Privacy Policy

cream is an agentic coding environment, a desktop app and command-line tool that plans, writes, and refines code alongside you. This policy explains what information cream (“we,” “us”) collects when you use the app, the website, and the optional rewards program, and the choices you have. It applies to [Cream Technologies, Inc.] and the cream services.

Privacy is a core design goal, not an afterthought. We built cream to do its job while seeing as little of your work as possible.

We collect only what we need to run the service, support you, and operate the optional rewards program:

• Account details. Your name, email address, and authentication identifiers when you create an account or sign in with a third-party provider.
• Usage metering. Token counts and timestamps for each model request, the numbers that drive your usage readout and, if you opt in, your rewards. We do not store the contents of those requests.
• Device & diagnostics. App version, operating system, language, and crash or error reports used to keep cream stable. You can disable diagnostics in Settings.
• Billing. The information our payment processor needs to charge you for your subscription. We do not store full payment-card numbers. Moo'lah is an in-app score rather than money, so there is no payout and we collect no payout or tax details for it.
• Ad interactions. Ads are on by default in the desktop app, and while they are on we record aggregate counts, impressions and dismissals, to cap frequency and calculate what you accrue. No interaction data is collected once you turn ads off in Settings.

cream does not store, sell, or train any model on:

• ✓Your source code, files, or repository contents.
• ✓Your prompts, instructions, or chat with the agent.
• ✓The model output or generated code returned to you.

This content is processed to fulfill your request and is not retained by cream for any other purpose.

To plan and build your projects, cream sends your requests to large language models through OpenRouter, a model gateway that routes to providers behind the top models available in the app. When you run the agent, the prompt and the code context needed to answer it are transmitted to OpenRouter and to the model provider you select.

That processing is necessary to generate a response and is governed by OpenRouter’s and the underlying provider’s own privacy terms. We pass through only what the request needs and do not keep a copy. Where a provider offers a no-logging or zero-retention route, cream prefers it.

Ads and earning are on by default in the cream desktop app, and you can turn them off at any time in Settings. Once off, no ad or sponsor data is collected and there is no ad chrome anywhere in the product.

While ads are on, sponsors’ creative is shown between turns and we record aggregate impression and dismissal counts to cap frequency and calculate what you accrue. We share aggregate, de-identified performance data with advertisers, never your identity, your code, or your prompts. You can switch rewards off globally, pause them, or limit them by format at any time in Settings.

We use the information above to operate and improve cream, to authenticate you, show your usage, run the rewards program, keep the app secure and stable, provide support, and meet legal obligations. We do not use your content to train models, and we do not sell your personal information.

We share information only with providers who help us run the service, under contracts that limit their use of it:

• OpenRouter & model providers, to process your requests and generate responses.
• Payment processors, to charge your subscription. Moo'lah is an in-app score with no payout, so nothing about it is sent to a payout or tax processor.
• Cloud hosting & infrastructure, to run the accounts and metering backend.
• Analytics & error reporting, to keep the app stable, where you have not disabled diagnostics.

We may also disclose information if required by law, or in connection with a merger or acquisition, in which case this policy continues to govern your data.

We keep account and metering records for as long as your account is active and as needed to provide the service, then delete or de-identify them within a reasonable period, except where a longer term is required for tax, accounting, or legal reasons. Request contents sent to models are not retained by cream.

We protect your data with encryption in transit, access controls, and least-privilege practices. API keys you provide are stored securely on your device. No method of transmission or storage is perfectly secure, but we work to protect your information and to notify you if a breach affects you, as required by law.

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can manage diagnostics and the rewards program in Settings, and you can close your account at any time.

To exercise these rights, contact us at privacy@cream.dev. We will not discriminate against you for doing so.

cream operates globally, so your information may be processed in countries other than your own, including the [United States]. Where required, we use appropriate safeguards, such as standard contractual clauses, to protect data transferred across borders.

cream is intended for developers and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

We may update this policy as cream evolves. When changes are material, we will update the date above and notify you in the app or by email. Continued use after an update means you accept the revised policy.

Questions about privacy? Reach the team and we’ll help.

[Cream Technologies, Inc.]

Privacy: privacy@cream.dev

Mail: [street address, city, postal code]