Privacy Policy

Our Privacy Principle: Local-First

9CLI is designed to run on your own computer. Your source code, prompts, coding-agent sessions, and project files stay on your machine. We do not receive them, and they are not transmitted to our servers.

When you use only the Free tier without signing in, 9CLI operates entirely on your local machine and does not send us personal information. We do not use analytics, tracking, or telemetry in the 9CLI application itself.

We do receive limited information when you create an account, sign in, or purchase a Pro subscription — the account, billing, device, and entitlement information necessary to operate the paid tier. This policy explains exactly what that is.

Information We Collect

a. Account information (only if you sign in).

When you sign in to use or purchase Pro, we receive, via Google Sign-In and Firebase Authentication:

• Your name and email address associated with your Google account;
• A unique user identifier;
• Authentication tokens used to keep you signed in.

b. Subscription and entitlement information.

• Your subscription tier (Free or Pro) and its status;
• Entitlement records used to determine what features your account may access;
• Records of device activations associated with your account (for the device limit), identified by randomly generated installation identifiers and public keys — not by hardware fingerprints, serial numbers, or similar persistent hardware identifiers.

c. Billing information (handled by Paddle).

Payments are processed by Paddle, our Merchant of Record. We do not collect or store your full payment-card details. Paddle collects and processes the information needed to take payment and comply with tax and financial regulations. Paddle's handling of your information is governed by Paddle's Privacy Policy. We receive from Paddle limited transaction and subscription-status information (such as whether your subscription is active, and an associated customer identifier) to keep your entitlement in sync.

d. Support communications.

If you contact us (for example at contact@9punk.dev), we receive the information you choose to provide, such as your email address and the contents of your message.

e. Security and operational logs.

Our backend (built on Google Firebase / Google Cloud) may process limited technical information — such as IP address, timestamps, and request metadata — as part of operating and securing the account and entitlement services. This is standard for operating an online service and is used for security, fraud prevention, and reliability.

f. Anonymous configuration checks.

9CLI periodically fetches current configuration values from our servers — such as pricing display, whether a Pro upgrade is available, and related presentation settings. This request is anonymous: it does not include your account, identity, device information, or any personal data. It is the same request for every user, comparable to loading a public web page, and it allows us to update pricing and availability without requiring you to reinstall.

What We Do NOT Collect

To be clear, 9Punk does not receive or store:

• Your source code, files, or the contents of your projects;
• Your prompts or the contents of your coding-agent sessions;
• Your terminal output or command history;
• Full payment-card numbers (these are handled by Paddle);
• Hardware fingerprints or persistent hardware identifiers.

How We Use Information

We use the information described above to:

• Provide and operate 9CLI's account, sign-in, and Pro features;
• Determine and enforce your subscription entitlement and device limits;
• Process and keep in sync your subscription and billing status (via Paddle);
• Communicate with you about your account, purchases, and support requests;
• Detect, prevent, and investigate fraud, abuse, and security issues;
• Comply with legal obligations.

We do not sell your personal information, and we do not use it for third-party advertising.

Third-Party Services

9CLI's account and billing functions rely on:

• Google / Firebase — authentication, database, and backend functions (Google Privacy Policy);
• Paddle — payments and Merchant-of-Record services (Paddle Privacy Policy).

Separately, when you run tools through 9CLI on your machine — such as Anthropic's Claude Code, or git — those tools may connect to their own services at your direction (for example, Claude Code communicating with Anthropic, or git pushing to a remote you configure). Those connections are initiated by you through those tools and are governed by their own privacy policies; they are not data collection by 9CLI.

Data Retention

We retain account, entitlement, and billing-status information for as long as your account is active and as needed to provide the service, comply with legal and tax obligations, resolve disputes, and enforce our agreements. You may request deletion of your account information as described below; some records may be retained where required by law (for example, transaction records for tax purposes, which Paddle also retains as Merchant of Record).

Your Rights

Depending on where you live, you may have rights over your personal information, including the right to access, correct, delete, or port it, and to object to or restrict certain processing.

• EU/EEA/UK (GDPR): You have rights of access, rectification, erasure, restriction, portability, and objection, and the right to lodge a complaint with a supervisory authority.
• California (CCPA/CPRA): You have rights to know, delete, correct, and opt out of the "sale" or "sharing" of personal information. We do not sell your personal information.

To exercise any of these rights, contact us at contact@9punk.dev. Note that for payment-related data, Paddle acts as Merchant of Record and may be the appropriate controller for certain information; we will help direct your request appropriately.

Security

We use reasonable technical and organizational measures to protect the information we handle, including Google Cloud/Firebase security controls, restricted access, and server-side enforcement of entitlement rules. Locally, 9CLI stores your sign-in credentials in a file in your user profile directory. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

Children's Privacy

9CLI is not directed to children under 18, and we do not knowingly collect personal information from them. If you believe a minor has provided us personal information, contact us at contact@9punk.dev and we will take appropriate steps to delete it.

International Transfers

We and our service providers (including Google and Paddle) may process information in the United States and other countries. Where required, appropriate safeguards are used for international transfers.

Changes to This Policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date and, for material changes, provide additional notice where required. Your continued use of 9CLI after changes take effect constitutes acceptance of the updated policy.

Contact

9Punk LLC
119 W Park Ave, Pharr, TX 78577
Email: contact@9punk.dev
Website: https://9CLI.dev