Privacy
Updated 18 October 2026 · applies to sumi 0.35.0 and later
Who this is from
sumi is made by ArtmarketVM. For anything about this policy or your data, open an issue on GitHub or use Feedback inside the app.
What sumi records
Nothing until you turn tracking on. When you do, macOS asks you to grant Accessibility access, and from then on, inside your working days and hours, sumi notes the app in front, its window title and how long you were active or idle. That is how it knows what counted toward a goal.
This history, your goals, steps, chats and settings are saved in a local database in the app's data folder on your Mac. The database is not encrypted; it is protected by your Mac's own login and disk encryption.
sumi never records keystrokes. Use screenshots is enabled for new profiles and can be disabled in Settings; while tracking and system permission allow it, bounded images of the active window may be sent to Nebius. Permitted screenshots and interface-text samples are encrypted locally as temporary activity-review evidence. They survive restart and remain until the corresponding daily summary is successfully saved at your configured Daily summary time. Failed or missed summaries retain evidence for a later attempt; turning capture off stops new captures and uploads without pretending that a summary succeeded. After a summary is saved, temporary screenshots and raw samples are deleted; measured time, goal assignments, minimal descriptions and the summary remain under your history controls. Clear local history deletes pending evidence as well. Evidence is not saved in Personal Memory or application logs. macOS additionally requires Screen Recording permission. An image already transmitted cannot be revoked from the provider. When a feature looks at visible text, password and editing fields and password-manager apps are skipped, and lines containing API keys or other recognized secrets are omitted.
What leaves your computer
New profiles start with AI assistance, goal sharing, web research, goal matching, voice text correction, screenshots and verified automatic completion enabled. Existing saved choices are preserved. With tracking is preselected during setup; continuing with this choice enables activity observation. Choose Without tracking for manual use. Operating-system permissions and connected provider access still apply. On macOS, tracking setup requests Accessibility and Screen Recording access; you decide whether to grant them. You can disable these features in Settings.
Built-in AI and personal keys. Built-in AI is selected by default and requires no account form, invitation or API-key entry. Permitted Nebius and Tavily requests pass through our Supabase Edge Function, which keeps provider keys on the server. The same permitted content described below is processed transiently by that relay; the gateway does not store prompts, screenshots, goals, search terms or responses. Supabase creates a technical anonymous session automatically. Its access/refresh session is kept in a private local file, and Supabase retains an anonymous Auth record for automatic connection. Server counters contain anonymous identifiers, operation counts and timestamps to enforce uniform anti-abuse limits; counter records older than two days are removed during the next successful gateway request. Supabase infrastructure may process operational request metadata under its own terms. In Settings → AI → Services, choose Use my API keys to send provider requests directly using your saved keys instead. Switching does not delete those keys, and failures do not silently switch accounts. Existing observation/sharing controls still apply to either connection.
Voice dictation runs on your computer with a local Whisper model. First use downloads approximately 548 MB of public model weights from Hugging Face and its download service; those services receive the ordinary network information needed for a download, but no microphone recording. The model is checked against a pinned SHA-256 before use and remains in the app's local speech folder. Audio stays in memory and is not uploaded or saved in chat history. To recognize names, the local decoder may use a short vocabulary from your current and open goal titles; this vocabulary stays on your device and does not include chat history or screen content. Correct dictated text before editing is enabled for new profiles; existing saved choices are retained and it can be disabled in Settings. When enabled, the recognized transcript is sent to Nebius before it appears in the editor, together with up to 12 bounded open goal titles only when goal sharing is enabled. Audio is never included. The corrected draft can be edited or reverted to the original. Correction does not send a chat message, create tasks or change goals. Failed or cancelled correction keeps the original transcript. After you press Send, the final text follows the same AI-sharing rules as a typed message.
Enabled AI features contact the selected services under your observation and sharing controls. The table names the inference and search providers; Built-in AI also uses the Supabase relay described above. Each feature sends the minimum it needs:
| Feature | Goes to | What is sent |
|---|---|---|
| Optional voice text correction | Nebius | When voice text correction is enabled (the default for new profiles): the recognized transcript before it appears in the editor, and up to 12 open goal titles when goal sharing is enabled. No microphone audio, chat history, screen text, activity, profile or provider keys are included in the model context. The original remains available to revert. |
| Progress check-in | Nebius | Your goal, its completion criterion and current step, and up to 10 recent windows: app, title, active and idle seconds |
| Unlisted work suggestions | Nebius | Only with on-screen task detection and goal sharing enabled: existing goal titles and unfinished steps, foreground app, minimized window/browser titles and domain, and up to 400 characters of the same redacted Accessibility sample. Without the optional screenshot switch, no images are captured. No typing is recorded; password/edit controls, password-manager apps and recognized secret lines are skipped. Screen text is transient. Local app/context intervals measure active time even without a selected goal and follow your history retention and deletion controls. Today asks before adding an open task or an independently verified completed result, lets you rename it, and attaches only observed time up to your confirmation. Existing time is moved rather than counted twice. Skip suppresses that context for the day; Not now waits ten minutes. |
| Goal matching and daily activity review | Nebius | Your open goals, foreground app, window title, and available browser domain and page title (titles are cut at 160 characters). When on-screen task detection is enabled, matching may send up to 400 characters of redacted interface text; otherwise no interface text is sent. Permitted samples are encrypted locally until the daily summary is saved. Daily review may send bounded retained excerpts and work descriptions to resolve historical activity, subject to current AI and sharing permissions. Uncertain work remains unresolved; new goals require your confirmation. |
| Goal title autocomplete | Nebius | While you type in Today or All goals, with AI and goal sharing enabled: the draft goal text, your selected work role, bounded saved goal and step excerpts, and permitted global personal facts and preferences when Memory is on. This feature does not send screen content or raw chat history, search the web, or create a goal automatically. You choose whether to use a suggestion. |
| Suggested completions | Nebius | Your goal and steps with up to 3,000 characters of the text visible in the window, when you have enabled this check. You confirm every completion. |
| Suggested resources | Nebius, then Tavily | Your goal and up to 5 window titles so Nebius can write a search; Tavily receives only that search; Nebius then sees up to 5 result titles and snippets to pick one |
| Coach chat | Nebius | Your message, the goal, and a small selection of relevant memories when Memory is on |
| Manual search | Tavily | The query you typed |
| Optional active-window vision | Nebius | Only when Use screenshots, tracking, AI and on-screen understanding are enabled: one permitted foreground-window image, at most 1280 pixels and 300 KB JPEG, at most one capture attempt per 20 seconds. Recognized sensitive/private and excluded windows are skipped; detection is heuristic and cannot guarantee removal of all sensitive content. Windows captures only the foreground window's own rendered surface; where that API is unavailable it rejects detected occlusion instead. Permitted images are retained as encrypted temporary review evidence and deleted after the corresponding daily summary is successfully saved, following the retention and deletion controls described above. Provider terms and retention still apply. |
Nebius and Tavily process these requests under their own terms and privacy policies, and may keep them under their own retention rules. Deleting data in sumi does not delete it there. You can inspect a local text-context preview under Settings · Privacy · Raw data; that preview is built locally and nothing is sent to produce it. It is not a screenshot preview or a promise of the exact contents of a later request.
Your keys
API keys are stored in the macOS Keychain through a signed helper that only the sumi app can call. A key is sent only to the provider it belongs to, as authentication, and is never included in the content of a request.
Personal knowledge and a minimal meaningful-work journal stay local. Direct self-statements may be remembered when the relevant Memory controls are enabled. Repeated confirmed task patterns require review before retrieval. Clear personal memory preserves goals and independent activity history; history deletion and retention include the work journal.
Memory
Memory keeps a few facts you tell the coach so it can remember them next time. It never stores screen text. Turn it off in Settings · Memory to stop saving and recalling; what was already saved stays until you clear it there.
Feedback and updates
If you send feedback from the app, your message and the reply address you typed go to the contact service configured for your copy of sumi. Email updates are only sent if you tick the separate consent box, and you can withdraw that at any time through Feedback in the app or an issue on GitHub.
On launch, sumi checks GitHub for a newer version. Like any download, that request shows GitHub your IP address and the version you are running. Nothing else is sent, and GitHub's own privacy statement applies to that request.
Deleting
Settings · Privacy lets you keep history for 7, 30 or 90 days, or until you delete it; older records are removed on save, on startup and hourly while sumi runs. Clear all local history removes activity, daily app time, suggestions, ratings, and completed or deferred goals with their plans, and pauses tracking. Your active goal and plan, settings and keys stay. Deleting the app's data folder removes everything.
Your choices and rights
- AI features are enabled for new profiles and can be disabled in Settings. Activity observation remains off unless you choose With tracking. macOS access remains controlled by the Accessibility and Screen Recording permissions you grant.
- You can pause tracking, limit it to working hours, shorten retention or clear history at any time, without contacting anyone.
- Because sumi keeps your data on your own Mac, the only personal data ArtmarketVM may hold about you is feedback you chose to send. To have it corrected or deleted, open an issue on GitHub or send a Feedback message from the app.
- sumi is not directed at children under 16.
Changes
When this page changes, the date at the top changes with it, and the app release notes mention it. The version linked from Settings · Privacy is always the current one.