Data and network

noomoo runs on your machine, in your repository. The public package contains no code that sends telemetry, no analytics and no crash reporting, and no command contacts a server operated by the authors of noomoo. The full statement is the privacy policy; this page lists the same facts in the form of what is written, what is called and what is sent.

What noomoo writes outside of setup

File	Where	What it holds
docs/validation/events.jsonl	Your repository	The run log: for each command the subcommand, the exit code, the signal, the duration, the noomoo version and the name of the npm script. Arguments are not written. The event command adds phase marks with the task key, the phase, the mark and the outcome. It is created only if docs/ exists, it is ignored by git after setup, and it is never sent anywhere.
trusted-repos.json	User settings directory (~/.config/noomoo or NOOMOO_CONFIG_DIR)	The repositories you consented to; see Trust model.
identity-cache.json	User settings directory	Your GitHub login, a short fingerprint of the token used to look it up and the time of the lookup. The entry is valid for ten minutes. The token is not stored.

The checks also write their own artifacts to docs/validation/ (the snapshot STATUS.md, the history and the findings), and the gates write reports to docs/tasks/reviews/. They stay in the repository.

What noomoo connects to

noomoo opens no network connection of its own except the calls to the GitHub API below. Everything else runs locally.

• GitHub API. merge-green, the merge and pull request checks of the CI workflow, identity, stamp and gate-accept call the GitHub API (api.github.com, or the address in GITHUB_API_URL; the check of commit signatures uses api.github.com only) with a token that you or your CI provide. The token is read from GH_TOKEN, GITHUB_TOKEN or the login of gh. noomoo does not send it anywhere else, but the processes it starts, including the Claude CLI, inherit your environment.
• Tools on your machine. Some commands run git (including git fetch), gh or claude. phase-check asks gh for the state of the current pull request, and identity asks gh for your token. These tools talk to their own services under your accounts and follow their own terms.

What is passed to the Claude CLI

Three commands start the Claude CLI installed on your machine and pass it text from your repository, and only when you run them. The table lists the text of the prompt. The CLI is started as an agent in the directory of the repository, read-only: noomoo starts it with only the read tools (Read, Grep, Glob) and without MCP servers, with hooks switched off and without the settings files of the repository, so it has no tool to write files, run commands or fetch from the network. It can still read other files of the repository, including secrets such as a .env file, and what it reads goes to the provider of the Claude CLI. Whether it may read outside the repository depends on the permission rules of your own Claude CLI settings. It inherits your environment:

Command	What is passed
task-ready	The task document, its feature, the whole files of the requirements and use cases it covers, the data and architecture documents and decisions it names, the status of the tasks it depends on, any drift from its sources, and the readiness rubric. A repeated run on an unchanged document reuses the accepted review and does not call the model.
plan-ready	With --judge or --strict (without them the command does not call the model): the plan, the same task context as above, excerpts of the files that the plan names with file:line anchors (source code), the bodies of the architecture slices it names, and the rubric.
estimate	The text of the task document and the estimation rubric.

What the provider of the Claude CLI does with that text is governed by your agreement with the provider, not by noomoo. Before you run plan-ready with --judge, look at the anchors of the plan: the lines they point to are passed with it.

Questions

For the policy in full, see Privacy. To report a security problem, follow Security.