Privacy Policy

Last updated: 1 March 2026

Stubble is a macOS time-tracking app that runs locally on your computer. We built it to be as private as possible. This policy explains what data Stubble collects, how it's used, and what leaves your machine.

---

What stays on your Mac

The following data is collected and stored entirely on your computer. It is never uploaded or shared with anyone.

• Activity logs record which apps you use and what window titles are visible. This data stays in a local database on your Mac.
• Contextual text is extracted from your activity using Apple's built-in frameworks. This processing happens entirely on your device.
• Settings and preferences including your API key are stored locally in a file only accessible to your user account.

What is sent externally

Stubble uses AI to turn your raw activity into structured tasks and insights. To do this, the following data is sent to the Google Gemini API — either directly using your own API key (BYOK) or through Stubble's secure proxy (trial and Pro users):

• Window titles from your activity timeline
• Contextual text extracted from your activity (with PII automatically masked)
• App names and timestamps

No images, files, passwords, or browsing history are ever transmitted. Only anonymised plain text with PII masked before transmission. BYOK users connect directly to Google. Trial and Pro users go through Stubble's secure proxy, which forwards requests to Google without storing any data.

Google's use of data sent via the Gemini API is governed by their own API terms of service.

Analytics

Stubble uses TelemetryDeck to collect anonymous, privacy-friendly usage signals. These include events like app launches, task generation counts, and feature usage. No personal data, activity content, or identifying information is included in these signals. TelemetryDeck does not use cookies or track users across apps.

Software updates

Stubble uses the Sparkle framework to check for updates. This sends a standard version check request over HTTPS. No personal data is included.

Permissions

Stubble requires two macOS permissions to function:

• Screen Recording to observe your active windows and on-screen content.
• Accessibility to read the titles of your active windows.

Both permissions are managed by macOS and can be revoked at any time in System Settings.

API key (BYOK)

If you use BYOK mode, your Gemini API key is stored locally on your Mac in a settings file with restricted permissions (owner-only access). It is never sent to Stubble's developers or any third party. It is only used to authenticate requests directly with Google's Gemini API. An API key is not required if you use the free trial or Pro plan.

Data retention

• Raw activity data is automatically deleted after 7 days.
• Tasks and activity logs are stored indefinitely until you delete them.
• AI memory (learned facts about your workflow) is capped at 50 entries and can be cleared at any time.

You can delete any data point or task at any time from within the app. When you delete it, it is permanently removed from your Mac.

Accounts

Stubble offers an optional Google sign-in for trial and Pro users. Authentication is handled via Google OAuth (PKCE flow) through Supabase. No passwords are stored by Stubble. Session data is kept in a local file with owner-only permissions. If you use BYOK mode (your own API key), no account or sign-in is needed at all. There is no cloud storage or data sync — everything runs locally.

Children's privacy

Stubble is not directed at children under 13. We do not knowingly collect data from children.

Changes to this policy

If we make changes to this privacy policy, we will update the date at the top of this page. For significant changes, we will include a notice in the app.

Contact

If you have questions about this policy or how Stubble handles your data, reach out at info@stubble.ai.