Nothing leaves your Mac unless you turn it on.
No telemetry, no analytics, no crash reports to us, and no server of ours. On its own, the app only runs Claude Code and checks for updates.
Last reviewed: October 26, 2026. Full audit: reports and how to reproduce them.
With nobody asking
| What | Where | When |
|---|---|---|
| Claude Code | Anthropic, through the claude CLI with your own login or key: your messages and Claude's replies, under Anthropic's terms and privacy policy | When a panel runs |
| Claude Code's usage data and error reports | Anthropic | Off by default; on with Appearance, Let Claude Code send usage data to Anthropic |
| Update check | GitHub Releases of supertokenman/supertokenman | At launch and every 6 hours; can be turned off |
| Local checks | Nowhere: git, docker ps, docker stats and version checks of local tools, on your Mac | At launch and on timers |
Only after you turn it on or ask
| What | Where | Turned on by |
|---|---|---|
| Exchange rate | api.frankfurter.dev | Spend, Update rates |
| GitHub stars of integrations | api.github.com | Connections, Show GitHub stars |
| Pull requests, CI, triggers | api.github.com, with your vault token or gh login | Turning on the GitHub integration |
| Feeds and briefing | The feeds you add | Adding a feed; the briefing is off until you schedule it |
| Cloud resources | AWS, Google Cloud, DigitalOcean, Fly.io, Supabase, Neon | Opening Cloud, Look in the cloud, or Check every 6 hours |
| Integrations and MCP servers | The service each one names | Turning it on in Connections |
| Monitors, Prometheus, PostHog, model servers, storage | The addresses you enter | Adding them |
| Web pages, videos, web apps | The page you open | Opening it |
Your keys
Tokens and API keys you save live in the app's vault, encrypted on disk with a key that macOS keeps in your Keychain. The app shows their names, never the values, and sends each one only to the service it belongs to.
Before a tool runs
Claude asks before each tool call, unless you let a persona run safe commands alone. A panel can be isolated in a Docker container with only its folder, no network and none of the app's keys.
How this was checked
A test opens the app with a clean profile, nothing clicked, and records every request, every network call and every program it starts. It fails on anything outside the first table. On October 25, 2026 it recorded 17 attempts in 60 seconds, all of them allowed.
- Not coveredThat run was on Linux, not on a Mac; Mac-only paths were not exercised there.
- Not coveredRequests made after a click were read in the code, not each one exercised.
- Not coveredThe update check of a released build was not part of that run.
- Not coveredWhere programs the app starts (Claude Code, git, docker) connect: the test sees them start, not their own traffic.
Report a problem
Found a security issue? Report it privately through GitHub security advisories. Please do not open a public issue for it.