Privacy

Privacy is the product.

Aguacatech is a local-first macOS app. The model you talk to runs on your machine. Disk scans use built-in macOS tools. Permission audits read your TCC database directly. Nothing about how you use the app leaves your Mac unless you explicitly point a feature at an external endpoint.

Last updated: 18 May 2026. Effective date: at install.

What stays on your Mac

• Conversations. Stored as JSON under ~/Library/Application Support/aguacatech/conversations.json. Never uploaded.
• Logs. Appended to logs.jsonl in the same directory. Local only. Clear them whenever from the Logs tab.
• License key. Stored in UserDefaults under your app's bundle identifier. Never validated against a remote server.
• Scan results. Disk Explorer trees, Connection Log entries, clipboard history (encrypted at rest), Permission Inspector snapshots, all stored locally.
• MCP server configs. JSON at mcp-servers.json in the same directory. Tokens currently live there in plaintext; Keychain support is on the roadmap.

What goes out, when, and where

Aguacatech only makes outbound network requests in three cases:

• Your configured LLM endpoint. Whatever URL you set under Settings → General → Endpoint. The default is http://localhost:1234/v1 (LM Studio on your Mac). If you point it at a remote endpoint, your prompts go there.
• MCP HTTP servers you add. If you add an HTTP-transport MCP server, tool calls travel to that URL. stdio MCP servers run as local subprocesses, no network at all.
• Reverse DNS lookups. The Connection Log resolves remote IPs to hostnames via your OS DNS resolver. Skip-able under Settings → Sentinel.

That is everything. No analytics. No crash reporters. No "anonymous usage statistics." If the network indicator flickers and you're not chatting with a model, the most likely cause is a Connection Log DNS lookup.

What we never do

• Telemetry. There is no analytics SDK in the app. Period.
• Accounts. You don't sign up. We don't have a user database.
• License-server pings. Your key activates locally, by format. No phone-home.
• Cloud sync. Conversations, history, configs, none of it syncs anywhere.
• Ad tracking. There are no ads, no trackers, no third-party scripts on this website except the PayPal checkout SDK (on the buy page only).

What we collect when you buy

PayPal is the only checkout. When you complete a purchase, PayPal sends us:

• Your PayPal-verified email address (so we can send your license key).
• Order ID and amount.
• Country, for tax purposes only where applicable.

We use that information solely to deliver your license key and process refunds. We don't sell, share, or otherwise distribute it. The list of purchasers lives in PayPal's dashboard and (eventually) a private Google Sheet on our end. It is never combined with any other data.

This website

aguacatech.eu is hosted on GitHub Pages. GitHub records standard request logs (IP, user agent, timestamp) under their own privacy policy. We do not run analytics, heatmaps, or session recorders on this site.

The PayPal SDK loads only on /buy.html. Once loaded, it operates per PayPal's privacy policy. We do not pass PayPal any identifier of our own.

Refunds and data deletion

• Refunds: 14-day no-questions window. Email support@aguacatech.eu with your PayPal order ID.
• Forgetting your purchase: after the 14-day window closes, we can purge your email from our purchase log on request. Your license key, of course, remains valid until you stop using it.
• Local data: delete ~/Library/Application Support/aguacatech/ to remove everything Aguacatech wrote to disk. defaults delete com.aguacatech clears its UserDefaults.

Contact

Questions, concerns, or "wait, what does this actually do?", support@aguacatech.eu. We answer.