Privacy Policy

Last updated: April 14, 2026 · Effective immediately

Cue ("we", "our", or "us") is a macOS AI assistant developed by Sophon LLC. This Privacy Policy explains what information we collect, how we use it, your rights, and the choices you have.

1. Information We Collect

We collect only what is necessary to operate the service:

• Email address — collected when you redeem an invite code or join the waitlist, used to manage beta access.
• Invite code activity — which codes have been redeemed and by whom, to power the referral system.
• Anonymized usage metadata — aggregate counts of feature usage (e.g., number of agent requests), event timing, error codes, and a randomly generated device identifier (UUID), processed by PostHog (US Cloud) and Sentry. We never attach the content of what you say, type, or see (no transcripts, no screenshots, no selected text). You may disable analytics collection in Settings → Privacy.
• Payment information — if you subscribe to Cue Plus, payment is processed by Stripe. We do not store your card number or billing details.

We do not collect your name, phone number, location, or any biometric data.

2. What Stays on Your Device

The following data is stored locally on your Mac and is never transmitted to our servers:

• Interaction history — all past agent sessions stored in ~/.cue/history/.
• Screenshots — captured during agent mode for immediate context processing; not stored remotely.
• Voice audio — processed in real-time for transcription and immediately discarded.
• Selected text and clipboard content — used only in the moment to fulfill your request, never logged.
• App credentials and API keys — stored in macOS Keychain, never transmitted.

3. How We Use Your Information

• To grant and manage access to the Cue beta program.
• To operate the invite code and referral system.
• To send product updates and important service announcements (no marketing email without your explicit consent).
• To understand aggregate usage patterns and improve the product.
• To process payments for Cue Plus subscriptions.

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data under the following legal bases:

• Contract performance — processing your email to provide beta access and manage your account.
• Legitimate interests — anonymized usage analytics to improve the product.
• Consent — marketing communications, which you may withdraw at any time.

5. Third-Party Services

Cue uses the following third-party services. Each has its own privacy policy governing its data practices:

• Anthropic API — voice commands and screen context are sent to Claude models to generate responses. Anthropic does not use API inputs to train models by default. See Anthropic's Privacy Policy.
• Deepgram — real-time speech-to-text. Audio is processed transiently and not stored for training. See Deepgram's Privacy Policy.
• Google (Gemini API) — used for fast-path text tasks. See Google's Privacy Policy.
• Stripe — payment processing for Plus subscriptions. We never see your full card details. See Stripe's Privacy Policy.
• Cloudflare — CDN, infrastructure, and edge compute. See Cloudflare's Privacy Policy.
• PostHog (US Cloud) — anonymous product analytics. We send only aggregated event names, timing, error codes, and a randomly generated device UUID. No content (no transcripts, screenshots, or text you dictate) is ever sent. See PostHog's Privacy Policy.
• Sentry — application crash and error reporting. Stack traces and error metadata are sent so we can fix bugs. IP addresses are stripped before transmission. See Sentry's Privacy Policy.

We do not use Google Analytics, Meta Pixel, or any advertising or behavioral tracking networks. We do not sell, share, or rent your data to any third party for advertising purposes.

6. Cookies and Tracking

Our website (heycue.io) uses PostHog for anonymous visit analytics (page views, referrers, country) — no cookies are used for advertising. We do not use any advertising tracking pixels (no Google Ads, Meta Pixel, etc.). Local storage is used only for technical functionality (e.g., remembering your invite code session state).

7. Data Retention

• Beta email and invite data — retained for the duration of the beta program, and for up to 12 months after the beta ends.
• Subscription records — retained for 7 years as required by financial regulations.
• Anonymized analytics — retained indefinitely in aggregate form.

You may request deletion of your personal data at any time (see Your Rights below).

8. Your Rights

Depending on your location, you have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you.
• Correction — request correction of inaccurate data.
• Deletion — request that we delete your data ("right to be forgotten").
• Portability — request your data in a machine-readable format.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — unsubscribe from communications at any time.

California residents (CCPA): You have the right to know what personal information we collect, the right to delete it, the right to opt out of its sale (we do not sell personal data), and the right to non-discrimination for exercising these rights.

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

9. Data Security

We use industry-standard measures to protect your data, including TLS encryption in transit and access controls on our infrastructure. However, no system is 100% secure. If you believe your data has been compromised, please contact us immediately.

10. Children's Privacy

Cue is not directed at children under 13. We do not knowingly collect personal data from anyone under 13. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

11. International Transfers

Your data may be processed in the United States and other countries where our service providers operate. By using Cue, you consent to the transfer of your information to these countries, which may have different data protection laws than your country of residence.

12. Changes to This Policy

We may update this policy as the product evolves. If changes are material, we will notify you via email at least 14 days before they take effect. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of Cue after changes take effect constitutes acceptance of the revised policy.

13. Contact

Questions or requests regarding your privacy? Contact us at [email protected]. We aim to respond within 3 business days.