Privacy

What Ghost observes

Ghost uses macOS accessibility APIs to see which app you're using, when you switch, and how long you stay. It also reads window titles, browser URLs, and on-screen text to understand your work context.

Ghost does not take screenshots, record keystrokes, read file contents, capture audio or video, or monitor network traffic. It only detects whether your keyboard is active — never what you type.

Sensitive data is redacted

Before anything is stored, Ghost automatically redacts emails, passwords, API keys, phone numbers, credit card numbers, social security numbers, and tokens. This happens at capture time — sensitive data is never written to disk.

Everything stays on your Mac

All data is stored locally in a folder on your computer. Ghost does not sync to the cloud. Session data is automatically cleaned up over time — typically retained for 90 days, with snapshots kept for 14 days.

What leaves your Mac (only if you choose)

By default, Ghost sends nothing over the network. If you sign in and enable AI features, redacted session context is sent to your chosen AI provider to generate summaries and reflections. This only happens when you explicitly request it.

If you're signed in, Ghost sends anonymous feature usage telemetry (like app version and which features you use) to help us improve the product. This contains no personal data or focus activity. You can turn it off in Settings.

You're in control

You can disable content snapshots, disable all AI features, opt out of telemetry, and delete all your data — all from Settings. Ghost also includes debug views where you can inspect exactly what was captured and what was sent to AI.

About this website

This page is about the Ghost app. The website itself (ghost.fitness) is separate and collects a small amount of data to help us understand what's working.

We use Vercel Analytics for page views. It doesn't set tracking cookies or collect personal information. When you click the download button, we record the button position, your platform (Mac / mobile / other), viewport size, timezone, scroll depth, country, and a one-way hash of your IP + browser — so we can count unique clicks without storing your IP. If you join the waitlist, your email is stored alongside the same context.

None of this leaves our own infrastructure. We never sell it, never share it with ad networks, and delete analytics older than one year.

If we send you an email, clicks on links in that email are logged — we use that to see whether the links we send you are useful. We don't track whether you opened the email itself.

If you joined the waitlist and want to stop receiving emails, every email we send has an unsubscribe link in the footer. If you'd rather be removed from our records entirely, email us at hello@ghost.fitness and we'll delete your data.