Code signing policy
Free code signing provided by SignPath.io, certificate by SignPath Foundation.
What is signed
- The Quo desktop app for Windows (
Quo.exe) and its installer, for each release. Both are built from the source code at github.com/quo-ai/quo by GitHub Actions (the release workflow), and every release is approved by hand before it is signed. - Parts made by others that Quo ships unchanged, such as llama.cpp’s engine, are not signed by us.
- The Mac app is not notarised, because that needs a paid Apple account: Support says how to open it the first time. The Android app is signed by Google Play.
Who does what
- Committers and reviewers: the members of the quo-ai organisation on GitHub. Changes from anyone else are reviewed in pull requests before they are merged.
- Approvers: the owners of the quo-ai organisation, who approve each release before it is signed.
Privacy
Quo runs AI models on your computer. What you type stays on it unless you choose a cloud model or a model you reach with your own account, and every reply shows where it ran. Without being asked, the desktop app contacts only GitHub, once when it starts, to check for a new version (turn this off in the Help menu: Check for Updates at Start-up), and Quo’s server, for the list of cloud models. The installer says the same before it installs. Everything else is in the privacy policy.
Security problems
Report them privately, as SECURITY.md describes.