Privacy
Effective: 4 October 2026 · Version 1.0
English is the official version and prevails in case of differences, subject to mandatory local law.
What Aki does not do
Aki does not require an account, run advertising, sell personal data, or upload your annotations to an Aki cloud. The app sends no usage data and no crash reports; the only exception is optional, anonymous install and update notices (see “App: data and purposes”). The website uses cookieless, aggregate page-view statistics (see “Cookies, choices and privacy signals”). This does not mean that nothing leaves your Mac: update requests and downloads contact third parties, and the agent you choose may send the content it reads to its AI provider.
Who is responsible and how to contact us
Murilo Prataviera, an individual based in Brazil, is responsible for this website and the personal data received for support and donations. This notice covers the Aki website and macOS app. For data that remains only on your Mac, Murilo has no remote access through Aki; you control its use and disclosure. Contact: useaki.app@gmail.com Alternatively, use GitHub issues. Issues may be public; ask for a private channel before sending sensitive information. An employer or other organization using Aki may have its own responsibilities for the data it processes.
App: data and purposes
When you mark the screen, Aki captures displays in memory and can save selected JPEG crops, comments, selected or recognized screen text, element text, selectors, HTML and source-file paths, app and window names, URLs, coordinates, timestamps, status, session identifiers and worktree paths. These provide the context you ask your coding agent to read. Data is stored in ~/.aki/annotations.json and ~/.aki/images/, or the location set by AKI_HOME. Local counts by day and worktree are stored in stats.json; preferences use macOS UserDefaults. To route marks and show session status, Aki reads local processes, working directories, ports, branches and agent session metadata. Claude session files and conversation logs can supply session titles and a short latest-message preview. This is local processing, not an upload to Murilo. If you use the app’s copy controls, selected text, images or a worktree path are placed on the macOS clipboard; clipboard managers or synchronization you enable can retain or transmit them independently. Aki can send two optional, anonymous notices to aki-updates.vercel.app: an install notice, about two minutes after the first launch, and an update notice each time Aki restarts on a new version. Each notice carries Aki’s version (and, for an update, the previous version), the macOS version, the chip (Apple Silicon) and the preferred language; the hosting provider (Vercel) adds the approximate state or region and country (never the city), and no notice contains an account, an identifier, an IP record kept by Aki or anything you mark or type. The notices let Murilo know how many people use Aki and on which version, so the right things get fixed first and old versions can be retired safely. They are on by default, are explained in Get started and in Settings → General → Privacy, and can be turned off there at any time; when they are off nothing is sent, and turning them off in Get started before the install notice goes out means it is never sent.
Permissions and your chosen AI agent
Accessibility lets Aki inspect interface elements and interact with the selected terminal. Screen Recording permits snapshots for marking, crops and text recognition. Automation/Apple Events lets it read browser URLs and Chrome elements; Chrome may require “Allow JavaScript from Apple Events.” You can revoke permissions in macOS System Settings, which limits related features. Aki delivers annotation context and, when requested, images to the agent you connect through local MCP/HTTP. Providers such as Anthropic or OpenAI then apply their own terms, retention, training and transfer rules according to your plan and settings. Aki cannot promise their confidentiality or delete their copies. Review the selection and destination before sending; screen content may contain secrets or other people's sensitive data. Only process data you are entitled to use.
Updates and downloads
Sparkle checks https://aki-updates.vercel.app/appcast.xml and downloads updates from the feed's links; current publishing scripts host update files on that Vercel domain. Website downloads use GitHub Releases when available. These providers receive the IP address, requested resource, time and HTTP/client metadata; update clients may identify app/version information. No annotation payload is included in Aki's update logic. Update settings include automatic installation and beta channels. macOS diagnostics or tools you independently use follow their own settings and policies. Download buttons on the website and the one-line installer are served from aki-updates.vercel.app. Each download sends the maker an anonymous notification with the approximate state or region and country (never the city) (from the hosting provider), operating system, browser and the page you came from, and the time; it never includes your IP address or anything that identifies you, and automated bots are not reported.
Website and browser storage
Vercel serves the site and may process access/security logs containing IP addresses, timestamps, requested URLs, browser/client metadata and referrers. Fonts and JavaScript libraries are served locally. The home page directly requests GitHub's API for repository stars/forks and, if available, the latest release, so GitHub receives connection data even if the repository is unavailable. The interactive marking demo keeps comments and marks in browser memory; its “send” animation does not contact an agent. Copying marks places them on your clipboard at your request. Reloading clears demo state, but not copies you keep. Links to GitHub, X and payment sites take you to their services.
Cookies, choices and privacy signals
The site uses Vercel Web Analytics, which counts page views without cookies and without storing IP addresses. The hosting provider (Vercel) derives aggregate data such as the page visited, the referring site, country, browser, operating system and device type; visitors are not identified or followed across sites. The site sets no tracking or advertising cookies and loads no advertising trackers. No consent banner is shown because no cookies are used (the TRACKERS list is empty). aki-lang remembers language, aki-cursor the cursor preference, and aki-consent, when used, categories and the choice timestamp. These localStorage values have no automatic expiry; clear them in browser site-data settings, or block storage (preferences will not persist). They are not uploaded by Aki as identifiers. Optional trackers would require an updated notice and consent where required by ePrivacy/PECR and local law, with a withdrawal option. There is no special Do Not Track or Global Privacy Control detection in the current code; the same no-sale, no-sharing-for-advertising and no-targeted-advertising practice applies to all visitors, including those sending these signals.
Donations and support
Donations are optional. PayPal handles its donation/card page; Pix is processed by your bank and Banco Inter. Aki does not collect card numbers or security codes. Murilo may receive donor name, contact information and transaction details made available by the processor or bank for receipts, reconciliation, disputes and legal obligations. USDT on TRON/TRC20 exposes wallet addresses, amount, time and transaction identifiers on a public, effectively permanent blockchain; wallet/exchange services also apply their own rules. The configured receiving address is identified in the code as a Bybit deposit address. QR codes are generated in the browser. Support via GitHub or an email address once configured gives Murilo your username/contact, message and any attachments you choose to send. Do not submit passwords, card details, full logs or unredacted screenshots.
Purposes and legal bases
Where Murilo processes personal data, requested support and donation administration rely, as applicable, on steps at your request or performance of an agreement (LGPD art. 7 V; GDPR/UK GDPR art. 6(1)(b)). Site delivery, security and proportionate troubleshooting rely on legitimate interests balanced against your rights (LGPD art. 7 IX; art. 6(1)(f)). Required accounting, tax or legal disclosures rely on legal obligations (LGPD art. 7 II; art. 6(1)(c)); legal claims may also rely on LGPD art. 7 VI and legitimate interests. Optional processing requiring consent uses LGPD art. 7 I and art. 6(1)(a); you can withdraw it without affecting prior lawful processing. This notice or merely using Aki is not blanket consent, including for sensitive data or overseas transfers. No data is required to create an Aki account because there are no accounts; withholding support/payment details may prevent that requested interaction. Purely local content is processed at your direction, not collected by Murilo.
Recipients and international transfers
Vercel provides hosting; GitHub provides repository/API, releases and issues; PayPal, Banco Inter and your bank handle payments; wallet/exchange providers and the TRON network handle crypto. Infrastructure providers may act as processors for some activities and independent controllers for their own security/legal purposes; banks, payment and AI providers are not all Aki processors. Necessary information may also go to authorities or advisers for lawful obligations or claims. We do not sell or share data for cross-context behavioral advertising. Brazil-based support and global providers may involve processing in Brazil, the US and other countries. Where transfer rules apply, a valid mechanism is required, such as adequacy or appropriate contractual safeguards under LGPD art. 33 and ANPD rules, GDPR chapter V or UK rules, and any separate consent/other conditions under APPI, PIPL or PIPA. This notice does not assert certification, a signed transfer agreement or a specific hosting region. Contact us for available details about a particular transfer; third parties publish their own practices.
Retention and deletion
Pending annotations remain until deleted. Completed marks are eligible for cleanup after 30 days by default, configurable in the app (0 means no automatic expiry). Completion/deletion normally removes Aki-managed image files; the configured image-space limit may remove even pending crops, starting with unused and older files. Cleanup runs while the app operates and is not a secure-erasure guarantee. Local statistics, preferences, authentication token and any corrupted-file backups do not share that annotation expiry. Use app history/storage controls; to remove all local Aki data, quit Aki and remove its data folder and preferences, taking care with a custom folder. Agent histories and OS/cloud backups are separate. Support records are kept as needed to resolve the request and related disputes; donation records for applicable accounting/tax and claim periods. Provider logs follow provider retention and service configuration; no verified fixed log duration is promised here. Public issues may remain until removed under GitHub's controls; blockchain records cannot be erased by Aki. For records Murilo holds, request deletion or the applicable retention details.
Security
The app's server binds to 127.0.0.1, checks local Host values and accepts authenticated clients or explicitly allowed extension origins. Local token and file permissions reduce unauthorized access; they do not protect against every process acting as your user. Website security headers restrict scripts and framing, and production connections use HTTPS. No separate encryption of annotation files at rest is implemented by Aki; protect your Mac, backups and agent configuration. No system is perfectly secure. Report concerns through the contact route without publishing an exploit or private content. Where applicable, affected people and authorities will be notified of a qualifying personal-data breach as required by law.
Your rights and requests
Use the contact route above, identify the relevant interaction and explain your request. We may seek proportionate proof of identity or authorization, not unnecessary identity documents in public. Requests are normally free, subject to lawful exceptions. We will explain any refusal, legal retention or permitted extension and available complaint/appeal route. Murilo cannot retrieve data held only on your Mac or erase independent providers' records; we can explain local controls or direct you to the provider. Aki does not make solely automated decisions with legal or similarly significant effects about you, or profile you for advertising.
Brazil, Europe and the United Kingdom
LGPD rights include confirmation, access, correction, anonymization/blocking/deletion of unnecessary or unlawful data, portability under applicable rules, information on sharing and consent consequences, consent withdrawal, applicable deletion and review of automated decisions. Confirmation/access can be answered in simplified form immediately or as a complete statement within 15 days, as applicable. You can complain to ANPD. GDPR/UK GDPR rights include access, rectification, erasure, restriction, portability, objection (including legitimate-interest processing), consent withdrawal and safeguards for automated decisions. Responses are generally due within one month, with legally permitted extensions explained. You may complain to your EEA supervisory authority or the UK ICO. Mandatory local rights prevail.
California and other US states
Where CCPA/CPRA or another state law applies, you may have rights to know/access categories and specific data, correct, delete, obtain a portable copy, opt out of sale, targeted advertising or certain profiling, limit qualifying sensitive-data use, and receive non-discriminatory treatment. Sources, purposes and recipients for identifiers/network activity, correspondence, transaction information and locally selected content are described above; local-only content is not collected by Murilo. We do not sell personal information, share it for cross-context behavioral advertising, or use it for targeted advertising; there is no such activity to opt out of. An authorized agent may submit a verifiable request. California requests are generally answered within 45 days, subject to lawful extensions. Other states, including Colorado, Virginia and Connecticut, may allow an appeal: reply through the same contact route asking for review; we will explain the outcome and how to contact the relevant state attorney general. These rights depend on the law's scope and thresholds; this notice does not assert every state law applies to this personal project.
Japan, China and South Korea
Where applicable, Japan's APPI provides rights concerning disclosure of retained personal data and third-party provision records, correction, cessation of use and deletion under statutory conditions; contact the PPC for complaints. China's PIPL provides rights to know, decide, restrict/refuse processing, access/copy, correct, delete, withdraw consent and request explanations; cross-border or sensitive-data processing may require separate consent and additional safeguards. South Korea's PIPA provides access, correction/deletion, suspension, consent withdrawal and other applicable rights; complaints may go to the PIPC. Requests follow applicable local periods and exceptions. We do not claim a local representative, localization arrangement or regulatory approval. A translated page alone is not a declaration that all extraterritorial requirements have been satisfied.
Children and changes
Aki is a developer tool, not directed to children under 16. Do not send us children's personal information. If we learn we hold improperly collected child data, we will take steps to delete it or meet applicable parental-consent requirements, including COPPA for under-13s, LGPD best interests and local rules (including under-14 protections in China/Korea). A parent or guardian can contact us to request review/deletion; we do not collect birth dates to verify age. The date and version above identify this notice. Material changes will be highlighted on the site or in release information as appropriate, and fresh consent obtained where legally required before new consent-based processing. English prevails only to the extent permitted by mandatory local law.