End-user licence for the Kodwen apps

01Publisher

The apps are published by Interactive Media Solutions S.R.L. (IMS SRL), CUI 37237457, Reg. Com. J18/241/2017, Str. 23 August nr. 1B, Et. 1, Ap. 8, Târgu Jiu, jud. Gorj, România. Store listings may show a different publisher account name (for example "dragoscv" on the Visual Studio Marketplace); the licensor is always IMS SRL.

02Licence

The source code of the desktop app, the Android app and the VS Code extension is licensed under the Apache License, Version 2.0 (apache.org/licenses/LICENSE-2.0). You may use, copy, modify and distribute it under that licence. The binaries we publish are provided under the same licence.

The `codai` name, logo and brand assets are trademarks of IMS SRL and are not licensed under Apache-2.0. Third-party components keep their own licences (listed in the NOTICE file and the app’s "About" screen). The on-device models of the Android app derive from Google Gemma and are provided under the Gemma Terms of Use.

03The hosted Service

The apps connect to the hosted Kodwen Service (gateway, identity, shared sessions) when you sign in. That use is governed by the Terms of Service (codai.ro/terms), the Acceptable Use Policy (codai.ro/acceptable-use), the AI & models policy (codai.ro/ai-policy) and the Privacy Policy (codai.ro/privacy). If you configure your own provider key (BYOK), the provider’s terms apply to those requests.

04Telemetry and crash reports

• Desktop: no analytics or telemetry SDK. Crash reports (error, stack trace, app version, OS, a random install id — never prompts or session content) are sent to Sentry in the EU only if you enable "Send crash reports"; it is off by default and can be switched off in Settings → Privacy.
• Android (phone and Wear OS): no analytics or advertising SDK. Crash reports (error, stack trace, app version, device model, a random install id — never prompts, messages, screenshots or account details) are sent to Sentry in the EU only if you enable "Send crash reports"; it is off by default and can be switched off in the app settings. Push notifications use Firebase Cloud Messaging only in builds configured with it.
• VS Code extension: no analytics. Crash reports (same content, never prompts, files or keys) are sent to Sentry in the EU only if you enable the extension’s "Send crash reports" setting and VS Code telemetry is on; it is off by default. Otherwise it only talks to the Kodwen gateway and identity service you configure.
• OS protection gate (all apps): the minimum-protection checks (UAC, SIP, Gatekeeper, screen lock, root…) run only on your device and their results are not sent. If you are signed in and allow agent tools despite a failing check, the app records that decision in your account audit log: check name, allowed/revoked, app, version and time.

05Updates

The desktop app checks codai.ro for signed updates and installs them when you accept (or automatically, if you enabled it); updates are verified with our signing key before they run. The Android app and the VS Code extension update through Google Play / GitHub releases and the Visual Studio Marketplace. Updates may add, change or remove features; an old version may stop working with the hosted Service when an API it relies on is retired.

06Your responsibility

The apps can run commands, edit files and operate other apps on devices you control, with the permissions you grant. Grant them only on devices you own or are authorised to use, review the actions you approve and keep backups. AI outputs may be inaccurate — check them before you rely on them.

07No warranty and liability

As stated in the Apache License 2.0, the apps are provided "AS IS", without warranties or conditions of any kind. The limitation of liability in the Terms of Service applies. Nothing in this licence limits rights that consumer law does not allow to be excluded, including the legal conformity of digital content (OUG 141/2021).

Questions: hello@codai.ro. Security reports: security@codai.ro.