Loading…
Loading…
Privacy
Last updated: 17 August 2026
The short version. What you do in the app stays on your Mac: your questions, your answers, your API keys and your history never reach us, because the app has no account and talks to no server of ours. If you buy Pro, that part is different — we then hold your email address and a record of your subscription, because a licence has to belong to somebody. This page is specific about both.
Nothing about what you ask. CluePilot is a native application that runs on your Mac. It has no account system, no analytics SDK, no crash reporter and no telemetry. Your questions, answers, conversation history, API keys, dictation audio and background text are never transmitted to us — there is no channel by which they could be. The one exception is a licence check, described under Licence checks below, which sends your licence key and nothing else.
When you ask a question, the app sends it — together with the system prompt, the response mode, any conversation context you have allowed, and your background text if you have entered any — directly from your Mac to the AI provider you selected, over HTTPS, authenticated with your own API key.
That provider then handles your data under their privacy policy, not ours. If you are using OpenAI, Anthropic, Google, xAI, Groq or OpenRouter, their terms apply to that request. We recommend reading them.
If you select Apple Intelligence or Ollama, the app makes no network request at all. The question is answered on your Mac.
Completed exchanges are saved to ~/Library/Application Support/CluePilot/conversations.json with 0600 permissions, readable only by your user account. They are never transmitted anywhere. You can search, delete individual conversations, or clear the whole history from Settings ▸ Privacy.
The microphone is used only while dictation is active, which happens only when you press the dictation shortcut or the Speak button. Transcription uses Apple's on-device speech recogniser: no audio and no transcript is uploaded, to us or to Apple. macOS will ask for microphone permission the first time.
The app reads your clipboard only when you press the clipboard shortcut or choose “Ask About Clipboard” from the menu. There is no polling timer and no change observer anywhere in the code — between those moments the app does not look at what you have copied.
Anything you enter in Settings ▸ You is stored in your local application preferences and included in the prompt sent to your chosen provider — exactly like the question itself. Do not put anything there you would not send to that provider.
Buying a subscription is the one part of CluePilot that is not anonymous. Checkout is handled by Lemon Squeezy, who act as merchant of record: they take the payment and handle sales tax. Your card details go to them and never to us — we never see or store a payment method.
When a purchase, renewal, cancellation or refund happens, Lemon Squeezy notifies our server, and we keep the following in our database (hosted on Supabase):
We use this only to issue and renew your licence, to answer support questions, and to keep our own records straight. We do not sell it, share it for advertising, or use it to profile you, and no usage data from the app is ever attached to it.
Your licence key is a signed token the app verifies on your Mac, with no network request. Because a subscription renews and can be refunded, the app does contact one endpoint of ours to exchange a key for an updated one: near expiry, and otherwise at most about once a fortnight.
That request contains the licence key and nothing else — no device identifier, no questions, no usage counts, no telemetry. The key itself carries the email it was issued to, so that request does tell us that this licence is still in use. Your session allowance is counted entirely on your Mac and is never reported to us. If the endpoint is unreachable, the app carries on working.
The site uses no cookies and no third-party analytics. It records its own page-view counts: the page path, the referring site if you arrived from one, a coarse country supplied by our CDN, your browser's user-agent string, and a timestamp. We do not store IP addresses and there is no identifier that links one visit to another, so these counts cannot be traced back to you.
The contact form stores the name, email address and message you submit, so we can reply. That is all it collects.
Purchase and licence records are kept while your subscription is active and afterwards for as long as we are required to retain business records; Lemon Squeezy, as merchant of record, keeps its own copy under its own policy. Contact messages are deleted once the conversation is finished. Page-view counts are aggregate and contain nothing to delete.
You can ask us what we hold about you, ask for it to be corrected, or ask for it to be deleted — write to the address below. Deleting your purchase record cancels the ability to renew or reissue your licence, so we will confirm before doing it. Nothing needs deleting from the app: clearing it from your Mac is entirely in your hands, under Settings ▸ Privacy.
CluePilot is not directed at children under 13, and we do not knowingly collect personal information from them.
If this policy changes, the date at the top of this page changes with it.
Looking for the plain-language version? Privacy by design walks through the same ground without the legal register.