Privacy & security

What stays on your Mac#

• Inbox, agent state, settings and logs live in ~/.onestation/.
• Your license and device keys are kept in the macOS Keychain.
• Agent conversations, prompts and answers are never sent to us.

Requests that use a language model#

When Talk needs a model to understand a request or pick the right agent, onestation uses your own Claude login. Those requests go directly to Anthropic under your account. We never see them.

Phones and servers: the relay#

Your phone and your machines reach your Mac through the onestation relay. They dial out, so nothing on your Mac or server is exposed to the internet.

• End-to-end encrypted. Every message is encrypted between your phone or server and your Mac with keys created on those devices. The relay forwards sealed messages and cannot read questions, answers, agent names or files.
• You approve every device. A new phone or machine needs a matching six-digit code and your click on Allow on the Mac. Approval can’t be done from a phone.
• The pairing secret never reaches a server. It travels in the part of the link after #, which browsers don’t send.
• Revocation is immediate. Revoking a phone or machine in Settings disconnects it within seconds.
• What the relay sees: that your devices are connected, when, and how much data flows. Not the content.

Voice#

Dictation runs on your Mac with Apple’s on-device speech recognition. Audio is sent to Apple only if you turn on server recognition for languages your Mac can’t handle. See Voice privacy.

What we store#

• Purchases: Stripe processes payments. We receive your email, country, plan and payment status, never your card.
• Licenses: email, license ID, plan and up to two Mac activations (a random device identifier and the Mac model).
• Updates: the daily update check is logged (IP address, app and macOS version) for up to 30 days.
• Diagnostics you export are redacted: app and macOS versions plus log event counts, without log text, agent content, paths, credentials or identifiers. They only reach us if you send them.

Website analytics without cookies#

onestation.dev uses no cookies, no advertising pixels and no cross-day visitor profiles. We count page views and clicks such as download and buy with a visitor hash that changes every day. Do Not Track and Global Privacy Control turn measurement off. Details are in the privacy policy.

Report a security issue#

Email hello@onestation.dev with “Security” in the subject. Please don’t post details publicly before we have replied.