Your notch. Your data. Your Mac.

Enclave is a Mac app that lives in your notch. There's no Enclave account to create and no Enclave server collecting what you do. We don't run analytics, we don't show ads, we don't include third-party tracking code, and we never sell or rent information about you.

Most of Enclave works entirely offline. A few features need to fetch something, such as lyrics, the weather or a game's score. When you use one of those, Enclave asks that service for that one thing, directly from your Mac, and sends only what the answer needs. Like any website, each service can also see your IP address.

• Notes, to-dos and AI history. Your notes, your to-dos, recent questions you've asked the AI and the AI activity feed are encrypted (AES-GCM) before they're saved. The key is kept in your login Keychain, so other apps, and copies of those files in a backup, can't read them.
• Voice notes are transcribed on your Mac.
• Clipboard. Recent text you copy is held in memory only, and cleared when Enclave quits. Items that apps mark as private, like passwords from a password manager, are skipped.
• Face unlock. Camera frames are analysed on your Mac and never leave it. The encrypted face data, and the password Face unlock enters for you, are kept in your Keychain. Photos of unlock attempts are only saved if you turn that option on.
• Calendar, Reminders and Contacts are read through macOS, to show your next meeting, your to-dos and who's calling. They stay in Apple's apps.
• Notification counts come from the badges on your Dock icons. Enclave doesn't read the notifications themselves.
• Sound. When the playing bars follow the beat, Enclave measures what your Mac is playing as it plays. Nothing is recorded.
• AI Activity and AI Sessions. Events from coding tools on your Mac, such as Claude Code or Codex, reach Enclave locally and are saved encrypted on your Mac.
• Dev tab. Commits, pushes, builds and runs are followed on your Mac. Coding time is worked out from your editor's window title and kept for 30 days. Undo turn saves snapshots in the repo's own git, without making commits.
• Guards. Shoulder Guard and Eye Care read the camera on your Mac, a few times a second, and nothing is recorded or saved. You're Muted measures how loud the microphone is, only while a call has you muted. Talk to Agent turns your voice into text on your Mac. Camera & Mic Log keeps its list of apps on your Mac. Wi-Fi Guard reads the network's name, which macOS only allows with location access.
• Profiles and Automations. To switch a layout or run a rule, Enclave looks at your Focus, the app in front, the time and events like a meeting starting or the battery running low, all on your Mac. Your profiles and rules are saved on your Mac.
• Mac Tools. Screen recordings are saved only where you choose (the Desktop, Movies or the Shelf) and never uploaded. Text expansion looks at what you type only to spot a snippet's keyword: it keeps the last few characters in memory, saves nothing, and gets nothing from password fields. Sticky notes are encrypted like your notes. The Files widget reads Spotlight's index on your Mac and keeps no list of its own. Drives, Bluetooth devices and the print queue are read through macOS, and Night Shift, True Tone and monitor brightness are set on this Mac. Recording asks macOS for Screen & System Audio Recording, and the microphone only if you turn it on; keyboard cleaning and text expansion need Accessibility.
• Crash reports from macOS stay on your Mac. They're only shared if you attach them to an email yourself.

Your settings are stored on your Mac. API keys and license details are kept in your Keychain and are never included when you export your settings.

Lyrics. To show synced lyrics, Enclave sends the current song's title, artist, album and length to LRCLIB, a free, open lyrics library.

Artwork and music videos. To find a sharper album cover, or a song's music video, Enclave searches Apple's public iTunes catalogue by title and artist. Videos play in YouTube's privacy-enhanced (no-cookie) player.

Song ID. When you ask "What's playing?", Enclave listens through the microphone for up to 12 seconds. The sound is turned into an audio fingerprint on your Mac, and only that fingerprint goes to Apple's Shazam service to find a match. No recording is sent or saved.

With location access on, Enclave gets the forecast and air quality from Open-Meteo. Your position is rounded to two decimal places, about a kilometre, before it's sent, so your exact location never leaves your Mac. macOS uses Apple's service to give your town its name.

You can turn weather off, or withdraw location access in System Settings, at any time.

Apple Intelligence answers on your Mac. A screenshot is only taken when you choose Capture Screen; it's read on your Mac and then deleted.

Other AI services, such as Claude, ChatGPT, Gemini or Perplexity, or a server you add yourself like Ollama, are used with your own API key. Your question, and anything you choose to attach, goes directly from your Mac to the service you picked. There's no Enclave server in between, so that provider's own privacy policy covers what you send it. Your keys stay in your Keychain.

Web search in the notch uses Wikipedia, DuckDuckGo and Openverse, which need no key, or Brave Search if you add your own key. Your search terms go to those services, and site icons are loaded from DuckDuckGo.

Connections. GitHub, Vercel, Sentry, Stripe and the other services in Settings → Connections are read with your own token, directly from your Mac, and only when you turn each one on. Your tokens stay in your Keychain and only ever go to their own service. Service status is read from those services' public status pages.

Usage limits. To show Claude's limits, Enclave asks Anthropic for your usage with the sign-in Claude Code keeps in your Keychain. macOS asks you once. Codex's limits are read from its own files on your Mac.

Commit messages. When you ask for one, the changes and the prompts you gave your agent go to the AI you chose: Apple Intelligence on your Mac, or your own provider.

Phone Approvals. Off until you turn it on. While you're away from the Mac, an agent's question goes to ntfy, or a server you choose, so you can answer from your phone. It carries the project, the agent and what it wants to do, and the details only if you turn them on. It's sent to a long random topic that only your phone is subscribed to.

Your own scripts. The enclave command and the Local API only answer on this Mac, and the API needs a token from Settings.

• Scores for the leagues and teams you follow come from ESPN.
• Stocks and crypto prices for the symbols you add come from Yahoo Finance. Currency rates come from the European Central Bank.
• Deliveries. If you add your own 17TRACK key, the tracking numbers you enter are sent to 17TRACK for live status. Without a key, Enclave just opens the carrier's tracking page.
• Flights are worked out on your Mac from the times you enter. Nothing is looked up.

Every few hours and at launch, Enclave checks for a new version by reading our public releases page on GitHub. The request is anonymous and says nothing about you or your Mac. You can turn automatic checks off in Settings → Update.

Turning on Enclave Pro sends your license key and your Mac's name to Polar. The name appears in your purchase portal, so you can tell which Mac is using your key. Every few weeks, Enclave checks the key with Polar again.

Deactivate in Settings → License to free the key on Polar's side and use it on another Mac.

Payments are handled by Polar, our merchant of record. Polar collects your name, email address and payment details to take the payment, handle tax, and send your receipt and license key. We never see your card details. We can see that a purchase was made, and the email it was made with, so we can help with your license.

Support. If you email us, we receive your message, your email address and the Enclave and macOS versions the app adds to the email. We use them only to help you, and delete them once they're no longer needed.

Reviews. If you post a review on this website, we store the rating, name, role and text you type in a database run by Upstash. Nothing is public until we approve it; then it's shown on the home page. To stop spam, we also keep a scrambled (hashed) form of your IP address for one hour. To have your review taken down, email us.

These services are only contacted while you use the feature beside them, and each has its own privacy policy.

Every feature has its own switch in Enclave's Settings, and every macOS permission can be withdrawn in System Settings → Privacy & Security. A feature that's off doesn't contact anything.

To clear what Enclave keeps, use Settings → Update → Reset All Settings, and delete your notes, to-dos and sticky notes. Deactivate your license before you move the app to the Trash. For your purchase records, use the Polar customer portal or email us.

Depending on where you live, for example in the EU, the UK or California, you may have the right to see, correct or delete your personal information. Email us and we'll help.

Enclave is made for adults and isn't meant for anyone under 13. We have no way to collect anything about them in the first place, and we never set out to. Because Enclave keeps your information on your Mac and not with us, there's normally nothing on our side to delete. If you think a child has sent us something, for example in a support email, let us know and we'll remove it.

If a new version of Enclave changes what it sends, or who receives it, we'll rewrite the part that changed and put a new date under the title when that version comes out. Important changes will also be listed in the changelog.

Questions about privacy, or a request about your information? Email us and a person will reply.