Privacy & Security

PromptHub is local-first by default. Prompts, skills, rules, MCP entries, plugins, Agent configuration, and project files stay on your device unless you explicitly enable a remote sync path, a cloud account, or a third-party model call.

Local-First Storage

• The desktop app can organize assets offline.
• AI assets and Agent workspace files use local application data and workspace directories.
• SQLite supports indexing, search, and application state.
• Local workspace and application data remain the primary boundary unless you enable a remote path.

Main Password and Private Folders

PromptHub includes main-password protection and private-folder capabilities. These features reduce casual access to sensitive AI assets, but they are not a reason to store plaintext credentials, customer passwords, or production data that cannot be safely handled.

Skill Safety Scans

A Skill can instruct an AI tool to read files, run commands, or use external services. PromptHub can scan skills before installation or in bulk to flag suspicious content.

A scan is not a guarantee. Before installing an unknown skill, check whether it:

• Reads sensitive directories.
• Requests credentials or private source code.
• Includes destructive commands.
• Pretends to be an official package.

Third-Party AI Calls

Prompt testing, AI editing, skill translation, rule rewriting, and image analysis send relevant content to the provider you selected. Remove sensitive data first, or use an appropriate trusted private deployment.

Sync and Remote Copies

• WebDAV, S3, Self-Hosted Web, and PromptHub Cloud create different kinds of remote copies.
• Confirm the remote account, permissions, object scope, and retention behavior before enabling a path.
• Use one active online sync source for the same dataset; keep other paths as explicit backups.
• Review export files before sharing them, especially when they include attachments or project assets.

Continue with Backup & Restore and Account, Sync & Plans.