Privacy

Last updated 30 August 2026

The short version: Moe runs on your Mac and keeps your data there. There are no accounts, no telemetry, and no server of ours in the middle. What leaves your Mac is what you send to the AI provider you connected, the connections you set up yourself to services like your mail, and the downloads listed below.

What stays on your Mac

• Your voice. Speech recognition runs on your Mac using local models. Audio is not sent anywhere. It is not stored after it is transcribed.
• Dictation. Speech is turned into text on your Mac and typed at the cursor. Once you connect an AI, a polish pass sends each transcript to it for a rewrite (see below); turn that off and nothing you dictate leaves your Mac. Moe's own log records when you dictated and how many characters, not the words.
• Memory and vocabulary. What Moe knows about you lives in plain Markdown and text files in ~/.moe and ~/.hermes. You can read, edit and delete them with any editor. When you correct a dictated word, Moe notices and, after the second time, adds the spelling to ~/.moe/vocabulary-learned.txt. That is on by default and can be turned off.
• Contacts. Off by default. If you turn on names from Contacts, macOS asks for permission and Moe keeps a copy of the names in ~/.moe, readable only by your account, to help the dictation spell them. Turning it off deletes that copy.
• Conversation history. The agent keeps your conversations in a database file in ~/.hermes on your disk. Moe does not sync or upload them.
• Meetings. A meeting is recorded only when you start it, and a red indicator shows the whole time. Recordings, transcripts and notes stay in ~/.moe/meetings on your Mac, readable only by your account; the audio is deleted once the notes are written unless you choose to keep it, and any meeting can be deleted from Settings. If "Summarise with your AI" is on, the transcript goes to the AI you connected while the meeting is running — the newly transcribed lines about once a minute, so Moe can spot action items — and then the whole transcript once at the end to write the notes. A question you ask during the meeting sends the recent lines with it, and if you step away and come back, the lines you missed go once for the recap. Off, nothing about the meeting leaves your Mac. If notes are pushed to your own Telegram afterwards, they go through your assistant to your own account and nobody else’s.
• Credentials. A Claude subscription sign-in is stored in your macOS Keychain. A ChatGPT sign-in is held by the vendor's own tool. An API key is written to ~/.hermes/.env, a file only your account can read. None of them are sent to us.

What leaves your Mac, and when

• Requests to the AI you connected. When you talk to the agent, your request and the context it needs go to the provider you chose: Claude, ChatGPT, an API key with a provider, or a local model on your machine. It goes there directly, through that vendor's own official tool or API, never through us. Their privacy terms apply to what they receive. When "Moe sees your screen when you talk to it" is on (it is by default), that context includes a screenshot of the screen under your cursor taken the moment you press the talk key, sent with each spoken request and never for dictation; it is not saved to disk, and the switch to turn it off is in Settings.
• Dictation polish. The polish setting sends each transcript to your connected AI for one rewrite. It is on by default once an AI is connected, and does nothing until then. The setting says exactly what it does. Off, nothing you dictate leaves your Mac.
• Connectors you set up. If you connect mail, a calendar, or a messaging service such as WhatsApp or Telegram, Moe talks to that service directly from your Mac, the same way a mail client does. If you give the agent a Telegram bot so you can reach it from your phone, your messages to it travel through Telegram. Before the agent sends a message or an email on your behalf, it shows you exactly what will go out and waits for you to confirm.
• Downloads. On first use, Moe downloads the speech and voice models it needs from Hugging Face, and the installer fetches the agent runtime from GitHub. These are ordinary file downloads and carry no information about you.
• Update checks. When automatic update checks ship, the app will fetch a small file from this site to learn the current version. That is a plain web request with no identifier attached.

Mail you connect

Connecting a mailbox is optional and off until you do it. Moe reads Gmail over IMAP with an app password you create yourself at myaccount.google.com/apppasswords — you never sign in to Google through us, and we never hold a key to your account. You can connect as many mailboxes as you like, personal and work.

• The password goes into your macOS Keychain, never into a file. The only thing written to disk is the address, the label you gave it, and the mail host, in ~/.moe/connectors/gmail-accounts.json, readable only by your account.
• Moe connects to your mail server directly from your Mac, over IMAP with TLS, the same way a mail client does. Nothing passes through a server of ours, because there is not one.
• Reading changes nothing. Moe opens your mailboxes read-only, so looking at your mail does not mark it read, move it or delete it.
• What it keeps. Every ten minutes Moe notes the date, the sender, the subject and whether it is unread, for recent mail only, into the brief in ~/.moe/context on your disk. Message bodies are not stored there.

The one place mail does travel, and it is your choice. The brief is part of what Moe tells your connected AI when you ask it something, so the senders and subjects in it go to the provider you chose — from your Mac, directly, under their terms. Ask about a particular message and the part needed to answer goes too. If you connected a local model, nothing leaves your Mac. Turn the mailbox off and none of it is gathered in the first place.

The deep read is separate, and it asks first. Moe can also do a one-off pass over up to ninety days (or, if you ask for it, up to three years) of your inbox and sent mail to learn how you write and who matters to you. It asks for your consent per mailbox before it starts and skips any mailbox that has not given it. That pass does send the text it read to your connected AI to be distilled; the raw text is written to ~/.moe/context/crawl, readable only by your account, and deleted as soon as the distilling is done. What survives is a digest you can read and delete in ~/.moe/memory/profile.

Taking it back. Revoke the app password at myaccount.google.com/apppasswords and Moe cannot reach that mailbox again, from that moment, whatever else is on your Mac. To clear what is on your Mac, delete the Keychain item and ~/.moe/connectors/gmail-accounts.json, and the files under ~/.moe/context and ~/.moe/memory/profile — they are ordinary files, and deleting them is the deletion.

What Moe reads from your mail is never sent to us, never sold or shared with anyone for their own purposes, never used for advertising, and never used to train models of ours. We have none, and no server to train them on.

What we do not do

• No analytics, crash reporting, or usage telemetry of any kind.
• No accounts. You do not sign up for anything to use Moe.
• No proxying. We never see your requests, your transcripts, or your keys.
• No advertising, and no selling or sharing of data. There is no data to sell.

This website

This site is static. It sets no cookies and runs no analytics scripts. It is hosted by Vercel, whose servers keep ordinary web-server logs for their own operation.

Questions

Write to hello@moebot.app. If this page and the app ever disagree, tell us; the app is the truth and this page will be corrected.