Privacy

The app

Your shelf (bookmarks to the files you drop), clipboard history, quick notes and settings are kept in ~/Library/Application Support/hovernotch on your Mac, with file protection. Text recognition and background removal run on-device with Apple's Vision framework. Delete the app and that folder and nothing remains.

Clipboard history never records copies an app marks as concealed, transient or auto-generated, ignores password managers (1Password, Bitwarden, Passwords, Keychain Access and others) and any app you exclude, and can be paused or cleared at any time.

Now Playing and lyrics: track titles come from macOS on your Mac. If you switch on synced lyrics, the artist and title are sent to LRCLIB, a public lyrics service, and the result is cached locally. Weather asks Open-Meteo for your city or approximate location. Both are optional.

Coding agents: hook events from Claude Code, Codex CLI, Gemini CLI and Cursor go to hovernotch over your Mac's loopback interface only. Token counts are read from the agents' local transcript files, and the estimated Claude plan-limit meters are worked out from Claude Code's transcripts on this Mac, read only. Jumping to a session's terminal tab asks macOS for Automation permission and only reads and selects tabs. None of it leaves your Mac.

Permissions are optional and asked for only when you use a feature: Accessibility (HUDs, clipboard paste), Calendars, Bluetooth, Full Disk Access (notification peeks, off by default), the Camera (Mirror, only while it is open), Location (only if you choose to show the Wi-Fi network's name), Automation (selecting a terminal tab) and, for the per-app volume beta, System Audio Recording, used only to play an app back more quietly on your Mac. The lock-screen features show only on your own screen and store nothing.

Network: the app talks to our server only to check your licence (when you activate a key and a few times a day after that). It sends a device ID that is a one-way SHA-256 hash of your Mac's hardware ID, never the ID itself, so one Mac per licence works without an account. With a licence we also keep the key and the order email our payment provider gives us.

First launch: the first time it opens, the app sends us one anonymous message: the app name, a random install ID it makes up, the app version and the macOS version. Our server notes the city and country of the connection and a one-way hash of the network address, made with a key that changes every week, so we can tell whether a download was installed. Your IP address is not stored. It is sent once and never again.

This website

The site makes no tracking calls: no analytics, no advertising, no cookies. It stores your light or dark theme choice in your browser's local storage, and asks our licence server for the current price and when the launch-week offer ends. That request carries nothing about you. The demos on this page run entirely in your browser.

Downloads: when you download the app, we count the download with the time, the city and country estimated from your connection, your browser and system type (such as “Safari on macOS”, not the full browser string) and the page the link was on. Your IP address is not stored; the weekly-keyed network hash described above is used to match the download with a first launch.

Payments

Purchases are handled by Dodo Payments as merchant of record. They email your licence key; we never see your card details.

Your rights

Ask us what we hold about you, or to delete it: hello@tealmac.com. See also the terms and the refund policy.