Skip to main content

Privacy

Your conversations and memories stay on your Mac. Cloud features send only what is needed, when you use them.

Local storage​

Conversations, memories, meeting recordings, settings, and voice transcriptions are all stored locally on your Mac. Nothing is synced to a cloud.

The server​

The Dooze server routes your messages to AI providers (OpenAI, Anthropic, Google, xAI) and enforces usage limits. It does not store your conversations, context, or memories. Requests are processed and discarded.

Memory and cloud models​

When you use a cloud model, Dooze sends a pre-formatted memory block alongside your message so the model has context about you. This is assembled locally from your vault and sent per-request. The server does not store it.

Cloud TTS​

When you use cloud voices for Read Aloud (Lite and Heavy plans), your text is sent to the server for voice synthesis. A one-time privacy notice appears the first time you use a cloud voice. Apple's built-in voices on the Free plan are fully on-device.

Crash reporting​

Dooze uses Sentry for crash reporting with privacy-conservative defaults. No personal information is collected. Device identity is a hashed ID. Crash reports help fix bugs but contain no conversation content, memories, or captured text.

Telemetry​

Dooze collects anonymous usage counts, how many requests, not what you asked. No content, no URLs, no text is ever sent as telemetry.

What Dooze captures​

  • Text you select in apps (via Accessibility API)
  • Text and images you copy (via clipboard monitoring)
  • Screenshots you take
  • Images you drag onto the panel
  • Web page text (via browser extension)
  • Your voice (transcribed locally with WhisperKit, the audio never leaves your Mac)
  • Meeting audio (recorded and transcribed locally)

What Dooze never captures​

  • Password fields in any app
  • Password managers: 1Password, Bitwarden, LastPass, Dashlane, KeePassXC, Enpass, RoboForm, and Keychain Access
  • Secure text input fields

Browsers and clipboard​

Clipboard content from browsers (Safari, Chrome, Arc, Brave, Edge, Opera, Firefox, Vivaldi) is excluded by default. The browser extension captures only text you have selected on a page, not the full page content.

Context expiry​

All captured context expires after 10 minutes. Nothing persists beyond a session unless it becomes a memory, which you can review and delete.

Toggling capture​

Go to Settings > Privacy to enable or disable each capture type individually: clipboard monitoring, screenshot capture, selection capture, screen OCR, and screen AI.

Incognito mode​

Click the ghost icon in the panel header. No conversation history is saved. No memories are extracted. The conversation exists only while the panel is open.

Incognito does not change what is sent to the AI provider, it only affects local storage.