Privacy

The short version

Cupertino runs entirely on your Mac. It has no account, no telemetry, andno server of ours to talk to — there is nothing in it that makes a network request. We never see your mail, your messages, your contacts, your calendar, your notes, your reminders, your browsing history or your places.

The part that actually matters

The interesting question is not what we collect. It is where your data goes onceCupertino reads it, and the answer is: to whichever agent you connected.

Cupertino is an MCP server. It reads from the Apple apps on your Mac and hands the results to the MCP client you configured — Claude Desktop, Claude Code, or anything else that speaks the protocol. If that client is a cloud service, then the mail, messages and contacts it asked for are sent to that service, under that company's privacy policy and not ours. Cupertino does not do the sending, but it is what makes the data available to be sent, and pretending otherwise would be the most misleading thing this page could do.

Install this deliberately. It is exactly as private as the agent you point it at.

What it can reach

Only what macOS has granted, and macOS asks you per app. Cupertino reads through the same permission system anything else on your Mac uses — Automation and Full Disk Access — and a surface it has not been granted returns an error rather than data.

• Read across Mail, Messages, Contacts, Calendar, Notes, Reminders, Safari and Maps.
• Writes are off by default, per surface. The toggle decides whether the mutating tools are registered at all, so an agent with writes off cannot see they exist — it is not a refusal it could argue with.

What it stores

Nothing of yours. Cupertino keeps no copy of anything it reads: it queries at the moment a tool is called and passes the result on. There is no index, no cache of message bodies, and no database of your contacts.

Checking rather than trusting

A privacy policy is a promise. This one is checkable, becausethe source is public. If you want to confirm the claim at the top of this page, search the tree for outbound HTTP — there is none, which is a thing you can verify in a minute rather than take our word for.

This site

Everything above is about the app. This website is a separate thing and does two measurable things, both worth stating plainly.

It counts page views, using Cloudflare Web Analytics. That sets no cookie and stores nothing on your device, so there is no banner asking you to accept it. What it records is the page address, the referring page, your browser and operating system, your screen size, how long the page took to load, and the country the request came from. It never receives your IP address, and there is no identifier that would let one visit be joined to another or to you. Any content blocker stops it, and the page works unchanged without it.

The feedback form, if you use it, posts what you typed to a small worker of ours atfeedback.mgcrea.io. That is the one place this site sends anything you wrote, it happens only when you press the button, and the email address is optional and used only to reply to you.

Contact

Questions about any of this belong onthe issue tracker, where the answer is visible to the next person asking. For anything you would rather not post publicly, email support@mgcrea.io.

Changes

If this policy changes materially, the change lands in the repository's history like everything else, and the date at the top of this page moves. The canonical copy lives athttps://cupertino.mgcrea.io/privacy.