Privacy Policy

Effective October 3, 2026

Look Ma, No Hands (“the app”) is a voice-controlled assistant for macOS made by InVert Inc. (“we”, “us”). This policy covers the Mac app, the companion phone app, the Chrome extension, and this website, nohandsapp.com. It is written to be read, not skimmed: it says exactly what the app can access, why, where that information goes, and how you delete it.

The short version

• The app runs on your Mac and keeps its data on your Mac by default.
• Your voice, your screen, and your calendar are used only to do what you asked — never for advertising, never sold, never used to train AI models.
• Understanding your requests requires AI services (Anthropic for language, ElevenLabs for speech). Only the words and, when needed, the screenshot required to carry out a request are sent, over encrypted connections.
• Our own servers see your account details and anonymous usage counts — never your audio, transcripts, screenshots, or calendar contents.

What the app can access on your Mac, and why

Each capability is gated by a macOS permission you grant explicitly, and each can be turned off in Settings.

• Microphone.The app listens for its wake phrase (“Hey Mama”) using Apple's on-device speech recognition. Nothing leaves your Mac while it waits for the wake phrase. After you wake it, the words of your command or dictation are sent to the AI services described below so they can be understood and acted on.
• Speech Recognition.Apple's on-device recognizer converts your speech to text. It runs locally and is subject to Apple's privacy terms.
• Accessibility. To click, type, and read what is on screen, the app uses the macOS Accessibility API. Text labels from the frontmost window are sent with your command so the assistant knows what it can click. It never reads password fields and is instructed never to grant websites microphone or camera access on your behalf.
• Screen Recording. Two uses, both optional: (1) when the Accessibility tree cannot find something you asked it to click, a screenshot is sent to the AI service to locate it visually (“Vision fallback”, off-switchable in Settings); (2) to record a meeting you asked it to join, it captures system audio. It never records your screen as video.
• Calendars. With your permission the app reads upcoming events to find Google Meet, Zoom, and Microsoft Teams links, so “join my meeting” knows which meeting you mean. It reads event titles, times, locations, descriptions, and conference links. It never writes to, edits, or deletes events. See Connected calendars below.
• Clipboard. When you dictate in insert mode, the cleaned-up text is placed on your clipboard and pasted where your cursor is.
• Files. Notes, transcripts, meeting recordings, and the activity log are stored under ~/Library/Application Support/LookMaNoHands/. If you turn on Notes export, copies are also written to a folder you choose (for example your Dropbox folder). That folder is yours; the app only writes to it.

Connected calendars (Google, Microsoft, Apple)

You can connect Google Calendar or Microsoft Outlook inside the app, or allow access to the calendars already on your Mac. For Google and Microsoft, you sign in through your browser; the app receives a read-only access token which is stored in your Mac's Keychain and used only to fetch your upcoming events.

• What is read: event titles, start and end times, locations, descriptions, and conference links, for the next ten hours, plus the email address of the connected account so Settings can show which account is connected.
• Where it goes:nowhere. Event details stay in the app's memory on your Mac and are discarded as they pass. The titles and links of upcoming meetings are included in the request sent to the AI service only when you give a meeting command, so it can pick the right one. They are not stored on our servers, not shared with anyone, not used for advertising, and not used to train models. No human at InVert Inc. ever sees them.
• Revoking access: click Disconnect in Settings → Meetings, which deletes the token from your Keychain. You can also revoke the app from your Google Account (myaccount.google.com → Security → Third-party access) or Microsoft account at any time.

Look Ma, No Hands' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Meeting recordings and notes

When you ask the app to join a meeting, it records the call's audio (what you hear, plus your microphone) to an audio file on your Mac and, by default, announces out loud that it is recording. After the meeting, if you have provided an ElevenLabs key, the recording is sent to ElevenLabs for transcription and the transcript is sent to Anthropic to produce notes (summary, key points, action items). Recordings and notes stay on your Mac (and in your export folder if enabled). You are responsible for complying with recording-consent laws where you and other participants are located — in many places every participant must consent to being recorded.

Services that process your data

The app cannot understand language on its own. These providers process the minimum needed for each request, over TLS-encrypted connections:

• Anthropic(Claude): the text of your commands and dictations, the on-screen labels or screenshot needed to act, meeting transcripts for note-taking, and short descriptions of apps you use. Governed by Anthropic's privacy policy and commercial terms, under which API inputs are not used to train models.
• ElevenLabs: audio clips for higher-accuracy transcription (if you enable it) and the short text of spoken replies for text-to-speech.
• Google and Microsoft: only when you connect a calendar, as described above.

On a “bring your own keys” plan these requests are made with your own API keys, under your own agreements with those providers; the keys are stored in your Keychain and never sent to us. On a Cloud plan the requests are made with keys we hold, and we record the cost and duration of each request (not its content) to meter your plan.

What our servers see

nohandsapp.com and its API hold only what is needed to run your account:

• Your email address, licence and plan, and a random identifier for each device.
• Usage counts per device: number of requests, metered cost, and active seconds, split by workload (commands, dictation, agents, meetings). Never audio, text, screenshots, or calendar data.
• If you use the phone companion: short status lines about tasks (for example “started”, “done”, “needs your approval”) and the tasks you send from the phone to your Mac. Transcripts and screen contents never pass through the phone relay.
• Payment records are handled by Stripe; we never see your card number.
• Standard web server logs (IP address, browser, pages visited), kept briefly.

We do not sell personal information, do not share it with data brokers, and do not show advertising. Our hosting providers (Vercel, Neon) process data on our behalf under their own security commitments.

Retention and deletion

• On your Mac: everything in ~/Library/Application Support/LookMaNoHands/ is yours to delete at any time; the app keeps no hidden copies. Deleting the app and that folder removes all local data. Tokens and keys live in your Keychain.
• Your export folder: we never delete from it; manage it like any other folder.
• Our servers: email support@nohandsapp.com to delete your account; we remove account, device, and usage records within 30 days, keeping only what tax and payment law requires.

Security

The app is signed with an Apple Developer ID and notarized. Secrets are stored in the macOS Keychain. All network connections use TLS. The app never captures password fields, and system-wide protections (Accessibility, Screen Recording, Calendars) are enforced by macOS permissions you control in System Settings → Privacy & Security.

Children

The app and website are not directed at children under 16 and we do not knowingly collect their data.

Changes

When this policy changes we update the effective date above, and for material changes we notify account holders by email.

Contact

InVert Inc. · support@nohandsapp.com