Owlyn stores only local session and checkpoint data.
Do not store secrets in goals, notes, checkpoints, task descriptions, blockers, file-change notes, or validation results.
Owlyn v0.1 has no network calls, telemetry, auth, cloud sync, or background daemon.
Report security issues through GitHub issues until a dedicated policy exists: