Privacy
What leaves your Mac, and what doesn't
Short version: your records stay on your Mac, and the only thing that leaves is what a request needs, sent to the AI account you chose.
The principles
- No telemetry and no analytics. The app doesn't measure you or send usage data anywhere.
- No Steady Flow account and no Steady Flow server. We don't receive your files, answers or progress.
- Your records stay on your device. Courses, progress and mistakes live in a local database. Your originals are archived untouched.
- The AI provider you connect is the only recipient of content. It handles that content under its own terms and your account settings, which the app can't see or change.
- No crash reports are uploaded. Local logs hold no keys, sources or sealed answers.
Every flow
| What happens | Who receives it | What is sent | Your control |
|---|---|---|---|
| A tutoring moment | Your connected provider (Claude or ChatGPT), through the official tool, on your account | The lesson prompt, the cited pages from your files (page images only if image input is used), a short session summary, your current answer, and the full solution to the current problem so the tutor can guide you. The solution stays hidden from you until you commit. | Disconnect the route, set transcript retention, or delete everything (local data only) |
| Not sent in a tutoring moment | n/a | File names and folder paths (unless they appear in cited content), your other courses, your history beyond a short mastery summary, and credentials. | n/a |
| Readiness test | Same provider | One synthetic message with no course content. | Runs when you press Test or start a session |
| Background reading (sorting files, building the course pack) | Same provider | Document pages or snippets for that job only. | You can switch background use off per provider |
| Hybrid research (only if you choose to use outside sources) | The provider, plus the web sites it visits | The research question and the addresses fetched. | Off in sources-only mode |
| Installing a provider's tool | The provider's official download host | A normal download request for a pinned, hash-checked release. | Only runs when you press Install |
Once content has gone to a provider it stays with that provider under its terms. Disconnecting stops anything further from being sent. Disconnecting does not delete what was already sent.
Updates
Automatic update checks are off in current builds. If they are switched on later, they would send only the app version, your OS and architecture, with no identifier, and you'd get a setting to turn them off.
This website
It sets no cookies, runs no analytics, loads no fonts or scripts from other sites, and has no sign-up form. Your theme choice (light or dark) is saved in your own browser only. The site is hosted on Cloudflare Pages, which keeps its own server logs under its own policy.
Your data, your call
Export everything, back up and restore, or delete everything from settings. The free-window record is not learner data, so delete-everything leaves it in place, and the confirmation says so.
This page follows the app's published data-flow record. If the app ever changes what it sends, this page changes first.