Not a policy. An architecture.

What is stored on your Mac

Audio is never stored: ShogunAI never writes meeting audio to disk. What persists is the transcript and where it came from.

There is no screen-recording feature and no video capture path.

Visual recall is off by default. When enabled, selected compressed frames are encrypted, stay on this Mac, and expire on the finite period you choose. You can browse and delete frames in the timeline; turning Visual recall off wipes its frames.

Storage and encryption

• The local database is encrypted; its key lives in the macOS Keychain.
• Secrets — AI provider keys and OAuth tokens — are stored only in the Keychain, never in files, the database, or logs.
• Logs and telemetry never contain captured content.
• There is no ShogunAI cloud vault. Your memory has no server-side copy.

Named external data paths

Everything ShogunAI remembers lives in an encrypted database on your Mac. Task data sent outside the device goes to the named destinations, and those exits are recorded in an on-device traceability log. The log keeps digests and flags, not the content itself. Anonymous product analytics and update checks contain none of your content and are not in the log.

• Chat, actions, and drafts — the AI provider you choose, through its supported assistant plan or your own API key.
• Service-funded background AI work — Anthropic through the ShogunAI gateway.
• Live meeting transcription and dictation audio — Deepgram with your own key.
• Optional dictation formatting — dictated text to Groq if you add your own key.
• Gmail — inbox reads, drafts, and sends go directly to Google’s Gmail API after you grant access in Google’s consent screen; no intermediary service sees them.

Your controls

• Pause capture at any time from the notch or Settings, and exclude apps or websites before anything is written.
• Delete the last hour, the last 24 hours, or everything. Deletion removes rows locally.
• Choose the AI provider through your own subscription or key.
• Read outbound activity in the traceability log and stored screens in the timeline.

Nothing is sent on your behalf

Actions that leave your device — sending, posting, or creating events — always stop for your explicit confirmation. Email additionally stops at a draft until you decide otherwise. The same gates apply when an AI reaches ShogunAI through its API.

Your data trains nothing

ShogunAI has no model of its own to train. The AI providers in the default configuration do not train on your data. Anthropic retains API data for about 30 days for abuse monitoring; ShogunAI cannot shorten that period.

The honest limits

• Chunks already sent to an AI provider follow that vendor’s retention policy. Where a vendor has no deletion API, ShogunAI cannot delete them for you.
• Summaries derived from multiple events can echo deleted sources until the next nightly re-derivation.
• Anonymous usage statistics contain feature counts only, not captured content, personal data, or keys. They are sent by default and can be turned off in onboarding or Settings.