Skip to content

Privacy policy

Updated 29 October 2026. The short version: your bots, chats and files stay on your computer. AppuBot has no account and no servers that hold your conversations.

Who we are

AppuBot (the desktop app for macOS, Windows and Linux, and this website, appubot.com) is made by Sarthak Gupta, an individual developer in India, who is responsible for your data under this policy. Questions, requests and complaints: support@appubot.com.

The short version

  • Your work stays on your computer. Bots, chats, files, memory, skills, routines, recordings and settings are stored on your own computer. We never receive them.
  • Your AI provider sees what your bots send it. Bots run on the AI account you connect (Claude, ChatGPT, Cursor, Grok, GitHub Copilot, OpenCode and others), just as when you use that AI yourself.
  • We collect anonymous usage counts (which features get used) under a random id, never your messages, files, names or this computer's name.
  • No accounts, no ads, no selling data. We don't sell or rent personal data, and we don't use it for advertising.

What stays on your computer

Everything you make in AppuBot is kept locally: your bots and their instructions, memory and skills (in the AppuBot folder in your home folder), and chats, files you send or receive, voice recordings, routines, settings and logs (in AppuBot's app data folder, for example ~/Library/Application Support/AppuBot on a Mac). Sign-in details AppuBot keeps for you, such as Telegram bot tokens, keys you enter for an agent and the sign-in for connected apps, are stored in files only your user account can read. AppuBot's own logs stay on your computer and are deleted after 14 days by default (Settings › Storage).

Speech is handled on your computer: voice mode, dictation and voice notes are turned into text, and replies into speech, by models that run locally. Your audio is not sent to us or to any speech service. The Usage page reads your agents' own logs on your computer and sends nothing.

What your bots send to your AI provider

A bot is an AI agent (such as Claude Code or Codex) running on your computer with your own account. To do its work, the agent sends what it needs to its provider (for example Anthropic, OpenAI, Cursor, xAI or GitHub): your messages, the bot's instructions and memory, files you give it and, when it uses your computer, pictures of the app windows it works in and the text in them. This goes directly from your computer to that provider under your account, and that provider's own privacy policy and terms apply. AppuBot does not pass it through servers of its own.

What the app sends us: anonymous usage analytics

The released app sends usage events to PostHog (a product analytics service, its US cloud) so we can see which features are used and which versions are out there. Each event carries a random id created for your installation (not linked to your name or email), the app's version, your operating system and its version, and your processor type. The events are:

  • the app was opened (and whether for the first time), and updated (from and to which version);
  • setup was finished;
  • a bot was made (which built-in agent it uses, or "other", and whether computer use is on);
  • a message was sent (from the app, Telegram or a routine; which agent; how many attachments and pictures, not what they are);
  • a routine was made (whether it runs quietly) and a Telegram bot was added;
  • this version was stopped by the version policy (see Updates).

Never included: the content of messages, files, names of bots, chats or files, folder paths, your computer's name, your email or anything you type. Like any internet request, PostHog receives your IP address, which it can use to estimate a rough location (country or city). Analytics can't be turned off in the app at the moment; you can block us.i.posthog.com with a firewall if you prefer, and the app keeps working.

Support chat

If you use "Chat with Sarthak" in the app, the email address you enter and the messages you write are sent to PostHog's support inbox so we can read and answer them, together with the app's version, your operating system and your processor type. We use them only to answer you and improve AppuBot, and delete a conversation when you ask. The support chat loads nothing until you first open it; after that the app checks for new replies in the background so it can show you a dot. It sends no analytics of its own. You can also just email us.

Services the app connects to

Besides your AI provider and the analytics above, AppuBot talks to these services, only for what you use. Each sees your IP address and the request, and has its own privacy policy:

  • Updates (GitHub). The app checks AppuBot's public releases on GitHub for new versions, downloads them, and reads a small version policy file from GitHub (raw.githubusercontent.com) twice an hour so a version with a serious problem can be stopped.
  • Agent catalog and agent updates. The list of agents you can add comes from the Agent Client Protocol registry (cdn.agentclientprotocol.com). To tell you about agent updates the app asks npm (registry.npmjs.org) or Homebrew (formulae.brew.sh) for the newest version numbers. Installing an agent downloads it from its maker, npm or Python's package index.
  • Voice models (Hugging Face). The first time you use voice, the speech models are downloaded from Hugging Face. After that, speech never leaves your computer.
  • Connected apps (Composio). If you sign in under Apps, AppuBot connects to Composio (connect.composio.dev) with your own Composio account. When a bot uses a connected app, such as Gmail or Notion, its request and the app's answer go through Composio to that app. Composio's privacy policy applies; you can sign out and remove connections at any time.
  • Telegram. If you connect a Telegram bot, messages, voice notes and files you exchange with it go through Telegram's servers (api.telegram.org), as in any Telegram chat. Only the Telegram accounts you approve can talk to your bots.
  • Websites and apps your bots use. When a bot browses the web or uses an app on your computer for you, those sites and apps see that activity as if you did it.

This website

appubot.com is hosted on Cloudflare, which processes your IP address and request details to serve and protect the site. The site uses PostHog analytics with PostHog's own cookie (to count visitors and visits): pages viewed, clicks, the page you came from, your browser and device type and an approximate location from your IP address. It doesn't record sessions or create a profile of you. When you download AppuBot through an appubot.com/download link, we count the download with which build, your country (from Cloudflare) and the referring page, under a fresh random id. The site has no forms and no accounts. You can block the cookie in your browser and the site still works.

Why we use data (legal bases)

  • Anonymous usage analytics and site analytics: our legitimate interest in knowing which features and versions are used, to improve AppuBot and fix problems.
  • Support chat and email: to answer you (your request, and our legitimate interest in supporting the app).
  • Updates and the version policy: to keep the app working and safe (legitimate interest).

How long we keep it

Usage and site analytics are kept in PostHog for as long as the project keeps data (at most a few years) and are only looked at in aggregate. Support conversations and emails are kept while they are useful for helping you, and deleted when you ask. What's on your computer is yours: uninstall AppuBot and delete its folders to remove it.

Your choices and rights

Depending on where you live (for example under the GDPR, UK GDPR, India's Digital Personal Data Protection Act or California law), you can ask to access, correct or delete personal data we hold about you, object to its use, or complain to your data protection authority. Email support@appubot.com; we answer within 30 days. Because analytics use a random id, we can only find your app's analytics if you send us that id (the analytics-id file in AppuBot's app data folder). Deleting that file gives the app a new id.

Children

AppuBot isn't meant for children under 13 (or the minimum age where you live), and we don't knowingly collect their data.

Security and transfers

Everything sent to us and our services goes over encrypted connections (HTTPS). The services above are run by companies based mostly in the United States, so data such as analytics and support messages may be processed there, under those companies' safeguards. Keep your computer itself protected: AppuBot's data lives there.

Changes

If what AppuBot collects changes, we update this page and its date first; important changes are also mentioned in What's new. See also the FAQ.