Privacy Policy

Last updated: 23 August 2026

Minnie is a macOS app that listens for your voice and runs an AI agent on your Mac. That is an unusual amount of access, so this policy is unusually specific: it says what stays on your machine, what leaves it, and where it goes. Where something is not private, it says so plainly rather than burying it.

This policy covers both the Minnie app and this website. It is operated by Anita Singh.

The short version

• Your conversations, files and task history live on your Mac, in a local database and the macOS Keychain. We cannot read them.
• What you ask Minnie to do is sent to the AI provider you choose — that is how the agent works at all.
• We hold an account record (email, plan, a hashed device id) so your subscription works.
• We collect product analytics — which screens and steps people use. Never message text, replies, file paths or keys. You can turn it off.
• We never see your card. Payments are handled by our payment provider.
• We do not sell your data, and there is no advertising anywhere in Minnie.

What stays on your Mac

These never reach us, and there is no mechanism in the app to send them:

• Your conversations and task history — the "what has Minnie done" timeline, including tool runs and replies. Stored in a SQLite database at ~/Library/Application Support/Minnie/.
• Details Minnie remembers about you — your name, city, preferences and anything else you tell her to keep. Same local database; you can view and delete each item in Settings.
• Your API keys and connected-tool tokens — held in the macOS Keychain, which we never read.
• The on-device speech model, if you choose Whisper for dictation.

Deleting the app's folder in Application Support and its Keychain items removes all of it. Nothing is mirrored to us first.

What goes to your AI provider

Minnie is a face and a voice for an AI agent; the thinking happens at the provider you pick — Anthropic's Claude by default, or Google, OpenAI, or a custom agent you configure. When you ask her to do something, that provider receives:

• Your message, typed or transcribed.
• Whatever the agent needs to read to answer it — including the contents of files on your Mac.
• The results of commands it runs.
• A short profile block of the details you asked Minnie to remember, so she does not re-ask.

Two things worth being blunt about. Minnie runs the agent with your home folder as its working directory and without the macOS App Sandbox — that is what lets her do real work, and it also means an approved action can touch anything your user account can. And Minnie asks before risky steps, but you can approve them; the consent prompts are a brake, not a wall.

Your provider's own terms govern what they do with that data. If you use your own API key, that traffic is between you and them — we are not in the path and never see it.

Microphone

Minnie listens for a wake word when you enable it, and records only while she is capturing a command. Where the audio is processed depends on the setting you choose, and they are genuinely different:

• Wake word — forced to on-device recognition wherever macOS supports it. The continuous listening does not leave your Mac.
• Whisper (on-device) — fully local. Audio never leaves your Mac.
• Apple dictation — uses Apple's speech recognition, which may process the audio on Apple's servers rather than on your Mac. This is Apple's behaviour, governed by Apple's Privacy Policy. Choose Whisper if you would rather it never left the machine.
• Cloud dictation — optional, and only if you supply your own OpenAI key. The recording is sent to OpenAI for transcription.

We never receive your audio in any of these modes. No recording is stored after it has been transcribed.

Her voice

Apple's built-in voices speak entirely on your Mac. If you enable cloud voice with your own key, the text she is about to say is sent to OpenAI or ElevenLabs to be turned into audio. Nothing is sent to us.

Screen awareness

When "notice what you're doing" is on, Minnie checks which app is in front and where its windows sit, so she can move out of the way and sleep when you are idle. She reads the app's name and the position and size of its windows — not their contents. Minnie takes no screenshots and does not record your screen.

Your account

If you make an account, we store the following on Supabase, in their Mumbai (ap-south-1) region:

• Your email address, name and profile picture, from the Google account you sign in with. Signing in to Minnie does not request access to your Gmail or Calendar — that is a separate, optional connection you make yourself.
• Your plan and its dates, and the customer and subscription ids from our payment provider.
• Your licence key, if you have one.
• For each Mac you activate: a SHA-256 hash of the hardware identifier — never the identifier itself — plus the device name, macOS version and app version, so the device limit can be enforced.
• A small number of account events (activation, trial start and end) that have to sit next to a licence.

Product analytics

We use PostHog (United States) to see which parts of Minnie people actually use and where onboarding loses them. Events are things like the app launching, an onboarding step finishing, a task completing, settings opening, and checkout opening.

Three deliberate limits:

• Analytics are keyed to a random id generated on install, not to your hardware id. It is deliberately not joinable against our licence records.
• When a setting changes we record which setting, never the value — a value could be your key or your pet's name.
• We never record message text, replies, tool arguments, file paths, or licence keys. There is no code in the app that reads them for analytics.

Turn it off in Settings ▸ Privacy & Safety. Minnie works exactly the same with it off.

Payments

Purchases are handled by Dodo Payments, who act as merchant of record. They collect your name, email and billing details and process the card; we receive confirmation that a payment happened, along with your email and a customer id. We never see or store your card details. See Dodo's privacy policy.

Updates and the beta

Minnie checks a file on our website for the latest version. That request tells our host your IP address and app version, as any web request does. Beta builds also carry an expiry date and can be retired remotely.

This website

If you join the waitlist we collect your email address, which section you signed up from, and the timestamp. Entries are stored in a private Google Sheet. The site is hosted on GitHub Pages, which processes requests to serve it. There are no advertising or cross-site tracking cookies.

Who else touches your data

Only the providers that operate the service, and only for that purpose: Supabase (accounts), PostHog (analytics), Dodo Payments (billing), Google (waitlist storage and sign-in), GitHub (hosting and downloads), and whichever AI, speech or connected-tool provider you choose. We do not sell or rent your information. We may disclose it if the law requires it.

How long we keep it

• Account and licence records — while your account exists, and afterwards only as long as tax and accounting rules require.
• Analytics — retained by PostHog under their standard retention.
• Waitlist entries — until you ask us to remove you.
• Anything on your Mac — until you delete it. That is entirely your call; we cannot delete it for you and cannot see it.

Your rights

You can ask for a copy of what we hold, ask us to correct it, or ask us to delete your account and its data. Email support@heyminnie.com and we will act on it. Depending on where you live — for example the EEA or UK under GDPR, or California under the CCPA — you may have further rights; we honour these requests wherever you are.

Children

Minnie is not directed at children under 16, and we do not knowingly collect information from them.

Changes

We will update this page as Minnie changes, with a new date at the top. If a change materially affects what leaves your Mac, we will say so in the app.

Contact

Questions about any of this? Email support@heyminnie.com.