Privacy policy

The short version

The Earlyn app does not send your data anywhere. What it records stays on your Mac, encrypted, and only you can read it. We never see your screen, your text, your meetings or your questions.

The app

• Earlyn never sends your memory anywhere. It has no analytics, no telemetry and no crash reporter. It fetches two kinds of files. The first is a model file, when you press Download in Settings: it asks earlyn.app, which hands the download over to GitHub's file servers. It is a plain file request with no account, cookie or identifier (those servers see your IP address, as with any download), and the file is checked against a checksum built into the app. You can also import that file yourself and the app never goes online at all.
• The second is the update list. If you allow it (Earlyn asks once; Settings → General has the switch), the app reads earlyn.app/appcast.xml at most once a day, or when you press Check for updates. It is a plain request with no account or identifier and no information about your Mac. An update is installed only after you agree, and only if it carries Earlyn's signature.
• Crash reports are sent only when you agree. If Earlyn quit unexpectedly, the next launch asks whether to send the report and shows it first. It holds the app and macOS versions, the error type and the names of the functions that were running; never anything Earlyn remembered, file paths or an identifier for you.
• Your recordings library is off until you connect your Earlyn account in the app and press Upload on a screen recording or a meeting. Earlyn then uploads that video or that meeting page (summary, decisions, action items, your notes and, if you choose, the transcript) to your library on record.earlyn.app. Everything you upload starts private: only you can open it, signed in. You decide, item by item, to invite people by e-mail (each gets a personal link; we store the addresses you invite to send the e-mail and check access) or to let anyone with the link open it. Videos are kept in private storage and played through addresses that expire within hours. Removing an item deletes the page, the video and its invitations.
• Connected apps are off until you connect one. If you connect Slack, Notion, Linear, GitHub, HubSpot or a webhook address of your own (for Zapier, n8n or Make) with your own token or URL (kept in your Keychain), Earlyn sends that app only what you chose: the text an agent writes for it, or an answer you press Send on. It never sends your screen, recordings or search history, and each app handles what it receives under its own privacy policy.
• Captured text, pictures, transcripts and summaries are stored in ~/Library/Application Support/Earlyn, encrypted (SQLCipher for the database, AES-GCM for pictures and audio). Keys are kept in your Keychain.
• AI features use Apple's on-device model or Earlyn's own model running inside the app by default. Both run on your Mac. Ollama, if you choose it, also runs on your Mac.
• Cloud models are off unless you pick one. If you choose Claude (Anthropic) or OpenAI in Settings → Models and paste your own API key (kept in your Keychain), each question, summary, digest or agent run sends that provider the prompt and the memories Earlyn picked for it, straight from your Mac to api.anthropic.com or api.openai.com, under your own account with them. We are not in between and never see it. Pictures, recordings and your full history are never sent. Switch back to an on-device model at any time.
• Plugins are programs you install and approve. An agent hands its output to the plugin you picked; what the program does with it (write a file, post to a webhook) is up to that program. Earlyn shows you the program before it can run and asks again whenever it changes.
• The optional local API listens on 127.0.0.1 only. Tools you connect to it (such as Claude Code or Codex) are governed by their own privacy policies; what they do with results is up to them and you.
• Exported files are plain, unencrypted copies that you choose where to put.
• License keys are verified offline. Activation sends nothing.

Earlyn for iPhone

• The iPhone app records a meeting only when you tap Record, with the microphone and nothing else. The recording, its title, notes and marks stay in the app's folder on your iPhone.
• It has no account, no analytics and no advertising, and it sends nothing to us. We collect no data from it.
• A recording leaves your iPhone only when you share it (for example with AirDrop to your Mac, or to Files). Your title, template, notes and marks travel inside that audio file.
• If you pair it with Earlyn on your Mac (a QR code shown on the Mac), the two talk directly over your local network: your meeting summaries, transcripts, meeting audio and open loops come to the iPhone, and promises you tick go back. Everything between them is encrypted with a key only your Mac and your iPhone hold; no server is involved. Your screen memory is never sent to the iPhone. Unpairing removes the copies on the iPhone.
• Deleting a recording in the app removes it from your iPhone. Deleting the app removes everything it kept.

This website

• No analytics, no tracking pixels, no advertising cookies.
• If you create an account, we keep your name, e-mail address and a salted hash of your password (never the password itself), and a session cookie keeps you signed in. If you buy Pro, our payment provider Lemon Squeezy (merchant of record) processes your payment details; we keep your subscription status and your license key so you can always find it.
• If you ask to be notified about the release, we keep your e-mail only for that and delete it afterwards.
• Our hosting provider keeps standard server logs (such as IP addresses) for a short time for security.

Your rights

You can ask us what we hold about you (your e-mail and subscription), have it corrected, or have it deleted. Your Earlyn memory is not something we hold: delete it in the app under Settings → Storage.

Contact

Questions: hello@earlyn.app.