Privacy and data

This page is the practical summary. The Privacy Policy is the full version.

Your code goes to your agent's provider

Each agent runs on your Mac, signed in as you. When it works, your prompts, the files it reads and its answers go from your Mac to that agent's provider (Anthropic, OpenAI, Google, xAI or Meta) under your account and that provider's terms. Offrun has no server in that path.

Agents keep their own credentials in their own folders. Offrun points each CLI at its folder and never reads, copies or stores the tokens inside.

What stays on your Mac

• Chats, memory and job records, in the .offrun folder of each project.
• Worktrees, in .worktrees.
• Settings, extra agent logins and usage records, in ~/Library/Application Support/Offrun.
• Dictation, which runs on Apple's on-device speech engine. No recording is kept or sent.

Install lists every folder, and how to remove them.

What Offrun receives

A small amount of service data reaches Offrun's own servers:

• Your Offrun account: your name and email, so you can sign in.
• Usage counts, such as how many agent answers and tokens, never their content.
• Product events, such as which control was used, with no content from your chats, files or dictation.
• Crash and error reports, when something fails, so we can fix it.
• What you send us: support tickets, and log files when you press Send logs.

Section 3 of the Privacy Policy sets out exactly what each of these contains and who handles it.

Connected apps

If you connect an app such as Gmail, Slack or GitHub, the connection runs through Composio by way of Offrun's server, and what an agent asks for is shared with the agents you allow to use it. Connections are off in each project until you turn them on. An agent's reads and writes in a connected app happen straight away, with no approval step, so only turn one on for a project where you want that. See Connected apps, schedules and AI agents in the Privacy Policy.

macOS permissions

Offrun asks for a permission only when you turn on the feature that needs it:

• Microphone and Accessibility, when you turn on dictation: to hear you, and to type the text where your cursor is.
• Screen Recording, optional, to help dictation spell names and code you can see.
• Camera, only when you choose Take a photo to add a picture to a message.

Running agents needs none of these, and the Permissions tab in Settings appears only once a feature that needs one is on. Agent alerts are cards Offrun draws itself, so they need no notification permission either.

Agents run inside Offrun, so a macOS prompt that names Offrun while an agent is working may come from that agent's task rather than from Offrun itself. Check what the agent was doing at the time, and allow only what you expect that task to need.

Review or revoke any of these in System Settings, Privacy & Security.

Sending logs

Send logs in Settings, General emails your Offrun log files to the Offrun team, so we can help with a problem. It sends as soon as you press it. Before they leave, the logs are cut to the last part of each file and cleaned: your home folder's path, tokens, keys and passwords are replaced, and lines with dictated or copied text are dropped. You need to be signed in.

Deleting your account

Settings, Account, Delete account removes your Offrun account, your dictation history and saved connected-app access from this Mac. You type Delete to confirm. Project files and project chats stay. To ask us to delete what we hold, write to hello@offrun.dev; section 11 of the Privacy Policy covers your rights.