Last updated 2026-08-21
AGI-1 is the public product brand for the AGI-1 macOS application. The app can hear you, see your screen, and operate your computer. That is a lot of access, so here is exactly what happens to your data — no marketing language.
AGI-1 uses the AGI-1 cloud backend. Speech, screenshots, task text, and your OpenAI API Key are processed while you use the service. The key is encrypted on your Mac, sent over TLS for active requests, and is not embedded in the desktop package or retained in application logs.
~/Library/Application Support/AGI-1/config.env with permissions
0600 — readable only by your macOS user. Your OpenAI API Key is stored separately
using macOS encrypted storage and is never returned to the page after it is saved.When you are actively talking to the assistant, this goes to the AGI-1 backend over TLS so the cloud agent can understand, plan, execute, meter usage, and verify results:
| Data | Sent to | Why |
|---|---|---|
| Your speech audio and transcript | AGI-1 backend and voice providers | To understand you and reply out loud |
| Screenshots of your screen | AGI-1 backend and vision/control providers | To see the screen it is operating |
| Text of tasks you dispatch | AGI-1 backend and selected model providers | To carry out the work |
| Front camera frames | AGI-1 backend and vision providers | Only when you explicitly ask — see below |
| Your OpenAI API Key | AGI-1 backend and OpenAI | To authenticate the GPT-6 requests made on your behalf |
| Android image and assistant output audio | LemonSlice | Only when you configure and enable the optional digital human — to render synchronized talking-avatar audio and video. Your microphone, screen, and task text are not sent on this path. |
| Generated digital-human audio/video | Your configured LiveKit Cloud project | To return the synchronized digital-human stream to the app |
Screenshots capture whatever is on screen at that moment, which may include things you did not intend to share — other apps, notifications, documents, credentials. Close or minimize anything sensitive before asking it to look at your screen.
Your relationship for that data is with the provider, under their terms: OpenAI · Anthropic · LemonSlice · LiveKit. AGI-1 routes requests through its backend using the OpenAI key you provide.
The front camera opens only when you ask for it out loud. This is not a policy we promise to follow — it is enforced in code, against the actual speech-recognition transcript of what you said. The language model cannot open the camera by deciding it would be helpful, and cannot bypass the check by claiming consent in its tool arguments. A second check in the backend refuses any camera capture that does not carry the marker issued by the first.
Both checks are enforced in code and covered by a regression test suite that runs before every release — the consent gate alone has 37 assertions, including "the model sets consent = true by itself" and "consent for the camera must not unlock deletion".
Camera frames are captured only for the moment needed to answer your question, sent to the vision provider to be described, and not retained.
The app contains no advertising SDK. AGI-1 records service events needed for abuse prevention, download delivery, and support. API keys are excluded from these records.
When you request a .dmg or .zip from our download domain, the delivery
service records the requested artifact and version, timestamp, response status, bytes transferred,
whether the response completed, coarse operating-system category, country, Cloudflare edge location,
and referrer hostname. This lets us measure completed downloads and diagnose failed transfers.
The desktop client encrypts your OpenAI API Key using macOS secure storage. During an active request it sends the key over TLS to the AGI-1 backend, which uses it for that request and must not write it to logs, memory records, screenshots, or analytics.
We do not store the raw IP address or full user-agent string. They are converted immediately into a salted SHA-256 identifier used only to deduplicate downloads. Download records are retained for up to 30 days and are not sold, used for advertising, or joined with activity inside the app. Cloudflare necessarily processes network request data while delivering the file under its own privacy terms.
macOS grants these per app and you can revoke any of them at any time in System Settings → Privacy & Security. Revoking one disables that capability; the rest keeps working.
Everything the app stores is in one folder:
~/Library/Application Support/AGI-1/. Delete it and nothing of yours
remains, apart from files you explicitly asked the assistant to create elsewhere. Uninstalling
is dragging the app to the Trash.
To remove data held by the AI providers, use their own account controls — we cannot do it for you, because we never had it.
An optional one-time support purchase is processed by Polar. Card and payment-instrument details are handled by Polar and Stripe rather than stored in the desktop package. The direct download remains available without completing checkout.
AGI-1 is not directed at children. We do not knowingly collect personal information from children; the download service retains only the limited delivery metrics described above.
Material changes will be noted here with a new date and in the release notes of the version that introduces them. Changes to this policy do not alter records collected under an earlier version of the policy.