Privacy

Last updated 19 August 2026

Charmling reads your screen, on your Mac, and never sends any of it anywhere. This page is the boring version of that sentence, written so you can hold us to it.

The short version

• Nothing from your screen ever leaves your Mac. No servers, no accounts, no analytics, no crash reporting, no advertising, no profiling.
• Every AI feature ships switched off. You turn them on.
• What is recorded lives in one plain-text file in your own folder, is readable only by your macOS user account, and erases itself after 48 hours.
• You can read it, and erase it — all of it, the last hour, or everything from one app — at any time, from the app's menu.

What Charmling stores, and where

If you switch on Day Memory, roughly every four minutes — and only while you are actually at the Mac — Charmling takes a picture of the frontmost window, reads the text out of it using Apple's on-device text recognition, throws the picture away without ever writing it to disk, redacts the result, and appends one line of text to:

~/Library/Application Support/Charmling/day-memory.jsonl

That file is created with owner-only permissions (mode 0600) from the instant it exists, so no other user account on the Mac can read it. Records older than 48 hours are deleted. No image is ever stored, at any point, in any form.

What is never recorded

• Password managers. 1Password, Bitwarden, Keychain Access, Dashlane, LastPass, NordPass, Proton Pass, KeePass, Enpass and others are skipped before a screenshot is taken — and so is a password manager open as a web page, judged on what the page says rather than what the application is called.
• Windows that name a credential. A window called .env, Passwords, Keychain, Recovery Phrase or similar is not photographed at all.
• Other people's messages. Mail, Slack, Messages, WhatsApp, Teams and the like are recorded by window title only — never the contents. Other people wrote those, and they did not agree to anything.
• Adult sites are never recorded, with no setting to get wrong.

What is redacted before anything is written

• Any line naming a password, passphrase, recovery code, API key, licence key or similar is deleted — and so is the line after it, because a login form puts the label and the value on separate lines. This works in nine languages, not only English.
• Anything shaped like a secret is replaced with [redacted]: private keys, API tokens, JWTs, card numbers, connection strings containing a password, long random strings, and masked ●●●●●● fields.

We do not claim this is perfect. No content filter is, and anyone who tells you otherwise has not tested theirs hard enough. That is precisely why the log is short-lived, plain text, in your folder, and erasable in one click. The design assumes the filter will sometimes be wrong and limits what that costs you.

Every network request Charmling makes

Four, and only four. None of them carries anything from your screen, your files, or your name.

1. Update check — once a day, fetches a small static file listing the current version. Optional; you can switch it off.
2. Licence activation — once, when you enter your licence key.
3. Licence re-check — about once a week, so a refunded or charged-back key stops working. Carries the licence key and a random install identifier.
4. Update download — only when you click to download one.

The weekly check does tell us that an installation is alive, along with the IP address any web request necessarily reveals. If that counts as telemetry to you, then count it — it is one request, it is about the licence, and there is nothing else.

The on-device AI

Recaps, standups, timesheets and quizzes are written by Apple's on-device foundation model, running on your Mac. No prompt, no answer, and no part of your day is sent to us or to Apple or to anyone else. If your Mac cannot run Apple Intelligence, these features simply do not appear.

The diary (off unless you switch it on)

Day Memory erases the text from your screen after 48 hours. That is a real promise and it does not change. It does mean, though, that on Monday the app cannot tell you what you did on Thursday.

The diary is the optional answer to that, and it is deliberately a different kind of record from the log it outlives. For each day it keeps:

• the hours you worked, measured from the record;
• which applications;
• the window titles your own applications wrote;
• the list of names — filenames, tickets, domains — that provably appeared;
• one sentence, written by the model on your Mac, describing the day.

It contains no text from your screen. Not a line, not a fragment. It is strictly smaller and more abstract than the log it replaces.

The rules around it:

• Off by default. Nothing is written until you choose a retention period, and "off" is the first option in the menu.
• You see the first page before it is kept. On the first roll-over the app shows you what it wrote and asks whether to keep it.
• Short by default — seven days when you switch it on, thirty if you ask.
• It lives in ~/Library/Application Support/Charmling/day-digest.jsonl, owner-only, in plain text you can read.
• "Forget Everything Now" deletes it too, and switching the diary off deletes everything it has written.
• Private Mode silences it along with every other kind of capture.
• Each day is summarised once, from the raw record. A summary is never re-summarised — that loses the quiet details first, every time.

Your backups

Charmling erases its own file after 48 hours. It cannot erase copies made by something else. If you back up your Home folder — Time Machine, iCloud Drive, Backblaze, anything — those backups may contain older copies. Exclude ~/Library/Application Support/Charmling if that matters to you.

What the purchase itself involves

The app sends nothing about you anywhere. Buying it is a different transaction, and it would be misleading to describe one and not the other.

Payment is handled by Polar as merchant of record — they are the seller of record, not us. To take your money they receive what any payment processor receives: your email address, your name as given on the card, your billing country, the card details themselves, and the IP address the purchase came from. They use the country and IP to work out sales tax and VAT. We see your email address and your order; we never see your card.

Their privacy policy governs that data, and you can ask them to access or erase it. Write to support@charmling.app and we will help you reach the right place. We do not add you to a mailing list, and there isn't one.

Taking your data with you

There is nothing to export, because nothing is in a format you'd need to export from. The memory log and the diary are plain JSON-lines text files in your own folder — copy them, open them in anything, do what you like with them. That is the whole of it.

Removing it completely

Here is every place Charmling puts anything, so you can be certain nothing is left behind. Dragging the app to the Bin removes the first one only.

• /Applications/Charmling.app — the app.
• ~/Library/Application Support/Charmling/ — the memory log (day-memory.jsonl), the diary if you switched it on (day-digest.jsonl), and your locket picture if you set one.
• ~/Library/Logs/Charmling/ — a small error log, no screen contents in it.
• ~/Library/Preferences/com.abi.charmling.plist — your settings: which charm, cord length, working hours, and so on. About fifty small values.
• ~/Pictures/Charmling Shots/ — screenshots you took with the app. These are your pictures, so they are left alone; delete them if you want them gone.

Or, in Terminal, all of it in one go:

rm -rf /Applications/Charmling.app       ~/Library/Application\ Support/Charmling       ~/Library/Logs/Charmling       ~/Library/Preferences/com.abi.charmling.plist

macOS keeps the Screen Recording and Accessibility permissions in its own database. Remove them under System Settings → Privacy & Security after the app is gone.

Your rights

Because Charmling stores nothing on our side, there is no account to close and no database to search. Your data is in your folder and you can read, export or delete it yourself at any moment. For the purchase itself, our payment provider Polar holds your billing record; write to support@charmling.app and we will help you reach them for access or erasure.

Found a security problem?

Write to support@charmling.app with "security" in the subject and it goes to the top of the pile. Charmling holds Screen Recording permission, so a flaw in it matters more than a flaw in most small apps, and I would much rather hear it from you first than read about it somewhere else.

What you can expect: an acknowledgement within two working days, an honest assessment of whether it is what you think it is, and a fix shipped as fast as one person can ship one. If you want credit in the release notes you will get it; if you would rather not be named, that is fine too. No bounty programme — there is no company to fund one — and no legal threats either.

Children

Charmling is not directed at children under 13 and we do not knowingly collect anything from them — or, for that matter, from anyone.

Changes to this page

If what the app does changes, this page changes first, with a new date at the top. We will not quietly widen what is collected.