Security

The record stays on your Mac

Everything Augmenter captures today is written to an encrypted store on your own machine. The encryption key belongs to the app on your Mac and is held in the macOS Keychain. Cloud storage, remote connectors, and anything that reaches out to fetch more are designed but deferred. Until they ship, the record does not leave the Mac except as model calls described below.

Off by default, one source at a time

Recording starts paused. Consent is grouped into four capabilities, and each one is a separate decision.

• Follow my work. Screen and accessible window text on this Mac.
• Learn from this Mac. Recent documents, Messages, Mail, Notes, notifications, and coding assistant transcripts, from the locations you enroll.
• Remember calls. Microphone and permitted call audio, during calls.
• Understand my browser. Page text and URLs, through an extension you install and authorize on its own.

Calls and browser context are off until you turn them on, and local sources are unenrolled until you enroll them. Selecting a capability does not grant an operating system permission and does not start recording. macOS asks you separately, and you can take those grants back in System Settings whenever you want. Each capability has to report what it actually depends on and what it actually covers, so availability is never presented as consent.

Every source connection, permission, and exclusion is written to an append-only log you can read. Every stored piece of evidence points at the consent that allowed it. Revoking consent stops collection immediately.

Exclusions run before the read

Exclude an app, a page, a person, or an hour and it was never recorded. That is a sequencing claim, not a filtering one. Exclusion checks, secure field checks, secure input mode checks, password manager checks, and private window guards all run before any payload is read. Private browsing windows are never captured. Password and payment values are never read, in any mode. If a check cannot be made, capture stops rather than proceeding.

Calls only during calls

Audio is acquired only for a detected call, and detection runs on metadata before any microphone or audio stream is opened. Launching an app is not a call. A microphone preview is not a call. Capture stops or suspends when the call ends, when you opt out, when a grant is revoked, when the context becomes excluded, and when the Mac locks or sleeps. No power or performance setting authorizes audio outside a detected call.

No keystroke logging

There is no global event tap, no raw keyboard or mouse recording, and no clipboard polling. Augmenter reads what an app puts on screen and what it exposes to accessibility. It does not watch your fingers.

Models run with zero retention

Augmenter uses AI models to turn what it captured into something useful. Every model call runs with zero data retention and a pinned provider: the provider does not keep your content and does not train on it. Your record trains nothing. Every model output records which model and provider produced it, so "what of mine has gone where" is a question with an answer rather than a reassurance. Anything you mark as never leaving the device is interpreted on the device or not at all.

Captured content is treated as data, never as instructions. Text from a page, a message, or a transcript cannot tell Augmenter to do something. Authority comes from you.

Actions are bounded and attributable

When Augmenter acts on your behalf, it can only produce effects it declared and that your instructions, your rules, or a specific approval allow. Anything outside that is refused, and the refusal is recorded rather than swallowed. Every action ties back to the step that caused it, and every action either reverses or asks first. First contact with someone new always asks.

Credentials live in one encrypted store and are resolved only at the moment of a call. No secret enters a plan, a prompt, a log, an error message, or any code the model can see. Augmenter never copies your browser cookies or sessions anywhere. When a service has no usable API, it signs in through a real browser window on your machine, with you at the keyboard.

Export and deletion

You can export everything in open formats. You can delete a specific thing, and you can delete the whole account. Deletion is real: the evidence is purged and you get a signed receipt. A deleted item leaves a marker saying something was deleted and when, so Augmenter never presents a record as complete when it is not.

What we do not claim

Augmenter is pre-release. We hold no security certifications and will not imply otherwise. We do not defend against a Mac whose operating system has already been taken over. Screen capture is not a promise of complete coverage, and where coverage is partial the product says so instead of guessing. The capture service, the connectors, and the executors are intended to be open source, signed, and notarized, so these claims can be checked rather than believed.

Reporting something

Write to hello@augmenter.com with "Security" in the subject. Tell us what you found and how to reproduce it. Please do not access, change, or keep anyone else’s data while you look, and give us a reasonable chance to fix it before you publish. We will confirm we received it and tell you what we are doing.

See also the privacy policy.