Privacy

Last updated 22 October 2026

Airlock is paid for by the people on its Plus and Pro plans, not by advertising, and it is built so that being paid does not require watching you. This page says exactly what leaves your Mac, because a policy that only says what does not is worth very little.

What stays on your Mac

All of it, apart from one thing you can turn off: a call's transcript, on Plus or Pro, so that its notes are written online (point 6 below). If you say yes to usage counts (point 7), Airlock also sends counts of when some of these things happen, such as an approval answered or call notes taken, but never what any of them were. Specifically:

Your clipboard history — including anything you copied and forgot about.
Anything you parked in the drop tray.
Your code, your prompts, and anything your coding agents do or say.
Your agent sessions — which projects, which commands, which approvals.
Your approval rules (policy.yaml).
Your calendar events, read through macOS with your permission and never copied off your Mac.
Dictated audio and its transcript. Transcription runs on your Mac using macOS speech recognition; audio is not uploaded and not stored.
Your calls, when you say yes to notes: what is said, its transcript and the notes. The words are transcribed on your Mac using macOS speech recognition. On Plus and Pro the notes are written online unless you turn that off (point 6 below); on Free, or with that off, your Mac's own model writes them; the sound is not uploaded and never kept. On Plus and Pro, telling the voices apart (Person 1, Person 2…) also happens on your Mac, and no voice is remembered after the call. Transcripts and notes are saved in ~/Airlock/Meetings, readable only by you.

There is no account and no sign-in, so there is no server that could hold any of this even if we wanted it to.

What leaves your Mac

Nine requests. Three of them happen only if you turn them on, two, on Plus or Pro, can be turned off, and one happens only after a long call on Free. This is the complete list.

1. Activating your licence

Once, when you paste your licence key: Airlock sends the key and this Mac's hardware identifier to our licence server, which registers the licence to that Mac with Lemon Squeezy and sends back a signed licence. It does not happen again unless you activate on a different Mac.

2. Checking your Plus or Pro subscription

In the days around your renewal date, Airlock asks our licence server whether your subscription is still active, and receives a new licence valid for the next period.

What is sent: your licence key, plus one hardware identifier for this Mac (its IOPlatformUUID) — that identifier is how one licence stays tied to one Mac, and it is passed to Lemon Squeezy as the name of the activation. Renewals send the signed licence back instead of the key, and it carries that same identifier and the email address you bought with. Nothing else: no usage, no session data, no prompts, no file names.
How often: only near your billing date. If you pay yearly, that is a handful of requests a year and none at all for roughly the eleven months in between. A copy on Free never contacts the server at all, because there is no subscription to check.
Your IP address is necessarily visible to our host (Cloudflare) as it is for any request on the internet. It is used to rate-limit the licence endpoints, which means a short-lived counter against it, and it is never written down beside your licence or your email.
If it fails, nothing happens for a further two weeks — your licence carries its own grace period, so a flight or a bad network is invisible to you.

3. Checking for updates

Airlock can update itself using Sparkle, a widely used open-source updater. This is off until you turn it on: Airlock asks before its first check and does nothing if you decline. When enabled, it requests an update feed from our host. No identifier is attached.

4. Album art

When the media card is showing something Spotify is playing, Airlock loads the cover image from the address Spotify gives it — a request to Spotify's image servers, not to us. It carries nothing about your licence, though those servers necessarily see your IP address as with any image on the internet. Switch the media widget off in Settings and it never happens.

5. Crash reports, if you say yes

If Airlock crashes, or stops answering for five seconds or more, it can send a report so we can find and fix the cause. This is off until you turn it on: Airlock asks once during setup and once more after it has quit unexpectedly, and the switch is in Settings › General. Turning it off stops it at once and deletes any report not yet sent. The crash that prompted the question is never sent; reports start from the next one.

What is sent: the Airlock version, the macOS version, your Mac's model, and where in Airlock's code it stopped.
What is never sent: your name, your Mac's name, your files, what is on your screen, anything you copied or said, or what your agents were doing. Account names inside file paths are replaced before a report leaves your Mac, and no identifier for you or your Mac is attached.
Where it goes: to Sentry, a crash-reporting service, which stores reports for us in the EU. Your IP address is visible to Sentry, as with any request on the internet. It is not stored, and it is not used to work out where you are.

6. Call notes written online, on Plus and Pro

When a call you took notes on ends, Airlock writes the notes from its transcript. On Plus and Pro it sends the transcript to our server, which passes it through OpenRouter, a service that connects apps to AI models, to the model that writes the notes: on Plus, Google's Gemini; on Pro, OpenAI's GPT, run by Microsoft on its Azure service. The notes come back to your Mac and are saved there. This is on unless you turn it off: the switch is "Write notes online" in Settings › Voice, and with it off, notes are written on your Mac. If you chose "Keep on this Mac" when an earlier version of Airlock asked, that choice is kept.

What is sent: the call's transcript, anything you typed during it, and your signed licence, so that our server can tell which plan you are on. Never the sound: it is turned into text on your Mac and not kept.
What happens to it: our server passes it on without keeping it. OpenRouter only sends it to services that keep nothing once the notes are written (on Pro, only to Microsoft's Azure), and it is never used to train AI. If none of those is available at that moment, the notes are written on your Mac instead, or later on a Mac without Apple Intelligence.
What we keep: what each set of notes cost, how long it was, and when, so that no plan costs more than it brings in. Never anything that was said.
When it does not happen: on Free, and with "Write notes online" off, notes are written on your Mac by Apple Intelligence, or not at all on a Mac without it; you keep the transcript either way. Once a month's online notes are used up, they are written on your Mac, or, on a Mac without Apple Intelligence, online when the next month begins. On a Mac without Apple Intelligence, if writing them online doesn't work, Airlock sends the transcript again later, at most three more times. If your Mac was offline, they are written on it and redone online once it is back, with the first version kept beside them. If your plan does not include online notes, our server turns the transcript away without passing it on or keeping it, and your Mac stops sending them for 30 days, or until your plan changes.
Your IP address is visible to our host as with any request, and is used only to rate-limit, as for the licence server.

7. Usage counts, if you say yes

If you turn on Share usage counts, Airlock counts which features you use (an approval answered, call notes taken, a setup step finished) and sends the counts in batches, so we can see what gets used and where setup stops. This is off until you turn it on: Airlock asks on the first setup screen, or once in the notch after an update, and the switch is in Settings › General, beside crash reports.

What is sent: the counts, and a random number made for this Mac when you said yes, so that one Mac's counts can be told apart from another's. Also the Airlock and macOS versions, your Mac's model, its language and your plan.
What is never sent: what you copy, type, say or see; commands, prompts, or file or project names; your name, your email, your licence or your Mac's name. Each count can only carry a name, a yes or no, a number or a short code word, and our server turns away anything else.
Where it goes: first to our server, which notes the country the counts came from and drops your Mac's IP address. Then to PostHog, a product analytics service, which stores them for us in the EU, with no profile of you.
How to stop: turn it off in Settings › General. The random number is deleted, and so is anything not yet sent.

8. The voice model, once, on Plus and Pro

On Plus and Pro, call notes tell the voices on a call apart: Person 1, Person 2… For that, Airlock downloads a voice model from this website once, about 100 MB, and keeps it on your Mac. It is NVIDIA's Nemotron 3 speaker model, converted for Macs by Fluid Inference. It happens only on Plus or Pro with call notes on, never during a call, and not on a metered or Low Data network unless you press Try again. Turn off "Tell voices apart" in Settings › Voice and it never happens.

What is sent: nothing about you: no licence, no identifier and nothing from your calls. It is an ordinary download of the same files for everyone.
What happens on your Mac: the model listens to the other side of a call, or the room in an in-person meeting, and numbers the voices it hears. It knows nobody, and what it heard is gone once the call's lines are numbered. No voice is remembered from one call to the next.
Your IP address is visible to our host as with any download from this website.

9. Opening a long Free call, after moving to Plus or Pro

On Free, call notes cover a call's first 30 minutes. If the call goes on, Airlock keeps hearing it, and keeps the rest on your Mac locked for 7 days: scrambled with a key your Mac does not keep, so nothing on the Mac can read it. If you move to Plus or Pro within those 7 days, Airlock asks our server to open that key, and then unlocks the rest of the call on your Mac. If you don't, the locked part is deleted after 7 days.

What is sent: the call's key, itself locked so only our server can open it, your signed licence and this Mac's hardware identifier (as in point 2), and the day the locked part expires. Never anything that was said: the words stay on your Mac.
What happens to it: the server checks the licence is paid for and belongs to this Mac, opens the key and sends it back. Nothing is stored and nothing is logged.
When it does not happen: on Free, after calls of 30 minutes or less, and once the 7 days are over.
Your IP address is visible to our host and used only for rate-limiting, as in point 2.

Buying Plus or Pro

Payments are handled by Lemon Squeezy, who act as merchant of record. You buy from them, not from us, and your payment details go to them and never to us or to your Mac — we never see or store a card number.

From them we receive your email address, your licence key, and your subscription status, which is what lets us issue and renew your licence and answer you if you write in. Lemon Squeezy handle billing data under their own privacy policy.

This website

No cookies, no tracking pixels, no advertising, and nothing that follows you from one site to another. The one webfont is served from this site rather than from Google. Our own two scripts work the approval demo on the front page and count visits, as below. Nothing is set in your browser, except one note if you tap the Windows line, as below.

To know how many people visit and which sites send them here, we use Cloudflare Web Analytics, run by our host. It sets no cookies, stores nothing in your browser and does not identify you: it counts the page you opened, the site that linked here, your country, and your browser and device type, as totals. Our host also keeps standard short-lived server logs for security and reliability, as any host does, and that is how we count downloads.

To learn which pages and buttons people use, our own script also tells our server when a page opens, when a Download, Get Plus or Get Pro button is clicked, and when you tap “On Windows? Tap here so we know you’d use it.” It sends the page, the name of the site that linked here (not the page you came from), and any campaign tags in the link. Our server adds your country and your browser, system and device type, and passes that on to PostHog, a product analytics service, on its servers in the EU. Your IP address is never passed on. To tell visits apart without a cookie, our server turns your IP address and browser into a number using a secret key that changes every day: the number cannot be turned back into your address, and today’s cannot be matched to tomorrow’s. If your browser asks sites not to track you (Global Privacy Control or Do Not Track), the script sends nothing, and the Windows line is not shown.

If you tap the Windows line, your browser keeps a note that you did, in its local storage for this site (not a cookie), so the line thanks you instead of asking again. Only this site’s own script reads it, and it is never sent. Clearing this site’s data in your browser removes it.

Who processes data on our behalf

Sentry — crash reports, only from people who turn them on.
Lemon Squeezy — payments, invoicing and tax as merchant of record.
Cloudflare — hosting for this site and our server, including the record of what online notes cost, and the cookie-free visit counter on this site.
PostHog — counts of visits and button clicks on this site, and the app's usage counts from people who turn them on, with no IP address and no cookie, in the EU.
OpenRouter — passes call transcripts to the AI model, for people on Plus or Pro who leave online notes on.
Google — Gemini, the AI model that writes the notes on Plus. It keeps nothing.
Microsoft — runs OpenAI's GPT, the AI model that writes the notes on Pro, on its Azure service. It keeps nothing, and OpenAI does not receive it.

That is the entire list. No advertising network, no CRM, no email marketing platform.

How long anything is kept

Subscription records are kept while your subscription is active and afterwards only as long as tax and accounting law requires. Server logs are short-lived and are not used to build any profile.

The record of what online notes cost is kept with your subscription record and never includes anything that was said. Call transcripts are not kept by us, by OpenRouter or by whoever runs the model.

Your rights

If you are in the EU or UK, you have the right to access, correct, export or delete your personal data, to object to processing, and to complain to your data protection authority. Write to hello@useairlock.app and we will act on it.

Deleting your data means cancelling your subscription and removing the record of it. Your copy of Airlock keeps Plus or Pro until the period you paid for ends, because the licence on your Mac is self-contained, and then moves to Free.

Children

Airlock is a Mac utility for professional use and is not directed at children under 16.

Changes

If this policy changes in a way that affects what leaves your Mac, that change will be in the release notes of the version that makes it — not quietly published here. Adding a new outbound request without saying so would break the only promise on this page that matters.

Who we are

Airlock is made by Guillermo del Olmo, Carrer Bobines 46, 08197 Valldoreix, Barcelona, Spain.
Contact: hello@useairlock.app