Privacy policy.

With your permission (macOS Accessibility), pretti-notch reads the text of the window you are working in so it can remember it and answer questions about it later. For each moment it can read:

• the name of the app and the title of the window,
• the visible text of that window (up to 20,000 characters at a time),
• the web address of the page, when your browser shares it (you can turn this off),
• the text of the text field you are typing in (you can turn this off), and the text you have selected when you ask for help writing.

It never reads:

• password fields, or anything while a password field has focus,
• private or incognito browser windows,
• password managers, Keychain, System Settings, banking, payment and sign-in pages, and other sensitive apps and sites (a built-in list you can't switch back on),
• anything from an app or site you exclude in Settings,
• screenshots or pixels, except while the screen agent is doing a task you asked for (see below); keystrokes outside the field you are in; your camera; or your calendar, contacts or email, unless you connect them (see Connected services).

Before anything is stored, likely secrets such as API keys, tokens, card numbers, one-time codes and private keys are replaced with a marker. This is pattern-based and can't catch everything, so exclude apps where you routinely see secrets in plain text.

Captured text, the memories and notes made from it, your chats, reminders, meeting notes and transcripts, what connected services return, files you drop on the notch and your preferences live in a database and folders on your Mac, in Application Support and a pretti-notch folder in your home folder. Your sign-in token is kept in the macOS Keychain.

You can set how long captures are kept, look at and edit any memory, export everything, or erase it all (database, settings and Keychain items) from Settings › Privacy. Quitting or uninstalling the app does not send this data anywhere.

Answers, writing help, reminders and memory summaries are produced by an AI model run by Anthropic. When you ask for something, pretti-notch sends only the text that task needs to our server: your question or spoken request, the relevant excerpts of your own memory, and, when you ask it to fill a field, the text around that field. Our server adds our credentials, passes the request to Anthropic, and returns the reply.

To write in your voice, pretti-notch also sends, from time to time, a selection of messages you typed yourself (up to a few hundred short excerpts, with likely secrets removed) so the model can describe how you write. Only that description is kept, on your Mac. You can turn this off in Settings › Writing.

• We do not store the content of these requests or replies, and we don't use them to build profiles or for advertising. Our server keeps only counts (how many requests a day) to prevent abuse.
• Anthropic processes the request to answer it, under its own commercial terms and privacy policy.
• Requests are encrypted in transit.
• Settings › Privacy shows a log of every request that was sent, and can ask you to approve each one before it goes. Turning off cloud processing stops all of it: capture and search stay on your Mac, and the assistant simply stops answering.

Speech is recognised on your Mac, either by Apple's on-device recogniser or by the Parakeet model that you download once. Audio is held in memory only while you speak and is never uploaded or saved.

Words you dictate are typed into your field on your Mac. When you hold the dictation key outside a text field and speak a request, the resulting text is sent as a chat message, the same as if you had typed it. The Parakeet model is downloaded from a public model host (Hugging Face), which can see an ordinary download request from your connection.

When the screen agent finishes or needs you, it can say so out loud with a voice on your Mac.

pretti-notch can take notes in your meetings and brief you before them. It listens to a meeting only when you start notes: the notch offers when a call app starts using your microphone, and starts by itself only if you turn on automatic notes. While it listens, the notch shows a moving wave and a timer.

• Your side is heard through your microphone. The other side is heard from your Mac's own audio, through the Screen & System Audio Recording permission, only if you allow it; no picture of your screen is kept.
• Speech is turned into text on your Mac, in short pieces, and voices are told apart on your Mac by a speaker model downloaded once from Hugging Face. Audio is never uploaded or saved.
• The transcript and the notes are stored on your Mac. You can keep only the notes, rename speakers, or delete a meeting with everything learned from it.
• To write the notes, the transcript is sent once through our server to Anthropic. To write a brief, the meeting's title and attendees and related excerpts from your memory, earlier notes and recent email are sent the same way. We don't store either.
• To notice that a call has started, the app checks which apps are using the microphone. It never listens to find out.
• Recording laws differ by place: let the people in your meeting know you are taking notes.

You can connect your calendar and contacts (through macOS's own permissions), Gmail (read-only) and GitHub (with their sign-in) so pretti-notch knows your meetings, the people you work with, your email threads and the work you ship. Nothing is read until you connect a service.

• Your Mac reads them directly from Apple, Google and GitHub; nothing passes through our server. Sign-in tokens are kept in your Keychain.
• What they return is stored on your Mac like anything captured, with likely secrets removed, and only the excerpts a task needs are sent to the AI, as above. Contacts are never stored; they only put names to addresses.
• Gmail leaves out promotions, newsletters, automated mail and sign-in codes, and never opens attachments. Syncing stops while reading is paused.
• Disconnect any service in the app, and choose whether to keep or delete what it stored.
• pretti-notch's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

During setup you can tell pretti-notch who you are: a line on what you do, your LinkedIn, GitHub, X and website. If you tick Look me up on the web and give a link, it reads those pages so it knows you from the start.

• Your name, the links you typed, your work email's domain (never the address), your one-line description and your public GitHub profile are sent through our server to Anthropic, whose web search and fetch read only those pages. We don't store them.
• Your public GitHub profile is read from GitHub directly. A name alone is never looked up, so pages about someone with the same name are left out.
• Only facts from your own pages are kept, each with a link to its page. Contact details like emails and phone numbers are dropped.
• You choose what to keep. If you continue before the lookup finishes, what it finds is added to About you, where you can delete any of it.

When you hold Option and Command and ask pretti-notch to do something on your screen, it works in a loop until the task is done: it takes a screenshot of the display you are using, sends it with your request through our server to Anthropic, and performs the clicks and keystrokes the model chooses. This only happens while a task you started is running, which the pink glow around your screen shows.

• Screenshots are sent only for the task and are not saved, on your Mac or on our server.
• It stops when a password manager, Keychain or an app you excluded comes to the front, never types into password fields, and asks you before sending, posting, buying, deleting or submitting anything.
• Press Esc or the stop button at any time to stop it. It needs the Screen Recording and Accessibility permissions, which you can remove in System Settings.
• Web tasks can run in its own browser: a Chrome-family browser on your Mac started with a separate profile (or Google's Chrome for Testing, downloaded once from Google if you have none). Your own browser is left alone; what you sign into there stays on your Mac, and you can clear it in Settings.

You sign in with an email and password, or with Google. We keep, on our servers:

• your email address (and your name, if you sign in with Google),
• your password, only as a salted hash that can’t be turned back into the password,
• your plan and status, and the date you finished setup,
• the app version and macOS version you use, how many times you have signed in, and when you were last seen,
• a daily count of assistant requests (and their size), used for fair-use limits.

That is the whole list. We don't have your memories, captured text, chats, meeting notes, transcripts, connected email or calendars, files or audio. We keep account data while your account exists and delete it when you ask us to.

• Anthropic: the AI model that writes the answers (see above).
• Amazon Web Services: hosts our server and account database, in Mumbai, India.
• Cloudflare: sits in front of our server, so requests pass through its network (encrypted) on their way to us.
• Vercel: hosts this website and the app downloads.
• Google: if you choose “Continue with Google”, to confirm who you are; if you connect Gmail, which your Mac reads directly; and as the source of the agent's browser when you have none.
• GitHub: only if you connect it, which your Mac reads directly.
• Hugging Face: hosts the speech and speaker models the app downloads once.

We don't sell your information and we don't share it for advertising.

The app checks for new versions by downloading a small file from notch.prettiflow.com, and installs verified updates on its own (you can turn this off in Settings › About). Nothing about you is sent beyond what any web request includes, such as your IP address, which our host keeps in ordinary server logs.

This website sets no cookies and has no analytics or advertising trackers.

• Pause reading with one click from the notch or the menu bar, and exclude any app or site.
• Turn off cloud processing, voice features or the Option key in Settings, and meeting offers, automatic notes and briefs in Settings › Meetings.
• Disconnect any connected service, and delete what it stored.
• Export or erase everything stored on your Mac at any time.
• Ask us to access, correct or delete your account information, or to close your account, by writing to privacy@prettiflow.com. We aim to answer within 30 days.

Depending on where you live, you may have further rights under local law, such as complaining to a data-protection authority. We honour them.

Connections are encrypted. Our AI credentials are held only on our server, never in the app. Your sign-in token sits in your Keychain. No system is perfectly secure, and if something goes wrong that affects your information we will tell you.

pretti-notch is not meant for children under 16, and we don't knowingly collect their information.

If this policy changes in a way that matters, we will update the date at the top and tell you in the app. Questions are welcome at privacy@prettiflow.com.

Prettiflow Inc.