Privacy

The short version: the client is structurally incapable of reading your work.

The wait.money status line script reads exactly one local cache file that wait.money itself wrote, and prints it. The telemetry schema has no field capable of carrying source code, prompts, AI responses, file paths, or repo names; the server rejects unknown fields outright. The client source is published so you can verify this rather than trust it.

What we collect

• A random device identifier generated at install (nothing derived from your hardware).
• Ad events: event type, ad id, surface, model tier, timestamps, client version.
• Your email, if and only if you sign in (used for earnings attribution and payout).
• IP address transiently at request time, for rate limiting, fraud detection, and coarse geo (country). Raw IPs are not used for ad targeting.

What we never collect

• Source code, file contents, file names, or project structure.
• Prompts, AI responses, or chat history.
• Browsing activity, or anything outside the ad surfaces.

Local-only processing

Liveness checks (is a real coding session active) happen entirely on your device. No transcript content is ever transmitted.

Advertisers

Advertisers see aggregated, anonymized delivery metrics and cohort-level segments only. Never individual users, never raw events.

Deletion

Uninstall removes the client and restores your settings exactly. Email divykairothwork@gmail.com to delete your account; identifiers are removed within 30 days (financial records that the law requires us to keep are retained as required).

Working draft. A counsel-reviewed version ships before payouts open.