Docs
Privacy controls
Nothing reads your screen until you turn it on. Here is what each switch does, and what is never read.
The switches
All in Ambient → Privacy. Each is off until you turn it on.
- Read what you ask about
- Reads the window in front when you ask, searches your open windows, and keeps the last two minutes in memory.
- Remember what you’ve seen
- Saves window text on your Mac, encrypted, for recall. Never uploaded. 7 days by default.
- Offer suggestions
- Spots moments worth a next step. Decided on your Mac.
- Meeting notes
- Listens to your microphone and the call while notes are on.
- Keep everything on this Mac
- Uses Apple Intelligence for every AI step and turns off web search. Nothing is sent.
Never read
- Password fields
- Never read, in any app.
- Password managers and Keychain
- Never watched.
- Messages, WhatsApp, Signal, Telegram
- On the never-watch list by default. Add any app you like.
- Private and incognito windows
- Skipped.
- Crypto wallets
- MetaMask, Ledger Live, Phantom, Exodus, Electrum, Trezor and others. Skipped, always.
- Recovery phrases and private keys
- The whole window is dropped. Ambient shows that it paused there.
What leaves your Mac
Your voice never does. Speech recognition runs on your computer.
When a request needs a model, only the text it needs is sent. Card numbers, API keys, passwords and one-time codes are removed on your Mac first.
Check it yourself
- What Ambient sees
- Click Preview, switch to any window, and see exactly what it would read after redaction.
- Requests that left this Mac
- Every request and exactly what it sent. Kept 30 days.
- What’s stored
- Screen memory by app. Delete one app’s, or everything.
One click pauses everything for an hour or until tomorrow. The HUD never appears in screen shares or recordings.
More
The full rules are in the Privacy Policy.