Eavesy

Privacy

Last updated: 2026.

What we promise

  • Local first. In the Mac app, every capture is a real folder on your disk: Markdown, JSON metadata, and audio, video or images. You can use it without an account, and then nothing leaves your Mac. When you sign in, recordings also get a cloud copy for transcripts, briefs, search and sync, and the Mac app uploads your screenshots and pasted images to your account so they show up on your other signed-in Macs. Clipboard text and notes from the Mac app are not uploaded. Anything you capture in the web app, including screenshots and screen or webcam video, is stored in your account. A Notetaker you send to a call records that call’s audio, the participants’ display names and who spoke when, never video, and stores them in your account the same way.
  • Encrypted in transit and at rest. TLS protects data in transit. Cloudflare-managed encryption protects R2 objects and D1 data at rest.
  • Keys stay where they belong. The Mac app keeps only its device token in your macOS Keychain. If you bring your own AI keys, you enter them on the web and they are stored encrypted.
  • Analytics and error reports never receive recording content, audio, transcript text, summaries, or notes. Eavesy uses PostHog to count page views and product events (for example “a Mac was paired” or “a dictation was pasted”, never what was said) and to receive error reports (the error message, the page or API route, and the app version) with emails, IP addresses, tokens, file paths, page titles, and request bodies removed. There is no session recording and no advertising tracking.
  • Eavesy does not train models on recording content. Cloudflare Workers AI and Anthropic’s commercial API state that customer content is not used for model training without an explicit opt-in. A connected OpenRouter account follows the provider privacy settings you control there.
  • Portable export. Export everything from Settings → Your data, or a single recording from its page. Mac captures are already normal local files.
  • Deletion that includes cloud copies. Delete any recording, or your whole account from Settings → Your data. Cloud copies (audio, transcripts, search index) are permanently removed within a day; local folders remain under your control.

Who sees your data

A clear, public list of every third party that ever touches user data:

  • Anthropic — AI summaries & action-item extraction under its commercial API policy
  • Cloudflare — all infrastructure (Workers, R2, D1, Vectorize, Queues, KV, and Containers, where the Notetaker runs), plus Workers AI for transcription (Whisper) and semantic-search embeddings
  • Clerk — authentication
  • OpenRouter — optional bring-your-own AI connection
  • PostHog — product analytics and scrubbed error reports from the web app, browser, and Mac app; never recording content

BYO keys

In the web app, Settings → AI providers lets you connect OpenRouter or add your own Anthropic API key for summaries and chat. Keys are stored encrypted. When configured, those calls bill to your account. Calls still flow through Eavesy so the service can assemble the requested context and prompts.