Security
Built so every app can only do what you say it can.
Oikou keeps your apps and their data on a computer you own. Each app runs in its own container and reads another app’s data only through a connection you approved and can revoke, with every cross-app read written to a log. You sign in to Claude or ChatGPT on Anthropic’s or OpenAI’s own page, so Oikou never holds your AI credentials.
Where does Oikou keep my data?
On your own computer, in your Personal Cloud. It goes to your AI provider only when you ask, or when an app you’ve allowed uses your AI in the background.
Can one app read another app’s data?
Only if you allowed it. Every app runs in its own container with only the access you grant it. An app can’t reach your other apps’ data unless you allow the connection.
How do app permissions work?
Like the permissions on your phone. Apps ask for exactly what they want to read, you approve each one at install, you can revoke any of them at any time, and every cross-app read is written to a log you can read.
Does Oikou see my Claude or ChatGPT login?
No. You sign in on Anthropic’s or OpenAI’s own page. Oikou runs their own unmodified agents and never sees, stores or reuses your credentials.
Background AI is visible per app and can be switched off per app.
What can someone I share an app with see?
Only the app you shared with them. Guests sign in with a one-time code and see nothing else. The invite tells them the app runs on your computer and that you can see what they store in it.
How do my devices reach my computer?
Private mode connects just you and your devices over Tailscale, encrypted end to end between your devices and your computer.
Shareable mode adds a private, access-controlled link for the people you invite. That traffic passes through Cloudflare on its way to your computer, so Cloudflare’s network handles it in between.
Is Oikou open source?
In part. The apps are open source (MIT). Oikou Host is source-available: you can read and run it, but not host and resell it.
Are my apps backed up?
At launch, Oikou takes nightly local snapshots and every app can export its data. Keep a copy somewhere else; off-site backup isn’t built yet.
How do I report a security issue?
Found something? Email security@oikou.app.
Oikou is early software, provided without warranty, and self-hosting means you are the administrator. Apps are isolated from each other, you grant every permission yourself, and you can audit what happened. Anything connected to the internet carries some risk, including this.
Security questions
Does Oikou include AI?
No. Oikou runs Claude Code or Codex on your own machine, signed in with your own plan or API key. Your usage comes from your own plan and is subject to its limits. That includes background use by apps you’ve allowed.
Does my AI run in the background?
Only for apps you allow. Some apps, like Pipeline, can use your AI in the background. You can see which ones do and switch it off for any app. Background use counts toward your plan’s limits.
Where is my data stored?
On your own computer. It goes to your AI provider only when you ask, or when an app you’ve allowed uses your AI in the background.
Is this against Anthropic’s or OpenAI’s terms?
Oikou runs their own unmodified agents on your machine, and you sign in with your own plan on their own page. Oikou never handles your AI credentials.
Which AI plans does Oikou work with?
Claude and ChatGPT. Oikou runs Claude Code or Codex on your own computer, signed in with your own Claude or ChatGPT plan, or with your own API key. There is no second AI subscription to buy, and everything Oikou does counts against your own plan’s limits.
Can my AI use what my other apps know?
Yes. Your own Claude Code or Codex, signed in with your plan, can answer a question in one app from what all of them know — tonight’s dinner from your training, your recipes and your grocery list — using only the connections you approved. The apps and their data stay on your computer.
Is there a safer way to give an AI agent access to my personal data?
Oikou gives your AI structured apps with explicit permissions instead of your whole machine. Every app runs in its own container, asks for exactly what it wants to read from the others, and you approve each connection at install, can revoke it at any time, and can read a log of every cross-app read.
Ready to try it? Get Oikou.
Oikou Host is free to run yourself. Downloads are behind sign-in with your Oikou account.