What leaves your computer

Kitewell runs on your computer. Your workflows, run history, logs, secrets, and sign-ins stay in a folder on it. Nothing goes anywhere unless a step, a sync, or a sign-in you set up sends it.

This page shows where data can go, and how to stop each one.

Where data can go

Your computer

Kitewell (engine: Dagu)

Workflows and their change history
Run history, logs, output files, screenshots
Secrets, encrypted
Mailbox and website sign-ins
Conversations with the assistant

The AI model you chose
Sends
Prompts, the text of pages a website step reads, screenshots a desktop step takes, and your conversations with the assistant.
When
A step uses AI, or you use the assistant.
To stop it
Choose a model on a server of your own for each AI feature; then this stays inside your network.
Your own systems and websites
Sends
What the steps type, upload, and send.
When
A workflow runs, exactly as you built it.
To stop it
Remove the step.
Your mail server and alert channels
Sends
The email a step sends. For an alert: what happened, the workflow, and a link back — never a run's output.
When
You connect a mailbox or add an alert channel.
To stop it
Disconnect the mailbox, or remove the channel.
Dagu Cloud, run by Descarty
Sends
Your plan, the Kitewell version, and this computer's name and ID. For a synced project: its workflows and the names of its secrets, never their values, and each run's status with the names of its failed steps. For Kitewell's included model: each request, which Dagu Cloud passes to OpenRouter. For the assistant's web search: the words of each search, which Dagu Cloud passes to Serper and does not keep.
When
You sign in, sync a project, use the included model, or the assistant searches the web. The free plan needs no account and sends nothing.
To stop it
Sign out, or stop syncing the project. The workspace owner can turn run status off in Dagu Cloud.
ChatGPT or Claude, through Kitewell's relay
Sends
What the app asks Kitewell for: workflows, runs and their logs, sheets, knowledge. The relay passes it on and keeps none of it.
When
You connect an app.
To stop it
Turn remote access off, or revoke the app.

Kitewell sends nothing else. There is no usage tracking, no crash reporting, and no analytics. Descarty receives the data your runs work on only in the requests you send through Kitewell’s included model or the assistant’s web search. The one other request is a version check, which carries nothing about you.

What never leaves

Secret values. Encrypted on this computer, masked in logs, and never exported, backed up, or synced. A synced project carries a secret’s name; each computer holds its own value.
Sign-ins. Mailbox connections, saved website sign-ins, and SSH keys are encrypted or kept in a file only your user can read, and left out of backups.
Run logs and output. Kept in the data folder for 30 days by default. A synced project reports each run’s status and failed step names, never its parameters, logs, output, or sheet values.
Excel files. Read and written in place. Cells leave only if you ask a model or a connected app to read them.

Choose where AI runs

Every AI feature uses a model you added under Agents & models, or Kitewell’s included model. On a computer signed in to Dagu Cloud, the included model needs no key: its requests go through Dagu Cloud to OpenRouter. A server you run yourself, such as Ollama, keeps prompts, page text, and screenshots inside your network.

A password a website or desktop step types is written as %name%, so only the name reaches the model.

Four things to know

Workflows run with your permissions. A command step can read anything you can, so only run definitions and commands you trust.
A desktop step’s screenshot shows the whole screen, other windows included. Close what should not be seen.
Email and webhook requests are untrusted input: text from them can steer a command or an agent. Review & run warns you when a workflow does that.
Backups and exports are not encrypted. They leave secrets and sign-ins out, but hold everything else as written.

For a security review

Descarty’s security page summarizes this for IT and security reviews, and its security overview answers the questions security questionnaires usually ask.

Data flow reference lists every destination, with addresses, sizes, retention, and how each is encrypted.