Privacy

Last updated 30 August 2026

The short version: Moe runs on your Mac and keeps your data there. There are no accounts, no telemetry, and no server of ours in the middle. What leaves your Mac is what you send to the AI provider you connected, the connections you set up yourself to services like your mail, and the downloads listed below.

What stays on your Mac

• Your voice. Speech recognition runs on your Mac using local models. Audio is not sent anywhere. It is not stored after it is transcribed.
• Dictation. Speech is turned into text on your Mac and typed at the cursor. Once you connect an AI, a polish pass sends each transcript to it for a rewrite (see below); turn that off and nothing you dictate leaves your Mac. Moe's own log records when you dictated and how many characters, not the words.
• Memory and vocabulary. What Moe knows about you lives in plain Markdown and text files in ~/.moe and ~/.hermes. You can read, edit and delete them with any editor. When you correct a dictated word, Moe notices and, after the second time, adds the spelling to ~/.moe/vocabulary-learned.txt. That is on by default and can be turned off.
• Contacts. Off by default. If you turn on names from Contacts, macOS asks for permission and Moe keeps a copy of the names in ~/.moe, readable only by your account, to help the dictation spell them. Turning it off deletes that copy.
• Conversation history. The agent keeps your conversations in a database file in ~/.hermes on your disk. Moe does not sync or upload them.
• Meetings. A meeting is recorded only when you start it, and a red indicator shows the whole time. Recordings, transcripts and notes stay in ~/.moe/meetings on your Mac, readable only by your account; the audio is deleted once the notes are written unless you choose to keep it, and any meeting can be deleted from Settings. If "Summarise with your AI" is on, the transcript is sent once, at the end, to the AI you connected to write the notes; off, nothing about the meeting leaves your Mac.
• Credentials. A Claude subscription sign-in is stored in your macOS Keychain. A ChatGPT sign-in is held by the vendor's own tool. An API key is written to ~/.hermes/.env, a file only your account can read. None of them are sent to us.

What leaves your Mac, and when

• Requests to the AI you connected. When you talk to the agent, your request and the context it needs go to the provider you chose: Claude, ChatGPT, an API key with a provider, or a local model on your machine. It goes there directly, through that vendor's own official tool or API, never through us. Their privacy terms apply to what they receive. When "Moe sees your screen when you talk to it" is on (it is by default), that context includes a screenshot of the screen under your cursor taken the moment you press the talk key, sent with each spoken request and never for dictation; it is not saved to disk, and the switch to turn it off is in Settings.
• Dictation polish. The polish setting sends each transcript to your connected AI for one rewrite. It is on by default once an AI is connected, and does nothing until then. The setting says exactly what it does. Off, nothing you dictate leaves your Mac.
• Connectors you set up. If you connect mail, a calendar, or a messaging service such as WhatsApp or Telegram, Moe talks to that service directly from your Mac, the same way a mail client does. If you give the agent a Telegram bot so you can reach it from your phone, your messages to it travel through Telegram. Before the agent sends a message or an email on your behalf, it shows you exactly what will go out and waits for you to confirm.
• Downloads. On first use, Moe downloads the speech and voice models it needs from Hugging Face, and the installer fetches the agent runtime from GitHub. These are ordinary file downloads and carry no information about you.
• Update checks. When automatic update checks ship, the app will fetch a small file from this site to learn the current version. That is a plain web request with no identifier attached.

What we do not do

• No analytics, crash reporting, or usage telemetry of any kind.
• No accounts. You do not sign up for anything to use Moe.
• No proxying. We never see your requests, your transcripts, or your keys.
• No advertising, and no selling or sharing of data. There is no data to sell.

This website

This site is static. It sets no cookies and runs no analytics scripts. It is hosted by Vercel, whose servers keep ordinary web-server logs for their own operation.

Questions

Write to hello@moebot.app. If this page and the app ever disagree, tell us; the app is the truth and this page will be corrected.