1. Who this policy covers
14d.space is the public name used for this website and its software publishing services. In this policy, “we” means the operator of 14d.space, reachable at the privacy email above.
This policy covers the website’s accounts, purchases, downloads, licence delivery and activation services, including its Meridian OS sales records. It also describes the data flows of Andromeda Git, Forge, Sentinel, Cluster, Scribe, Universe and Antivirus, and of Andromeda Nova on the web, in its desktop app and in its Android app (section 4).
Other products, including Andromeda Browser and Vault, and components used by Meridian OS may provide additional or product-specific privacy notices. Third-party websites, app stores, model runtimes and services you choose operate under their own terms. This policy describes information handled by our website and software; it does not describe every service installed on your computer.
2. Website, accounts and purchases
Some information comes from you, such as an email address or a support message. Other information is generated by a visit, transaction, account session or device activation.
| When you use | Information and purpose | Where it is processed |
|---|---|---|
| Pages and downloads | Request information, such as IP address, requested URL, browser/request headers, time, response status and download traffic. Used to deliver pages and files, protect the service, diagnose failures and understand traffic and performance. | Cloudflare hosts and delivers the website and downloads and provides security, operational logs and traffic statistics. Some pages request fonts from Google. |
| Your account | Email address, account identifier, earlier verified email aliases, creation time, password credential when configured, verification challenges, session records and recovery-code hashes. Used for sign-in, account recovery and linking purchases to the right account. | Our account service on Cloudflare. Passwords are stored as salted password hashes. Session credentials, verification codes and recovery codes are checked through stored hashes. Your unused recovery codes are also kept in private account storage so you can view them after a recent sign-in or have them emailed to your sign-in address; they are deleted when used, replaced, or when you delete your account. Resend delivers verification emails. |
| Account deletion | A fresh code sent to your current account email and an explicit confirmation authorize deletion of the active website profile and sign-in credentials. Sessions are revoked. Minimal deletion/security and billing-ownership records support safe cleanup and prevent old sessions from restoring access. | Our account service on Cloudflare, with verification email delivered through Resend. Necessary paid-order, receipt and original-licence records remain separate from the deleted active profile. |
| Checkout and payment | Product, edition, quantity, email, price, currency, transaction references and payment/refund/dispute status. Checkout can also ask for billing address, country, company or tax information for payment and invoicing. | Stripe provides hosted checkout and payment processing. We receive purchase and payment-status information for fulfilment. Full card details are entered with Stripe, rather than into our account service. |
| Licences and receipts | Original issued keys, licence identifiers, product and seat entitlements, update dates, purchase history, fulfilment status and email-delivery status. Used to supply the purchased software, recover purchases, prevent duplicate fulfilment and handle refunds or disputes. | Our purchase and licence services on Cloudflare, linked payment records in Stripe, and Resend for licence/receipt emails. Those emails can contain your licence key and receipt links. |
| Online device activation | For Scribe, Universe and Antivirus: your licence key, product-specific device identifier, computer name or supplied label, platform information, activation/last-check times and device-seat status. Used to activate eligible computers, enforce the purchased seat allowance and issue signed device tickets. | Our activation services on Cloudflare. Your account can show device records available from those licence services. Device identifiers and labels can link activation activity to a particular computer. |
| Privacy or support contact | Your email address, message, relevant order references and any files you choose to send. Used to answer the request, verify ownership where needed and resolve the issue. | The 14d.space operator and the email services involved. The privacy address on this page is a Gmail address, so Google processes messages sent to it. |
Git, Forge, Sentinel and Cluster verify their desktop paid keys locally. Their purchase records can be available in your website account, but local key verification does not produce a complete server-side inventory of the computers using them.
Cloudflare processes connection information as part of delivering and securing requests. Our account rate-limiting code uses a hash derived from the incoming IP address; that does not mean Cloudflare or operational logs cannot process the original connection information.
3. Information in desktop apps
The apps keep working files and settings on your computer. The following table explains important local records and the situations in which information is sent to a network service or another computer.
| Application | Information used locally | Connections and sharing |
|---|---|---|
| Andromeda Git | Repositories, source files, commits, local reviews/issues/wiki pages, workspace metadata, prompts, AI replies, proposed patches, build logs, artifacts, backups and provider settings. | Remote Git operations contact the remote you configure. Requested AI tasks send your prompt and selected file context to the chosen local model server, OpenAI or Anthropic. Update checks contact 14d.space. Local workflows run customer scripts with their own file and network access. |
| Andromeda Forge | Datasets, trained/imported models, preprocessing, job settings and logs, conversations, attachments, generated outputs, cached teacher answers, licence and provider settings. | Local engines process available local models. Choosing a remote teacher or model server can send prompts, datasets/examples, documents, images or audio to that endpoint. Model/runtime downloads and update checks contact their providers. Provider behavior depends on what you configure. |
| Andromeda Sentinel | Visible process names and executable paths, connection IP addresses/ports/host names, risk indicators, alerts, connection history, learned profiles, trusted/blocked entries and settings. | Reverse-DNS lookups use your operating system’s configured resolver. Optional AI explanations send network context to a configured loopback model server on the same computer. Sentinel’s supported AI connection is local, including its OpenAI-compatible server option. Purchase and update services use the Internet. |
| Andromeda Cluster | Cluster credentials, job commands, working directories, owner labels, node labels/capacity, scheduling history, execution metrics, output and logs. | Commands and outputs move between the coordinator and joined nodes. A configured completion webhook can send the full job record to your chosen URL. Cluster traffic is authenticated without transport encryption; use a trusted local network or a VPN. Purchase and update services are separate connections. |
| Andromeda Scribe | Imported audio/video, microphone recordings when used, transcripts, timestamps, edits, exports, speech models, jobs, settings and activation information. | The transcription workflow processes recordings locally with installed models. Purchase, initial device activation, later activation checks, additional model downloads and app updates contact online services. Files you export or send elsewhere follow your chosen destination’s practices. |
| Andromeda Universe | Settings, exploration/bookmark records, screenshots, trial/licence state, device activation tickets and downloaded astronomical data. | Full paid access uses online device activation and ticket refresh, with offline ticket validity limited to a maximum of 30 days after issue. App updates and any missing-data downloads contact their hosting services. |
| Andromeda Antivirus | Files accessed for inspection, file paths, findings, scan history, models/signatures, quarantine and restore records, monitored-folder settings and licence/device information. | The scanning workflow inspects files locally. Purchase and activation use online services; definition and app updates contact their providers. Windows background protection uses the configured local scheduled task and monitored folders. |
Optional cloud AI is a separate data flow. In Git and Forge, review the provider, endpoint and selected context before sending a request. Prompts and attachments can contain confidential code, personal information or other people’s information. The chosen service’s privacy terms and retention practices apply to what it receives. Local model runtimes can also have settings and network behavior of their own.
Recording, scanning, running jobs and sharing files can involve other people’s information. Use the permissions and consent appropriate to the material and destination you choose.
4. Andromeda Nova (web, desktop and Android)
Andromeda Nova is an AI chat, coding and agent service at 14d.space/nova. The same service is used by the website, the desktop app and the Android app (package space.andromeda.nova), which shows Nova inside the app.
- What you send and create: your messages and prompts, files and images you attach, Nova's replies and generated files (code, documents, images, audio, 3D models and other artifacts), projects, saved memories you allow, skills, task lists, background and scheduled tasks, Nova Git repositories you create, and settings. These are stored with your Nova account (or, without an account, with a random guest identifier in a cookie) so you can find them again on any device.
- Account and usage records: your 14d.space account email, plan, message and usage counts, cost and limit records, and security/abuse logs. Ratings and reports you submit on replies are stored to improve Nova and act on harmful content.
- Where it is processed: Nova runs on Cloudflare (hosting, storage and some AI features such as images, voice and backup models). Chat and coding replies are generated by Featherless, which receives the conversation context needed to answer. Code and commands you ask Nova to run execute on Nova's build machines or on computers you connect yourself (your desktop app or your own Nova runners). Connectors you enable (for example GitHub or Cloudflare) receive the requests Nova makes for you, under their own terms. Nova does not sell your information and does not use it for advertising.
- Android app: the app has no advertising or analytics libraries and asks for no location, contacts, camera or microphone access. It uses the internet to reach Nova, the notification permission (optional) to tell you when a background task finishes or needs approval, and the system file picker only for files you choose to attach. Files you download are saved to your device's Downloads/Nova folder. Sign-in cookies are kept on the device and are excluded from Android backups. Purchases are not offered in the Android app.
- Payments: Nova plans bought on the website are processed by Stripe (section 5).
Deleting Nova data: you can delete single chats, or all chats, tasks and notifications in Nova under Settings › Data. You can delete your 14d.space account at 14d.space/account (see Delete your website account). To have all remaining Nova data linked to your account erased as well, including saved memories, projects, repositories and usage records, email the privacy contact below from your account email; we confirm when it is done. Records we must keep for accounting, fraud prevention or legal reasons are kept only as long as needed.
5. Providers and sharing
Information is processed by the operator and the services needed for the functions described above. Important providers include:
- Cloudflare: website delivery, security, request/performance statistics, account and licence services, database storage and hosted downloads. Cloudflare privacy policy.
- Stripe: hosted checkout, payments, invoices and payment/refund/dispute records. Stripe privacy policy.
- Resend: verification, purchase and licence-email delivery, including delivery results. Resend privacy policy.
- Featherless: generates Andromeda Nova's chat and coding replies from the conversation context sent to it. Featherless privacy policy.
- Google: font requests on pages using Google Fonts, and messages sent to the Gmail privacy contact. Google privacy policy.
- Model downloads and AI services you select: for example, Hugging Face for requested model downloads, OpenAI, Anthropic, or another model-server operator. The information received depends on the download, endpoint, request and context selected in the app.
We may also disclose relevant information when required by law, to respond to a valid legal request, or to investigate abuse, protect security and resolve payment disputes. The information needed depends on the request.
These providers can process information in countries other than yours. Their notices describe their processing and protections. Contact us if you need information about the providers or transfer arrangements relevant to your account or purchase.
6. Cookies, statistics and local storage
The account service uses an essential secure, HTTP-only session cookie named __Host-14d_session, with a maximum age of 30 days. It lets the service recognize a signed-in session. Andromeda Nova sets one more essential cookie, __Host-nova_guest (a random identifier, up to 400 days), so that you can use Nova without an account and find your chats again in the same browser; it is removed when you sign in and your guest chats are moved into your account. A small notice on the site records in your browser's local storage that you have seen it. We set no advertising or tracking cookies. You can sign out, sign out other sessions through your account, or remove cookies in your browser. Blocking the cookie prevents account sign-in from working normally.
Verification codes are valid for 10 minutes. This limits their use for authentication; it is not a promise that every related operational record is automatically erased at that moment.
Cloudflare supplies hosting/security request information and traffic/performance statistics. Browser or provider features can affect which measurements are available. Some website pages load Google Fonts, which sends the font service the connection/request information needed to deliver those files. Third-party checkout and provider pages can use their own cookies and storage under their policies.
Desktop apps use local files or databases for settings, models, work, history and licences. Your browser and operating system may keep their own caches, downloads and records. Removing a website cookie does not delete an account, a purchase or a desktop app’s saved information.
7. Why information is used
We use information to provide requested accounts and software purchases, deliver keys and receipts, manage activation and update entitlements, recover purchases, respond to requests and operate the website. Security checks and operational statistics help prevent abuse, diagnose failures and understand service use. Payment records also support invoicing, tax/accounting duties and dispute handling.
Where data-protection law requires a legal basis, this processing relies on performing the service or purchase you request, legitimate interests in running and securing the service, applicable legal obligations, and consent where a particular optional activity requires it. You can decline optional cloud/model connections and choose which files or context to provide.
8. Security
The website uses HTTPS, account access checks, hashed authentication credentials and signed licence/device-ticket verification. These measures address specific risks; they do not make every stored record anonymous or guarantee that every system or network is secure.
Local protection differs between applications. Git uses the operating system’s secure-storage facility for saved provider API keys and refuses to save them when a suitable secure backend is unavailable. Forge can keep teacher/provider credentials in its local settings and settings backups. Cluster credentials grant access to joined computers, and its node traffic needs a trusted network or VPN. Protect app profiles, exports, backups and the computers that can read them.
Antivirus quarantine keeps recoverable file contents and original-path information. Its stored contents are obfuscated rather than encrypted, so protect that local storage and treat quarantined files as potentially harmful.
Keep licence emails and recovery codes private. When reporting an issue, send the minimum information needed and remove credentials or unrelated personal information from logs and screenshots. We can discuss a suitable way to provide further evidence if it is necessary.
9. Retention and deletion
Account, purchase, original-key and entitlement records support ongoing access, purchase recovery, accounting, fraud prevention and disputes. Automated account deletion removes the active website profile and sign-in credentials, while retaining necessary paid-order and licence records as described below. We do not apply one fixed deletion period to all records. Operational logs and provider records have their own retention arrangements. Contact us about the records relevant to you and any deletion or restriction request.
A session or code expiring means it can no longer authenticate you. It does not mean all account, purchase or expired-session records have been immediately purged. Signing out invalidates the relevant session; it does not cancel a licence or erase your purchase history.
Local retention depends on the app and your settings. Sentinel prunes connection history and closed alerts while running, generally retaining one day in Free or 90 days in Pro; open alerts and learned profiles are separate records. Other apps can retain projects, model caches, conversations, transcripts, job records, quarantine and backups until you remove them or a specific cleanup action applies.
Uninstalling an app does not necessarily remove its saved files or online purchase records. Review and back up important work before deleting a profile, model, transcript, quarantine item or backup. Deleting a local copy also does not remove copies you previously exported or sent to another service.
For example, deleting a Scribe job removes its job folder; original input recordings and separately exported copies can remain. Antivirus quarantine has explicit restore and permanent-delete actions rather than an automatic expiry for every item.
10. Your choices and rights
You can use available app controls to choose model providers, context files, recording, monitored folders, update options and local data actions. Your 14d.space account provides purchase review and supported email, password, recovery-code, session and device controls. Availability of device controls depends on the product’s activation service.
Depending on the law that applies to you, you may have rights to request access or a copy, correct information, request deletion or restriction, object to certain processing, receive portable information, or withdraw consent for consent-based processing. You may also raise a concern with your local data-protection authority.
Delete your website account
This is also how you delete an account you use in Andromeda Nova (on the web, the desktop app or the Android app from Google Play), because Nova signs in with your 14d.space account. To erase the Nova data linked to it as well, follow Deleting Nova data.
In Your account → Account settings → Delete your 14d.space account, choose Review account deletion to see the signed-in email and what will be retained. Choose Send deletion code for a fresh six-digit code sent to your current account email. Enter that code, type DELETE MY ACCOUNT and select Permanently delete account. The automated deletion applies to your 14d.space website account:
- Removed: the active account profile, password credential, recovery codes, pending email-change permissions and self-reported device labels. All signed-in sessions are revoked. If cleanup is interrupted, the service retries the unfinished work.
- Retained: necessary paid-order and receipt records, original issued licence keys, payment references, seat/update entitlements and minimal billing-ownership, deletion and security records. These support existing paid rights, accounting, purchase recovery, payment reconciliation and refunds or disputes.
- Managed separately: payment-provider records, refunds, subscription cancellation, online software activation seats, Vault cloud accounts/files and data saved by desktop apps. Deleting the website profile does not automatically change or erase these. Use the relevant service controls or contact us about a separate request.
Original paid keys remain subject to their existing licence terms. A later signup with a freshly verified email creates a new profile and can recover eligible purchases associated with that email. Old sessions do not restore the deleted profile.
Other privacy requests
To exercise a right or ask about your information, email jerryhellden932@gmail.com. We may need to verify that you control the relevant account or purchase before disclosing or changing records. Some transaction, security or legal records may need to be retained; we will explain the handling of your request and any applicable limits.
If you believe information about a child has been provided without appropriate permission, contact us so it can be reviewed.
11. Changes and contact
We will update this page when the described services or data practices change and show the effective date above. Relevant changes may also be communicated through the website, app or account contact where appropriate.
Privacy questions and requests: jerryhellden932@gmail.com.