Nhako Depot privacy notice

Last updated 3 November 2026. This covers the Nhako Depot app. The website has its own privacy notice.

The short version

Depot runs on your own computer. It has no accounts, no ads, no analytics and no tracking, and it sends nothing about you or your computer to us or anyone else.

What Depot reads

To show what is installed, it reads your computer's own records: the databases of dpkg, rpm or pacman, Snap and Flatpak, the lists of cargo, npm, pipx, Homebrew and Nix when you have them, and the launchers in your app menu. To find AppImages it looks at the names of files in ~/Applications, ~/AppImages, ~/Downloads, ~/Desktop, ~/bin and ~/.local/bin, without opening your personal files. All of it stays on your computer.

What it keeps

A small cache in ~/.cache/depot so it starts faster, and one setting in ~/.config/depot. Removing Depot with ./install.sh --uninstall deletes both.

When it uses the internet

Only to check for and install updates, and only through the tools your computer already uses for that: PackageKit and your distribution's software sources, the Snap Store, Flatpak (usually Flathub), and, if you use them, crates.io, the npm registry and Homebrew. These are the same requests your Software app makes. What those services log is covered by their own policies. Opening an app's website or Report a Problem opens your browser.

Reports you make

depot --list-only makes a list of what is installed. It goes nowhere unless you share it. It holds app and package names and the folders they are in, which can include your username, but not your personal files. The Troubleshooting page in the About window is shared only if you copy or save it yourself.

Your rights and contact

We hold no personal data from the app, so there is nothing for us to give you or delete. If you contact us, we handle what you send as the website notice explains, including your rights under Malaysia's Personal Data Protection Act 2010. Questions go to GitHub.

Ringkasan dalam Bahasa Melayu