Privacy
Sayonic is a voice assistant that sees your screen, so you should know exactly what leaves your Mac. Here it is.
The short version
- The app has no analytics, no tracking and no ads.
- Your voice, your request and a summary of your screen go to the AI services that answer you, and only while you're asking.
- Audio isn't saved. Nothing is kept on a Sayonic server except what's needed for your licence.
- Your API keys stay in your Mac's Keychain.
What stays on your Mac
- API keys and your licence key are stored in the macOS Keychain, set to this Mac only, so they don't sync to other devices.
- Unfinished tasks are remembered so you can pick them up later. They're encrypted (AES-GCM) with a key kept in your Keychain, kept for at most 7 days, and never include audio or screenshots. A saved task resumes only when you ask. You can clear them, or turn this off, in Settings → Privacy.
- File contents. When Sayonic searches your files, it uses Spotlight on your Mac. It has no index of its own.
- A log file in your Library's Logs folder, for troubleshooting. Sayonic never uploads it.
What is sent, and where
OpenAI, with your key
While the pill is listening, or during a conversation, your voice is streamed to OpenAI so it can be understood and answered. Requests for reasoning go to OpenAI too, sent with storage turned off. This uses your own OpenAI API key, so OpenAI's terms and privacy policy for API use apply.
Jev, with your key
The built-in brain asks Jev (by TypeSafe, api.typesafe.ai) to decide quickly which action you meant. It receives your request and the screen summary described below.
The brain you choose
If you pick an API provider (OpenAI, Anthropic, Google Gemini, Groq, OpenRouter, or a service you add), your request goes to that provider with your key. If you pick an agent app (such as Claude Code or Codex), it runs on your Mac, signed in with its own account, and follows that app's own privacy terms.
What the brain sees
- A screen summary: the front app, its window title, the labels of what's on screen and, in a browser, the page address.
- A screenshot of the front window, only when an agent or API brain asks for one, and only if you've allowed Screen Recording.
- File names, folders and dates from a file search. The contents of your files are not sent.
Updates
Every 6 hours Sayonic checks a public update feed hosted on GitHub. It asks you before it installs anything.
Your licence
Until you enter a licence key, Sayonic doesn't contact us about it. Once you do, the app sends the key and a scrambled (SHA-256) ID for this Mac to sayonic.app to check the subscription is active and to count your Macs (up to 3). The raw ID never leaves your Mac.
Permissions
- Microphone: to hear you.
- Accessibility: to click, press keys and type for you, and to read the labels on screen.
- Screen Recording: to see the front window when a brain asks.
- Automation: to work with apps such as Chrome, Safari and Notes.
- Calendar (optional, add only): to add events. Sayonic can't read your calendar.
- Files and Folders, Full Disk Access (optional): to find and open files you ask for.
You can turn any of these off in System Settings → Privacy & Security.
This website
- sayonic.app has no analytics and sets no cookies of its own. It's hosted on Cloudflare, which handles the network traffic to serve it.
- The download page doesn't ask for your email.
- Buying: checkout is handled by PayPal on the Buy page, which loads PayPal's script. We never see your card. PayPal tells us your email address and your subscription's status, which we keep with your licence key and the scrambled IDs of the Macs using it, so the key works and can be sent to you.
Questions
A contact address will be listed here before launch. If this policy changes, the date at the top changes with it.