CuePilot privacy policy

The short version

• Your text goes from your Mac to the AI provider you picked. It never goes to CuePilot.
• CuePilot asks you to sign in with Google to count how many people use it. It keeps your name, your email, your Google account details, and the days you open the palette.
• Supabase stores the sign-in data in the United States.
• Your API keys, history, and settings stay on your Mac. Your keys are encrypted with your macOS Keychain.
• CuePilot asks GitHub for a new version when it starts and every 6 hours. You can turn this off.
• This website counts visits with Cloudflare Web Analytics, which sets no cookies.
• Email surajadsul02@gmail.com to delete your account.

What CuePilot collects

CuePilot uses Supabase for sign-in. Supabase stores this data for CuePilot.

When you sign in with Google, Google sends Supabase:

• Your email address.
• Your name.
• Your Google account id and the address of your profile picture. CuePilot does not show or download the picture.

Supabase also records when you first signed in and when you last signed in. Supabase may log the IP address and the time of sign-in requests, as part of running its service.

On each day you open the palette, CuePilot sends one request to Supabase. The request holds your sign-in token and nothing else. Supabase adds one row with your account id and the date in UTC. A second request on the same day changes nothing. If your Mac is offline all day, that day is not recorded.

Suraj uses this data to count how many people sign up and how many use CuePilot each day. He does not sell it, does not use it for ads, and does not share it with anyone other than Supabase. He uses your email only to reply to you and to handle a request to delete your account.

What CuePilot never collects

CuePilot never sends Supabase, or any other server of its own:

• The text you select or type.
• The results you get.
• Your history.
• The actions you run.
• The names of the apps you use.
• Your Slack messages.
• Your API keys.

What stays on your Mac

CuePilot keeps these files in its data folder on your Mac. Nothing copies them anywhere else.

• Settings. Your provider, models, shortcuts, custom actions, and per-app rules.
• History. Your last 200 results. Each one holds the result and up to 2,000 characters of the text you started with. You can clear it in the General tab.
• API keys. One file per provider. Each key is encrypted with Electron's safeStorage, which keeps its encryption key in your macOS Keychain. CuePilot refuses to save a key it cannot encrypt.
• Your sign-in. Your account id, name, email, and the Supabase session, encrypted the same way as your keys. Sign Out deletes this file.

Your AI provider

When you run an action, CuePilot sends a request from your Mac to the provider you picked, with your API key. No CuePilot server sees or relays it. The request holds:

• The text you selected, or the text in the box you are writing in.
• The instructions for the action you picked.
• For Reply with an empty text box, for the assistants with no selection, and for Reply over a Slack conversation, the name of the app you are in.
• If you turned on Read the Slack conversation, the messages Slack shows on screen, with their authors' names and the name of the channel or DM, and with passwords, tokens, and keys removed. Also your Your voice text.

CuePilot also asks your provider for its list of models, with your key.

You choose the provider, and your account with them is between you and them. Their privacy policy and terms decide what they keep and for how long. CuePilot sets two options that limit what providers keep:

• To OpenAI, it sends store: false, so OpenAI does not keep the response.
• To OpenRouter, it asks to route only to providers that do not collect prompts.

With Local, your text goes to a server on your own Mac. With Custom, it goes to the server you named.

Updates

CuePilot checks for a new version when it starts and every 6 hours, while Check for updates automatically is on in the General tab. It is on by default. Check Now checks once, even when the switch is off.

A check asks GitHub for the list of CuePilot releases and for the update file of the newest one. When a newer version is there, CuePilot downloads it from GitHub. It installs when you quit CuePilot or click Restart to Update.

A check sends no account, text, history, settings, or API keys. Each request carries a random id that the updater makes once and keeps on your Mac, in a file named .updaterId in CuePilot's data folder. The id is not linked to your account, and CuePilot does not use it. Like any web request, a check shows GitHub your IP address. GitHub's privacy statement covers what GitHub logs.

Google

You sign in on Google's own page, in your browser. Google's privacy policy covers that step. CuePilot asks for no Google permissions of its own. Supabase asks Google for your basic profile, which holds your name, email, and picture.

Where your data is stored

Supabase stores CuePilot's sign-in data on Amazon Web Services in the us-west-2 region, in Oregon, United States. If you live in India or anywhere else outside the United States, signing in sends your data to the United States. Data-protection law there may differ from the law where you live.

This website

This website uses Cloudflare Web Analytics to count visits. For each page you open, it records the page address, the site that sent you, your browser, operating system, and device type, your country, and how fast the page loaded. It does not record the part of the address after ?. Cloudflare says Web Analytics uses no cookies or local storage, and does not identify visitors by their IP address or browser.

Cloudflare also hosts this website, so your browser's requests, with your IP address, go to Cloudflare. Cloudflare's privacy policy covers how it handles them.

Cookies. This website uses only what it needs to work, and sets no cookies of its own. Before it adds any analytics or marketing tool that sets cookies, it will show a banner that asks for your consent first.

How long data is kept

Supabase keeps your account and your daily rows until you ask Suraj to delete them. Signing out does not delete them. Deleting the app does not delete them.

Cloudflare decides how long it keeps website analytics. Its privacy policy covers that.

Delete your account

Email surajadsul02@gmail.com from the address you signed in with, and ask to delete your account. Suraj deletes your account in Supabase, which also deletes every daily row. He replies when it is done.

To remove the data on your Mac, see "How do I uninstall CuePilot?" in the FAQ.

Security

• The app talks to Supabase, GitHub, OpenAI, Anthropic, Google, and OpenRouter over HTTPS. The Local provider uses http://localhost, which stays on your Mac. With Custom, the address you enter decides.
• The CuePilot app can add a row only for its own account and only for today. It cannot read the table.
• The app keeps your keys and your sign-in encrypted on disk. The windows of the app never receive your keys or your sign-in tokens.

Children

CuePilot is not meant for children under 13.

Changes to this policy

If this policy changes, the effective date at the top changes too. If the app starts collecting something new, this page will say so before the release that collects it.

Contact

surajadsul02@gmail.com