Skip to content

Privacy Policy

Last updated: 7 October 2026

Olivium Software

Introduction

Agent Mac is developed and operated by Olivium Software ("we", "our", "the app"). Agent Mac is a native macOS application that runs AI agents locally on your computer. We are committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights. The policy also covers Agent Browser, our browser-automation app, Agent Remote, our free iPhone app, and Talk to Mac on this website, each in its own section below.

What Data We Collect

API Keys

Your AI provider API keys (Anthropic, OpenAI, etc.) are stored in your macOS Keychain and are never transmitted to our servers. Two settings put copies anywhere else, and both are off until you switch them on: "Include, encrypted" in backup settings adds a copy to your backups, encrypted with a passphrase you choose, and cloud GPU key sharing copies your cloud GPU keys to your other Macs through iCloud Keychain.

Conversations & Files

All conversations, agent actions, file contents and shell command outputs are stored on your Mac. Copies can also be kept in places you control. Agent Mac's backups are on by default and run once a day. They go to your own iCloud Drive if you are signed in to iCloud, and otherwise to a folder on your Mac. In Settings you can send them to your own iCloud storage or to a folder you choose, change how often they run, or have them run only when you ask. Backups leave out your API keys and saved logins unless you choose to include them, encrypted with a passphrase you set. If you use Agent Remote, it keeps a copy of your conversations on your paired iPhone (see below). We do not have access to any of your local data.

AI API Requests

When the agent runs, requests are sent directly from your Mac to your chosen AI provider (e.g. Anthropic, OpenAI, or a local Ollama instance). These requests do not pass through our servers. Your AI provider's own privacy policy applies to those requests.

What the App Sends to Us

Your conversations, files, prompts and API keys are never sent to us. The app contains no analytics and no usage tracking. It contacts agentmac.app only for the following.

  • Free trial. While unlicensed, the app sends a one-way hash of your Mac's hardware identifier when it starts, so a trial cannot be restarted by reinstalling. We keep the hash and the date it was first seen for up to 400 days. The hash cannot be turned back into the identifier.
  • Activation. When you enter a licence key, the app sends the key and a separate one-way hash of your Mac's hardware identifier. We store both with your licence, so the key works on one Mac at a time.
  • Licence checks. While licensed, the app confirms the key when it starts, about every six hours, and when you return to it. If our server cannot be reached, the app keeps working.
  • Updates. About once a day the app fetches a small file to see whether a newer version exists. Nothing about you is sent.
  • Connector requests. Only if you use "Request a connector": the name of the service and any note you type.
  • Connector sign-in. Only when you sign in to a connector whose service requires a web address to finish signing in (today, Slack): after you approve, the service sends your browser to agentmac.app/oauth/callback with a one-time sign-in code, and that page immediately hands it back to Agent Mac on your Mac. The page does not save the code, and the code cannot be used without a one-time key that only Agent Mac holds.

As with any website, our hosting provider sees the IP address a request comes from. We use it briefly to limit abuse and do not store it with your licence.

When You Buy

Payment is taken by Stripe; we never see your card details. We store your email address with your licence record so that we can send your key and help you recover it. The record holds your email, your licence key, the Stripe checkout reference, the hashed Mac identifier, and the dates the key was activated or deactivated. We keep it for as long as the licence exists, because the licence does not expire. You can ask us to delete it by writing to hi@agentmac.app; the licence will then stop working.

Website Analytics

This website (separate from the app) uses privacy-friendly analytics to understand which pages and buttons people use — for example, how many trial downloads start — so we can improve it. Vercel's analytics are aggregate and cookieless. Any Google advertising or analytics cookies are set only if you accept them in the cookie banner; decline and none are stored. None of this identifies you personally.

What We Don't Collect

  • Your name or address — no account is required (we hold your email only if you buy)
  • File contents or filesystem data
  • Shell command history or outputs
  • Browsing activity performed by the agent
  • Conversation history or prompts
  • Your Mac’s serial number or hardware identifier (only a one-way hash, as described above)
  • Location data

Third-Party Services

Agent Mac connects directly to these services, and only for the features you use. These requests don't pass through our servers, and each service's own privacy policy applies:

  • AI models. Anthropic, OpenAI, Google Gemini or Moonshot Kimi, with your own key. Or open models on your own Ollama or llama.cpp server, or on a cloud GPU you rent (RunPod, Vast.ai, Lambda, Verda (DataCrunch) or any other provider). Ollama or llama.cpp running on your Mac, and Apple's on-device model, keep everything on your Mac.
  • Voice. Apple's speech recognition turns what you say into text. It runs on your Mac when your language supports it; otherwise it uses Apple's speech service. OpenAI's Realtime voice and its reading voice send your speech, or the agent's replies, to OpenAI. If you add an OpenAI key and haven't chosen these settings yourself, Agent Mac switches both to OpenAI and tells you. You can switch back in Settings → Voice.
  • Web search. DuckDuckGo, or Bing through the agent's browser if a search is blocked, or Brave if you add your own Brave key. Websites the agent opens for you see that visit, as with any browser.
  • Images. OpenAI or Google, with your key.
  • Connectors (MCP servers) you add.
  • Your iCloud. If you use iCloud Drive, your agent is backed up there once a day unless you choose another place in Settings → Data.
  • Downloads, only when you use those features: the llama.cpp runtime and skills you install from GitHub, a starter model from Hugging Face, and Node.js from nodejs.org.

Privacy policies: Anthropic · OpenAI.

Who Processes Data for Us

Stripe (payments), Resend (licence emails), Upstash (the licence database) and Vercel (website hosting, server logs and website analytics). Each handles only what it needs for that job.

Talk to Mac (this website)

On Talk to Mac, if you speak, OpenAI turns your recording into text. If you type or tap a suggestion, that step is skipped. Anthropic's Claude writes the reply, and OpenAI turns the reply into speech. We do not keep your recording. Upstash holds the text of the conversation until about 30 minutes after your last message. To limit abuse, it also holds your IP address and a count of that day's conversations for about a day. A short-lived cookie keeps the conversation together. The privacy policies for OpenAI and Anthropic are linked above.

Your Rights

You can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Write to hi@agentmac.app from the address you bought with. If you are in the UK or the EU you also have the right to complain to your data protection authority.

Local Data Storage

App data is stored on your Mac: mainly in ~/Library/Application Support/AgentMac, with your standing instructions in ~/.agentmac and your settings in ~/Library/Preferences/com.agentmac.app.plist. To remove it, quit Agent Mac, move it from your Applications folder to the Trash, and delete those. Backups are on by default and are kept separately, so removing the app does not remove them. They go to an "AgentMac Backups" folder in your iCloud Drive, or in ~/Library/Application Support if you are not signed in to iCloud Drive. If you changed the setting, they go to the folder you chose, or to your iCloud account if you picked "iCloud — automatic". Delete them there if you want them gone. Your API keys, licence key and trial record are kept in the macOS Keychain, and stay there until you remove them with Keychain Access.

macOS Permissions

Agent Mac may ask for the following macOS permissions. You don't need any of them just to chat with the agent. Each one turns on a feature, and you can revoke any of them in System Settings > Privacy & Security.

  • Accessibility — Optional. Lets the agent click and type in your other apps (computer control, which is off until you turn it on). The ⌥Space shortcut works without it. Agent Mac offers it during setup and may ask again when it starts, until you grant it.
  • Full Disk Access — Optional. Lets the agent reach files macOS protects, and read your Messages history if you turn the Messages tool on. macOS never asks for this one; you turn it on yourself in System Settings.
  • Automation (Apple Events) — Lets the agent control other apps, such as Finder, Mail and Safari. macOS asks separately for each app the first time.
  • Desktop, Documents and Downloads folders — macOS may ask the first time the agent reads or writes files there.
  • Screen Recording — Only if you turn on computer control, or let your iPhone see your Mac’s screen. Both are off by default.
  • Microphone and Speech Recognition — Only for voice conversations and dictation.
  • Contacts — Only for the contacts tool, which finds email addresses and phone numbers for people you name.
  • Reminders — For the reminders tool and the optional sync with Apple Reminders.
  • Calendars — Only for the optional sync with Apple Calendar.
  • Local Network — Only to reach your iPhone and model servers you run on your own network.

Agent Browser

Agent Browser is our browser-automation app. It runs its browser and its services on your Mac, and they accept connections only from your Mac (127.0.0.1). The browser profile it uses, its screenshots and its run history stay on your Mac in ~/.agent-browser. If you choose "Use your real Chrome", it uses a separate profile seeded with a copy of your Chrome cookies. Logins you save in its vault are kept in a separate keychain on your Mac. They are never sent to us and never shown to the AI. The app contains no analytics. It contacts us only for these reasons:

  • Updates. When it starts and about every six hours, it fetches a small file from agentmac.app to see whether a newer version exists. Nothing about you is sent.
  • Licence checks. After you enter a licence key, the app sends that key to our licence server when it starts and about every six hours, so that a refunded licence can be turned off. The key contains the email address you bought with. If the server can't be reached, the app keeps working. Nothing is sent during the free trial.
  • When you buy. Stripe takes payment and Resend emails your key. We keep the key issued for that purchase with the Stripe checkout reference, so that a refund can turn it off.

Setup downloads the Chromium browser engine the app needs. It downloads Qdrant and Python packages only if you install them. All of these come from their official sources. Websites the agent visits see a normal browser on your Mac, including your IP address. That traffic does not pass through us.

Optional extras send data to other services only if you set them up:

  • If you add a Firecrawl key, the address of any page the app can't read locally is sent to Firecrawl, which then fetches that page itself.
  • Autonomous mode sends your goal and page content to Anthropic using your own API key. If you add an OpenAI key, it also sends summaries of past runs to OpenAI for memory.
  • The CrewAI library that autonomous mode uses sends anonymous usage statistics to CrewAI.

Agent Remote (iPhone App)

Agent Remote is our free iPhone app for using Agent Mac from your phone. It needs no account and has no sign-in. It contains no analytics, advertising or tracking code, from us or anyone else. We run no server for it, and we receive none of its data. Its App Store privacy label says "Data Not Collected". (If you've chosen in your iPhone's settings to share analytics with app developers, Apple may pass us crash reports. They hold technical details about the app, never your conversations or files.)

Where It Connects

Apart from the Apple services described below, it connects to only two places, and both are yours.

  • Your Mac. At home, it connects straight to your Mac running Agent Mac over your home network. The connection is encrypted and locked to your Mac's own security certificate, so no other computer can pretend to be your Mac. You can also connect through your own Tailscale network. Tailscale encrypts that connection, and when your pairing includes your Mac's certificate, the app locks it to your Mac in the same way.
  • Your iCloud. If you turn on "Away access", messages travel through your own private iCloud database whenever your iPhone can't reach your Mac directly. They are end-to-end encrypted with keys that come from your pairing, so Apple can't read what they say. iCloud can still see some details it needs to deliver them, such as times and device IDs. Notifications from your Mac also come through your iCloud, as described below.

What You Send to Your Agent

When you send your agent a message, a photo, a voice note or a scanned document, it goes to your Mac. For a voice note, that is the text of what you said; for a scan, its pages and the text found in them. Agent Mac then sends it to the AI provider you chose in Agent Mac, such as Anthropic or OpenAI, under that provider's terms (see Third-Party Services above). We never receive it. Scans you file go into Agent Mac's filing cabinet and stay on your Mac.

Pairing

You pair by scanning a QR code that your Mac shows, or by pasting a code. The pairing secret is kept in your iPhone's Keychain, on that iPhone only: it isn't synced to your other devices or included in backups. Unpairing deletes it, along with the conversations, notes and tasks saved on your phone.

What Stays on Your iPhone

The app keeps a copy of your conversations so they open when you're offline, and it keeps your notes and tasks. Like other app data, these are included when your iPhone backs up to iCloud or to a computer. Scanned documents waiting to be filed are kept in the app's storage and left out of backups. Once a scan has been filed on your Mac, it is deleted from your phone. Until then, the app never deletes a scan by itself: if you unpair, waiting scans stay until you send, share or delete them.

iPhone Permissions

  • Camera. To scan the QR code your Mac shows when you pair, to scan paper documents with Apple's built-in document scanner, and to take photos to send to your agent. Text in a scan is recognised on your iPhone itself. Photos are re-saved before they are sent, which removes their location and other hidden details.
  • Microphone and speech recognition. For hands-free voice conversations and voice notes. Apple's speech recognition turns what you say into text: on your iPhone when your language supports it, otherwise on Apple's speech service, under Apple's privacy policy. We receive nothing.
  • Face ID or Touch ID. Only to confirm a payment approval. iOS does the check itself; the app never receives your face or fingerprint data.
  • Local network. To find and connect to your Mac on your home network.
  • Photos (add only). Only if you choose Save Image on a picture from your Mac's files: the app can add it to your photo library, but it can't see your photos. When you send photos, you pick them in Apple's photo picker, which shares only the ones you choose.

Payments

Your agent can ask you to approve a payment on your phone. Your card numbers are never shown on your phone or stored there. If a payment needs your card's security code, you type it in for that payment only. It is sent encrypted to your Mac and never stored.

Notifications

Your own Mac sends notifications, for example when an approval is waiting or a task has finished. They reach your iPhone through your own iCloud and Apple's push notification service. They aren't end-to-end encrypted like messages, so they only carry short labels, such as which tool needs your approval, a task's name, or a payment's amount, website and card name. They never include what's said in your conversations. Depending on your iPhone's notification settings, their text can show on your lock screen.

Children's Privacy

Agent Mac and Agent Remote are not directed at children under 13. We do not knowingly collect any personal information from children.

Changes to This Policy

We may update this privacy policy from time to time. Any changes will be reflected on this page with an updated revision date.

Contact

If you have any questions about this privacy policy, please contact Olivium Software at hi@agentmac.app.