Privacy

What Ghost observes

Ghost uses macOS accessibility APIs to see which app you're using, when you switch, and how long you stay. It also reads window titles, browser URLs, and on-screen text to understand your work context.

Ghost does not take screenshots, record keystrokes, read file contents, capture audio or video, or monitor network traffic. It only detects whether your keyboard is active — never what you type.

Sensitive data is redacted

Before anything is stored, Ghost automatically redacts emails, passwords, API keys, phone numbers, credit card numbers, social security numbers, and tokens. This happens at capture time — sensitive data is never written to disk.

Everything stays on your Mac

All data is stored locally in a folder on your computer. Ghost does not sync to the cloud. Session data is automatically cleaned up over time — typically retained for 90 days, with snapshots kept for 14 days.

What leaves your Mac (only if you choose)

By default, Ghost sends nothing over the network. If you sign in and enable AI features, redacted session context is sent to your chosen AI provider to generate summaries and reflections. This only happens when you explicitly request it.

If you're signed in, Ghost sends anonymous feature usage telemetry (like app version and which features you use) to help us improve the product. This contains no personal data or focus activity. You can turn it off in Settings.

You're in control

You can disable content snapshots, disable all AI features, opt out of telemetry, and delete all your data — all from Settings. Ghost also includes debug views where you can inspect exactly what was captured and what was sent to AI.