Privacy Policy

Last updated: October 18, 2026

Cue ("we", "our", or "us") is a desktop AI assistant for macOS and Windows developed by Sophon LLC. This Privacy Policy explains what information we collect, how we use it, your rights, and the choices you have.

Single-article advertising test: Only this explicit test variant loads Google AdSense and its published Privacy & messaging service. The ordinary article URL and other product pages do not load this display-ad integration. Google and advertising partners may use cookies, identifiers and prior visits to select and measure ads, subject to the applicable consent and US opt-out choices. Google’s message lists the partners and purposes; see Google’s advertising policy. Required consent refusal, applicable opt-out or Global Privacy Control prevents new manual requests. European visitors can reopen Privacy & cookie settings in the article footer; applicable US visitors can use Google’s Do Not Sell or Share My Personal Information link. Changed choices reload the test document; information already received by providers is not erased. The disabled-advertising statements below describe ordinary product pages, excluding this explicit test variant.

1. Information We Collect

We collect only what is necessary to operate the service:

• Email address — collected when you redeem an invite code or join the waitlist, used to manage beta access.
• Invite code activity — which codes have been redeemed and by whom, to power the referral system.
• Product and diagnostic metadata — feature events, timing, error codes, app version, platform details, and a device or account identifier, processed by PostHog (US Cloud) and Sentry. Product analytics is designed not to include transcripts, screenshots, selected text, or dictated text. You may disable in-app analytics collection in Settings → Privacy.
• Website measurement data — page URL, referrer, campaign and click parameters, download events, approximate location, and browser or device details processed by PostHog and Google Analytics 4 by default unless you reject website analytics. Microsoft Clarity requires an explicit analytics acceptance. Advertising measurement is disabled.
• Website interaction recordings — on heycue.io, Microsoft Clarity can capture interaction recordings and heatmaps of how pages are used, such as clicks, scrolling, and page content. Form fields and account details are masked. Clarity loads only after you accept analytics. It is not loaded on pages with unsupported query parameters or sensitive authentication paths.
• Website journey identifier — unless you reject analytics, a random, session-scoped website journey identifier stored in sessionStorage groups landing-page, workflow-choice, and installer-link events within the same browser tab session. It is sent only to PostHog, is not placed in a URL or sent to Google Analytics 4 or Google Ads, and is not linked to a Cue account, device identifier, or desktop-app activity.
• Signed-in account data — thread indexes and messages, preferences, settings, skills, domains, user memory/tool notes, and aggregate activity statistics are synced when you sign in so Cue can restore them across devices.
• Payment information — if you subscribe to Cue Plus, payment is processed by Stripe. We do not store your card number or billing details.

We do not ask for your phone number or biometric identifiers. Service providers may process IP address, approximate country, and other operational metadata needed to deliver and secure the service.

2. Local Data, Account Sync, and Request Processing

The following data stays local and is not included in Cue account sync:

• Raw dictation and activity history — entries stored in ~/.cue/history/. Cue may sync aggregate counts, but not these raw history entries.
• Screenshots — not included in account sync. A relevant screenshot may be sent at request time when a screen-aware task needs it.
• User-provided provider API keys — stored in the operating-system credential store and not included in Cue account sync.

When you sign in, Cue syncs the account data listed in Section 1 through Cue's infrastructure. To carry out a request, the following may also be sent to AI or speech providers (see Third-Party Services below):

• Screenshots — captured only for a screen-aware task and sent as request context.
• Voice audio — sent for speech-to-text or meeting transcription.
• Selected text, clipboard content, prompts, and relevant thread context — sent when needed to fulfill the request.

Cue does not use this content to train its own models. Provider-side processing and retention depend on the provider, plan, and applicable terms linked in Section 5.

3. How We Use Your Information

• To grant and manage access to the Cue beta program.
• To operate the invite code and referral system.
• To send product updates and important service announcements (no marketing email without your explicit consent).
• To understand aggregate usage patterns and improve the product.
• To sync signed-in account data and restore it across devices.
• To process payments for Cue Plus subscriptions.

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data under the following legal bases:

• Contract performance — processing account, sync, and request data to provide Cue.
• Legitimate interests — product analytics, reliability, fraud prevention, and service security.
• Consent — marketing communications and optional website interaction recordings you choose to enable. You may stop website analytics and withdraw recording consent through Privacy choices on this privacy page.

5. Third-Party Services

Cue uses the following third-party services. Each has its own privacy policy governing its data practices:

• Anthropic API — prompts and relevant request context may be sent to Claude models to generate responses. See the Anthropic Privacy Center.
• OpenAI API — prompts or audio may be processed by OpenAI models on supported routes. See OpenAI's business-data privacy information.
• Deepgram — real-time speech-to-text and meeting transcription. See Deepgram's Privacy Policy.
• Groq — Whisper speech-to-text on supported routes. See Groq's Privacy Policy.
• Google (Gemini API) — used for fast-path text tasks. See Google's Privacy Policy.
• Stripe — payment processing for Plus subscriptions. We never see your full card details. See Stripe's Privacy Policy.
• Cloudflare — CDN, infrastructure, and edge compute. See Cloudflare's Privacy Policy.
• PostHog (US Cloud) — product and website analytics using event names, timing, technical metadata, and a device or account identifier. Product analytics is designed not to include request content. On the website, PostHog loads by default unless you reject analytics and uses memory-only SDK persistence with autocapture, automatic page-view capture, and session recording disabled. A separate random website journey identifier is limited to the current browser tab's sessionStorage lifecycle and is used only to group the explicit website events described above. See PostHog's Privacy Policy.
• Google Analytics 4 — website visit and download-click measurement using sanitized page and referrer information, allowlisted campaign or click parameters, and technical browser or device metadata. It loads by default unless you reject analytics and may use analytics storage. Google Ads loading and conversion dispatch are disabled, and advertising storage, ad user data and ad personalization remain denied. See Google's Privacy Policy.
• Microsoft Clarity — website interaction recordings and heatmaps on heycue.io, with page, referrer, and technical browser or device metadata, and tags for paid or organic arrival, campaign source, medium, name and term, landing path, page type, and platform. Form fields and account details are masked. Clarity loads on a subsequent page load after explicit analytics acceptance and can use analytics storage; advertising storage stays denied. Pages with unsupported query parameters or sensitive authentication paths are excluded from Clarity loading. See the Microsoft Privacy Statement.
• Sentry — application crash and error reporting. Stack traces and diagnostic metadata may be sent so we can fix bugs. See Sentry's Privacy Policy.

We do not use Meta Pixel and we do not sell personal data. Website Google Ads conversion dispatch is disabled.

6. Cookies and Tracking

Basic website visit and download-click analytics starts by default with Google Analytics 4 and PostHog. Choose Reject analytics in Privacy choices below to stop collection; an existing rejection remains effective. Browsing and downloading never require enabling analytics. Default collection does not count as your affirmative acceptance and does not enable Microsoft Clarity interaction recordings. Choosing Accept analytics also enables Clarity on eligible heycue.io pages from the next page load. Google Analytics and, after explicit acceptance, Clarity may use analytics storage; advertising remains disabled. PostHog uses memory-only SDK persistence with autocapture, automatic page-view capture and session recording disabled. While basic analytics is enabled, sessionStorage holds a random website journey identifier and limited acquisition context within one browser tab.

Use the Privacy choices section to change your decision. Your choice can be remembered in localStorage for up to 180 days. A necessary first-party cookie records rejection independently so that an older saved acceptance does not override it. If browser storage is unavailable, the preferences section warns that the choice may not be remembered after the page closes. The website may also use storage for technical functionality such as remembering an invite-code session state.

Withdrawing consent stops further website analytics requests and clears this tab's website journey data. It does not automatically reload the page or erase data already received by providers. To enable analytics again on the current page after withdrawal, accept analytics, save your work and reload when ready. Previously stored provider cookies can also be removed through your browser settings.

7. Data Retention

• Beta email and invite data — retained for the duration of the beta program, and for up to 12 months after the beta ends.
• Subscription records — retained for 7 years as required by financial regulations.
• Signed-in account sync data — retained while your account is active or until you request deletion, subject to limited backup, fraud-prevention, security, and legal retention.
• Anonymized analytics — retained indefinitely in aggregate form.

You may request deletion of your personal data at any time (see Your Rights below).

8. Your Rights

Depending on your location, you have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you.
• Correction — request correction of inaccurate data.
• Deletion — request that we delete your data ("right to be forgotten").
• Portability — request your data in a machine-readable format.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — unsubscribe from communications at any time.

California residents (CCPA): You have the right to know what personal information we collect, the right to delete it, the right to opt out of its sale (we do not sell personal data), and the right to non-discrimination for exercising these rights.

To exercise any of these rights, email us at feedback@sophoninc.com. We will respond within 30 days.

9. Data Security

We use industry-standard measures to protect your data, including TLS encryption in transit and access controls on our infrastructure. However, no system is 100% secure. If you believe your data has been compromised, please contact us immediately.

10. Children's Privacy

Cue is not directed at children under 13. We do not knowingly collect personal data from anyone under 13. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

11. International Transfers

Your data may be processed in the United States and other countries where our service providers operate. By using Cue, you consent to the transfer of your information to these countries, which may have different data protection laws than your country of residence.

12. Changes to This Policy

We may update this policy as the product evolves. If changes are material, we will notify you via email at least 14 days before they take effect. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of Cue after changes take effect constitutes acceptance of the revised policy.

13. Contact

Questions or requests regarding your privacy? Contact us at feedback@sophoninc.com. We aim to respond within 3 business days.