Legal

Privacy Policy

Last updated: July 13, 2026

1. Information we collect

Local content (default)

Entries you create — quick notes, diary entries, reminders, habits, links, subscriptions, payments, flash cards, study / focus timer sessions, and snippets — are stored on your Mac by default. We do not receive that content unless you opt into Pro iCloud sync or you export it yourself (for example via AI Connect).

Sign in with Apple (optional sync)

If you enable Pro sync, you authenticate with Sign in with Apple. Depending on what Apple provides, the app may receive an Apple user identifier, and optionally an email address or name (often only on first authorization). We do not use email/password or Google Sign-In for sync.

Synced copies of your content are stored in your Apple iCloud / CloudKit private database under your Apple ID. Apple processes that data according to Apple's privacy policy.

Clipboard history and quick actions

If you use the clipboard history quick action, copied items are stored locally on your Mac only. Content that macOS marks as transient or concealed (such as password fields) is excluded, and you can pause monitoring. Clipboard history is not synced to iCloud. You can clear the history at any time.

Other local quick actions — including the calculator, text transform, system status, world clock, QR generate / scan, image convert, PDF tools, and the floating focus timer overlay — run on your Mac. Their working files or results are not sent to us unless you explicitly save something as a counted entry. Some quick actions request macOS permissions the first time you use them (Accessibility, Screen Recording, or Calendar). These permissions are granted by you in macOS and are used only on your device.

Plan, settings, and technical data

Plan tier is determined on-device through Apple StoreKit entitlements. We do not collect your payment card details; Apple processes subscription payments.

App settings such as notification and appearance choices are stored locally on your Mac.

This marketing website may collect standard web hosting logs (for example IP address and access timestamps) from the hosting provider. That is separate from the Mac app.

2. How we use information

• Provide local-first productivity features on your Mac.
• Optionally authenticate Sign in with Apple so Pro sync can use your iCloud private database.
• Verify paid plans via StoreKit and enforce local storage limits.
• Deliver notifications, due-date views, and support.
• Operate this website and comply with legal obligations.

3. Optional AI Connect on Pro+

Third Arm does not run AI by default and does not bundle a model provider. Pro+ includes AI Connect: a private local endpoint on your Mac (not web-hosted) so tools you connect (such as Cursor or Claude Desktop) can pull live context, plus an optional on-device snapshot you can copy or export.

• Snapshots are built on your Mac from your local data.
• Third Arm does not host a live cloud AI context API for the app.
• Third Arm does not store your OpenAI or Anthropic API keys.

Your data is shared with a third-party AI provider only when a tool you connected fetches your local endpoint, or when you paste or upload a snapshot (or other export) into a tool you chose. External AI providers are independent third parties. Their own privacy policies, terms, billing, and age restrictions apply when you use them.

4. Sharing

Apple: Used for Sign in with Apple (when you enable sync), iCloud / CloudKit private sync (when enabled), subscription billing, and transaction verification. See Apple's privacy documentation for iCloud and Sign in with Apple.

Website hosting (for example Firebase Hosting): Used only to serve this marketing site and related static pages. It is not used to store your app notes or run app authentication for the Mac client.

External AI tools you choose: Used only if you connect them to the local AI Connect endpoint or intentionally export/paste context via Pro+ AI Connect.

Legal or safety reasons: If required by law or reasonably necessary to protect rights, safety, or the integrity of the service.

5. Retention and deletion

Local app data remains on your Mac until you delete it or uninstall the app (subject to how macOS Application Support files are removed).

If you use Pro sync, iCloud retention and deletion follow your Apple ID / iCloud settings and Apple's policies. Signing out of Third Arm sync keeps local data on that Mac.

Website hosting logs are retained according to the hosting provider's practices.

6. Data transfers and security

Local data stays on your device. If you enable sync, Apple may process iCloud data in regions where Apple operates. We rely on Apple's security measures for Sign in with Apple and CloudKit.

No system is perfectly secure, but we take reasonable steps to protect the information we process for the website and the app.

7. Children and families

Third Arm can be used by children and adults. If a child uses the app in a region where parental permission is required for personal data processing, a parent or legal guardian should review this policy and provide the required consent.

If you believe we collected a child's personal information without the consent required by law, contact us and we will investigate and, where appropriate, delete website-related information we control. Optional AI Connect exports may involve third-party services that have their own age rules and may not be appropriate for children.

8. Changes to this policy

We may update this Privacy Policy from time to time. Changes will be posted here with a new "Last updated" date. Continued use after changes means acceptance.

9. Contact

Email: tobiasdevc@gmail.com