFox works completely offline. Generate commits on a plane, in a coffee shop with spotty WiFi, or in a secure air-gapped environment. No internet required.
How We Compare
Frequently Asked Questions
Does CommitFox send my code anywhere?
No. CommitFox processes everything locally on your machine using local AI models. Your code never leaves your device during commit generation.
What data does CommitFox collect?
None. We don't collect any analytics, usage data, or personal information. The tool is completely silent in terms of data collection.
Can I use CommitFox in a corporate environment?
Yes. Since CommitFox works entirely offline and doesn't make external requests, it complies with most corporate security policies and air-gap requirements.
How does the AI model work locally?
CommitFox uses GGUF-format models that run entirely in your process memory. The model files are downloaded during installation and loaded locally when needed.