Privacy and storage in Lerix

With end-to-end encrypted sync, your Lerix workspace is encrypted before it leaves your device. Lerix stores encrypted data and required sync metadata, but not the keys to read it. Synced chats, files, images, workspace data, and API keys can only be decrypted on devices where you sign in and unlock your workspace.

Local-only storage

When you are not signed in, the API-key storage selector is locked to This device. Signed-out keys and chats are local only and are not part of account sync.

End-to-end encrypted sync

Your Lerix password unlocks your workspace key on your device. Your raw Lerix password, workspace key, recovery key, and decryption keys are not sent to Lerix.

Because Lerix does not have those keys, Lerix cannot read your encrypted synced data or recover it for you. Keep your recovery key safe. If you lose both your Lerix password and recovery key, your encrypted synced data cannot be decrypted.

• Chats, files, images, workspace data, and API keys are encrypted on your device before sync.
• Free accounts include encrypted API-key sync. Pro accounts also include encrypted chat, file, image, and workspace sync across devices.
• When an account reaches its encrypted sync quota, Lerix blocks new synced writes instead of deleting synced data. Local-only use remains available where safe.
• Signed-out local mode is different: API keys stay on this device and are not part of encrypted account sync.

AI service API calls still go directly from the client to the AI service where that access path is supported. Codex Relay is the separate Pro desktop relay feature.

Temporary Chat

Temporary Chat is an in-memory chat surface for conversations you do not want saved as normal chat history. Turn it on before sending the first message.

Optional cookies and analytics storage

Lerix exposes optional PostHog EU cookies and local storage in Privacy settings. Optional cookies can stay off while Lerix still counts privacy-preserving page views and sanitized source tags.