Privacy Policy

Sentient OS, Inc. provides the Sentient app, website, and supporting services. This policy explains what information each feature uses, why it is used, which services help process it, and the controls available to you.

We do not sell your personal information or share it for cross-site targeted advertising.

Sentient’s on-device model analyzes the local sources you enable, including files, saved screenshots, Apple Notes, iMessage, WhatsApp, Apple Mail, and Apple Calendar. It prepares useful summaries, with checks that help filter out irrelevant material and common sensitive identifiers.

Your chosen AI consolidates those summaries into your knowledge base and helps prepare proactive suggestions. Your knowledge base is stored on your Mac. If you choose a cloud model, that provider processes the context used for this work.

Additional services connected through your ChatGPT or Claude account use their own authorized connections and follow the policies of those services and your chosen provider.

Use your own ChatGPT or Claude account, a compatible API provider such as OpenRouter, or a supported larger local model for knowledge organization, proactive intelligence, and Sidekick. Model capabilities and hardware requirements depend on your setup. Double Tap has its own provider setting.

Apple Mail and Calendar provide local email and calendar analysis without requiring a ChatGPT or Claude subscription. You can pair them with a compatible larger local model or an API provider such as OpenRouter.

Sidekick uses your request, relevant knowledge, and screen or app context to carry out the task you ask for. Screenshots are captured when you invoke a feature or during active computer-use steps. With a cloud model, your chosen provider processes that context. Your chosen provider’s account settings, training choices, and retention policies apply.

You do not need to create a separate Sentient account or login.

To keep Double Tap responsive, we use a low-latency OpenAI API route with Zero Data Retention and cover the cost for our first users. With this route, a screenshot of the display under your pointer, your knowledge base including selected one-time writing-style examples, and your instructions pass through Sentient’s Cloudflare-hosted relay to generate an unsent draft for you to review.

Zero Data Retention keeps eligible request content out of OpenAI’s retained logs and stored responses. OpenAI API content is not used for training by default. OpenAI’s published data controls explain the scope and exceptions.

Prefer your own setup? In Settings → Double Tap, choose OpenAI, OpenRouter, or a compatible endpoint, including Ollama or LM Studio. When that endpoint runs a compatible model on your Mac, drafting stays on your Mac. If you choose a hosted endpoint, your chosen provider’s account settings, training choices, and retention policies apply.

During setup, Sentient saves a one-time snapshot of selected examples of your own sent messages to help Double Tap sound like you. It does not continuously collect new writing-style examples from your messages or emails.

This snapshot lives in writingstyle.md inside your knowledge base. Open Settings → Double Tap → Show writing examples in Finder to inspect and edit it anytime. Sentient preserves your edits. The examples include your message text and recipient or conversation context that helps match your tone.

Setup can draw from available one-to-one iMessage and WhatsApp conversations and supported connected sent email, separately from the chat selections used for regular knowledge analysis. The saved snapshot is included in Double Tap requests and in the knowledge folder if you enable cloud sharing.

Your main knowledge base is a folder of ordinary Markdown files on your Mac. Optional cloud sharing lets ChatGPT, Claude, and other compatible AIs read it over MCP. Sharing is off until you enable it.

Sentient encrypts a copy of the knowledge folder on your Mac with AES-256-GCM before upload. Our open-source, Render-hosted relay stores encrypted knowledge without persisting the decryption key. It decrypts in memory to serve authorized requests through your private link. Keep the link private and share it only with AIs you want to connect.

Sharing includes the selected one-time writing-style examples and any other files you place in the knowledge folder. The AIs you choose to grant access to your knowledge base over MCP process that knowledge under their own policies.

To show you how your shared knowledge is being used, the service records access times, tool names, client information, and hashed note references. It does not record note contents in this access history.

Turning sharing off stops syncing and requests deletion of the cloud copy and its access history. The service also checks hourly and deletes hosted knowledge and its access history after 30 days without a sync. Your local knowledge remains on your Mac.

Sentient uses Apple’s on-device speech recognition where supported. When on-device recognition is unavailable, Apple’s speech service may process the audio. The resulting transcript becomes your Sidekick request and follows your chosen model’s processing settings.

When you finish connecting Gmail or Outlook through a supported AI account, Sentient can save your email address for occasional feedback invitations sent to a small sample of users. Your knowledge base and the contents of your tasks are never collected for product analytics. Feedback helps improve Sentient without collecting that private context. Any feedback email will include a way to opt out.

For this feedback list, we collect your email address and nothing else, ever. The list is stored in Supabase.

A random installation credential lets us provide covered inference and manage usage limits. Invitations and lifetime access are recorded separately in Supabase so you keep your access.

Crash reports and extended usage analytics have separate controls in Settings → System. Both are enabled by default in release builds. They are designed to report how the app is working, excluding your files, conversations, screenshots, and knowledge content.

Sentry receives technical crash and error reports, including stack traces, app and system versions, recent diagnostic events, and a random installation identifier. Sentient scrubs common identifiers such as home-folder paths and email addresses from report text. Turning crash reports off stops Sentry reporting.

TelemetryDeck receives usage events and counts. Extended analytics adds onboarding progress, timings, and app health signals. Turning it off leaves basic usage counts, launch and session signals, and installation or uninstall counts. Generated installation identifiers let us recognize repeat events without asking for your name or email. Historical usage events may be retained beyond the reporting window shown in TelemetryDeck’s dashboard.

These basic usage counts and optional, privacy-preserving crash reports help us improve this open-source app for you.

Our website is hosted on Vercel. Where enabled, Vercel Web Analytics provides cookie-free visit statistics and Speed Insights measures website performance. These analytics do not identify you across different websites, and we do not use them for targeted advertising.

Waitlist information submitted through our earlier website is handled separately from the app’s feedback list. That waitlist used Supabase for email addresses and basic signup details, and Resend for confirmation emails. If you email us, we receive the information you choose to include so we can reply.

You can inspect and edit your knowledge, including the one-time writing-style snapshot, change analysis sources, choose a supported model, disconnect services, and turn cloud sharing off. Removing a note changes your local knowledge; a successful sharing sync updates the hosted copy.

Reset removes Sentient’s local knowledge and analysis state and requests deletion of the hosted knowledge MCP mirror if you previously enabled it. Uninstall also removes local model files, settings, and saved connection credentials. Your own source files stay in place.

Saved feedback email addresses and invitation or lifetime-access records are retained when you reset or uninstall Sentient. You can contact us using the address below to ask about those records or request their removal.

For questions, or to request access, correction, or deletion of information held by Sentient, contact feedback@sentient-os.ai. We may need information to locate your records and verify your request. We handle privacy requests under the laws that apply to them; your local knowledge can also be inspected and managed directly on your Mac.

When we update this policy, we will update its date. For material changes to how personal information is handled, we will publish a prominent notice on our website or in the app explaining what changed and when it takes effect.