Privacy policy
Last updated
Commandr is built so your work stays on your Mac. Here’s exactly what leaves it, where it goes, and what we keep.
The short version
- Your code and projects stay on your Mac. We don’t run servers that see them.
- When an agent works, what it needs goes straight from your Mac to the AI provider you chose, with your own key. Local models send nothing off your Mac.
- We keep a small account — your email and name — so you can sign in and use the free beta.
- No ads, no analytics, no tracking, and we never sell your data.
Where your data goes
Stays on your Mac
- Your projects and files
- Chats, tasks and checkpoints
- Settings, and API keys encrypted with macOS key storage
Goes to the AI provider you choose
- Your messages to the agents
- Files or parts of files the agents read
- Attachments and visual-check screenshots
Comes to us
- Your email address and name
- A check that your account is active
- Nothing from your projects
Who we are
Commandr is made by Alexander Silver, based in Switzerland. In this policy, “we” means us and “you” means anyone who uses the Commandr app or this website.
Questions about your privacy go to privacy@commandr.dev.
What stays on your Mac
Commandr is a desktop app. Your projects live in the workspace folder you choose, and everything else — chats, task lists, checkpoints and settings — is kept in a database in the app’s data folder on your Mac. Your API keys are encrypted with macOS key storage.
We can’t see any of this. It isn’t uploaded to us, and it isn’t backed up by us. If you delete the app and its data folder, it’s gone.
What the app sends to AI providers
Agents need a language model to work. When an agent runs, Commandr sends the model what it needs to do the job, directly from your Mac to the provider you picked, using your own API key:
- your messages to the agent, and the instructions Commandr adds
- files, or parts of files, from the project the agent is working on
- output from commands the agent ran, such as test results
- images: files you attach, and screenshots from visual checks
That provider — DeepSeek, OpenAI, Anthropic, Google (Gemini) or OpenRouter — handles the data under its own terms and privacy policy, including how long it keeps it and whether it may train on it. Please read the policy of each provider you use. If you run a local model with Ollama or LM Studio, this data never leaves your Mac.
Other services the app talks to
- Sign-in and account checks. When you sign in, Commandr opens your browser to our sign-in service, which uses Clerk. While the app is open, it checks about every 20 seconds that your account is still active. These checks send a sign-in token, never project data.
- Updates. When it starts, and every six hours, the app asks GitHub for the latest version and downloads updates from GitHub. GitHub sees your IP address.
- Packages. When an agent adds packages to a project, they’re downloaded from the package registry your project uses, such as npm.
- Fonts. When you pick fonts for a project’s design system, the previews load from Google Fonts, which sees your IP address.
Your account
To use the free beta you create a Commandr account on this website. We keep:
- your email address, and your name if you give it
- how you sign in (password or a sign-in provider), handled by Clerk
- whether your account and licence are active
- a licence key, which is worked out from your account ID
We use this to let you sign in, give you access to Commandr, and contact you about your account. Clerk stores it for us as our service provider, and may use Cloudflare to keep bots away from sign-up.
When you contact us
If you email us or send a message or bug report through the contact form, we keep your email address, what you wrote, the app and macOS versions you give us, and any screenshots you attach. We use them only to reply and to fix problems, and delete them within 6 months once your request is resolved. Please don’t send API keys, passwords or code you can’t share.
Cookies
This website only uses the cookies needed to keep you signed in, which are set by Clerk. There are no advertising or analytics cookies, so there’s nothing to accept or decline.
What we don’t do
- We don’t use analytics, tracking pixels or crash reporting — in the app or on this website.
- We don’t show ads, and we don’t sell or rent your data.
- We don’t receive your code, prompts or files, so we can’t train anything on them.
How long we keep things
We keep your account details for as long as you have an account. If you ask us to delete it, we delete it from Clerk within 30 days. What’s on your Mac is yours: uninstall Commandr and delete its data folder to remove it.
Your rights
Depending on where you live — for example under the GDPR in the EU and UK, or the LGPD in Brazil — you can ask to see, correct, export or delete the personal data we hold about you, or object to how we use it. Email privacy@commandr.dev and we’ll reply within 30 days. You can also complain to your local data protection authority.
Where your data is processed
Clerk and GitHub are based in the United States, so your account data and update requests may be processed there. This website is hosted by Vercel in the EU (Frankfurt). For agent work, the AI provider you choose decides where your data is processed.
Children
Commandr is a tool for developers and isn’t directed at children.
Changes to this policy
When we change this policy we’ll update the date at the top, and mention bigger changes in the changelog.