Privacy

Last updated: November 14, 2026

Input is made by ReVeNG System, California, USA. This policy covers Input for Mac, Input Companion for iPhone, and input-app.com.

In short

• Input has no ads, no analytics and no tracking of its own.
• Input reads your messages on your Mac, where they already are.
• Some features send data to the services you connect, the AI provider you choose, your iCloud, or our relay for inputs and the Connector. Each section below says what and why.
• We don't sell or share your personal information.

What stays on your Mac

Input reads your email, Slack, Jira, Messages, calendar, reminders and contacts on your Mac. It keeps your to-dos in Reminders, in a list named Input, which Apple syncs to your other devices if you use iCloud. To work faster, it keeps a copy of recent email and of the latest Slack messages there, until you remove the account. Passwords, tokens and API keys are kept in the macOS Keychain.

If Sync with iCloud is on (Settings, General; on by default), your settings, the corrections you make, snoozed items, the order of your to-dos, learned rules, the cards you marked done, the Slack messages and Jira cards you read, Waiting's answers (whether a message you sent is waiting for a reply, and the AI's reason), and the AI's sorting (the tab it chose for each message, and the reason) sync between your Macs through your own iCloud Drive, in a folder named Input. So do unfinished replies: with the conversation's name for Slack and Messages, and with the original email for email replies. They stay there until you delete that folder. Passwords, tokens and API keys never sync. The keys that encrypt your inputs are kept in iCloud Keychain, which Apple encrypts end to end, and sync between your devices when iCloud Keychain is on.

Services you connect

Input connects directly to your email provider, Slack and Jira (Atlassian), with the access you grant. We don't receive that data. Connecting Slack passes through input-app.com once, to finish signing in; nothing is kept there. During setup, Input asks Atlassian whether a Jira site exists for your email's domain. It sends the domain only, not your address. If you add a calendar link, Input downloads that calendar from its provider, such as Google, every hour while it's open. The link stays in your Mac's Keychain and never syncs. Pictures in emails load automatically from your contacts and senders you allow. Otherwise, they load only when you ask; loading them lets the sender's servers see your IP address. Unsubscribe contacts the sender the way the email asks: through a link, a web page or an email. When you prep a meeting with notes in Google Docs, Input asks Chrome, where you're signed in, for the document's text. Chrome may save a text copy in your Downloads folder; Input deletes it after reading it.

AI

If you choose an AI provider (Anthropic, OpenAI or xAI), Input sends it data with your own API key, only for the features you use. Some run on their own while AI is on, such as sorting new messages or telling what's waiting for an answer. Others run when you ask, such as writing a reply, answering a question in Ask Input, or writing a Jira issue from a message, or preparing a meeting.

Depending on the feature, Input sends message senders, sources, subjects and text, as excerpts or whole conversations; the text you write or the questions you ask; your calendar events' titles, times and attendees, for sorting new messages around your day and for questions about your schedule; for meeting prep, the meeting's title, time, guest names and description, the most recent text in its notes document, its latest notes email, and your email conversations with guests outside your company; the About you text you write in Settings > Agent, for sorting, meeting prep and reply drafts; and the rules learned from your corrections. This includes messages other people sent you, which may contain personal information about them.

To stop sending, turn off Use AI or remove your key in Settings > Agent. The provider handles this data under its own privacy policy and your agreement with it: Anthropic, OpenAI, xAI. Apple's on-device model keeps everything on your Mac. Input sends nothing to an outside AI provider until you choose one.

Inputs

Inputs are messages between people who use Input. They are encrypted on your devices, end to end; our relay can't read them. To deliver them, the relay keeps:

• your name, and who invited you and when, until you ask us to delete them;
• an identifier made from your iCloud account on your device (the relay never sees the account itself), and your devices' public keys, until you ask us to delete them;
• the people you're paired with, until you unpair;
• pairing requests (a name and an optional note), deleted after 7 days;
• encrypted inputs and files, with who sent them and when, deleted after 30 days;
• the read status of your inputs, deleted after 30 days, so all your devices show the same read status;
• your iPhones' push notification tokens, until Apple reports they no longer work, such as after you remove Input Companion.

Notifications go through Apple. They show the sender's name and whether it's a new input or a reply.

Hand off to Claude

When you hand off an input or a Jira issue to a Claude Code session, that session runs on your Mac under your own Claude account. With Input's tools, a session can also see the names of the people you're paired with; it asks you before it reads your other inputs or sends one. It can also read your to-dos, including those done today, and asks you before it adds or checks one off. What it sends to Anthropic is covered by Anthropic's policy.

Connector

The Connector lets an assistant you choose, such as Grok or ChatGPT, add to-dos to your list using a URL you paste into the assistant. What you say to the assistant is covered by its own policy. Our relay sees each to-do's text only while encrypting it. Only your devices can read the encrypted copy. The relay keeps that copy and deletes it after 30 days. It keeps a hash of the URL's key, never the key itself, until you revoke the URL or remove the Connector. Anyone with the URL can add to-dos to your list, and nothing else.

Support

Emails to support@input-app.com and privacy@input-app.com are kept as long as we need them to help you. Report a Problem prepares an email from your own address with details about your Mac and Input, recent errors and, after a freeze, the report macOS wrote about it. You can see and change it all before sending. The email never includes your messages; an error may name an email address.

TestFlight

If you test Input Companion through TestFlight, Apple shares crash reports, usage information and the feedback you send with us. We use it only to fix and improve Input, for as long as Apple keeps it available.

The website and updates

input-app.com uses no cookies and no analytics. Cloudflare, which hosts it, processes your IP address and request details to serve and protect the site. Input checks input-app.com for updates, sending only Input's version number.

Who helps us

We use Cloudflare to run the relay and the website, and Apple to deliver notifications. They process this data only to provide those services, under data protection terms at least as protective as this policy: Cloudflare, Apple.

Cloudflare serves the website from its servers around the world, near each visitor. The relay keeps its data in North America. If you live elsewhere, your data is transferred there under recognized safeguards, such as the EU Standard Contractual Clauses.

Why we keep it

We keep relay data to deliver the inputs you send and receive and the to-dos you add through the Connector, which is the service you asked for. We keep support emails, and who invited you, to answer you, keep Input working and protect it from abuse, which is our legitimate interest. Notifications and access to your calendar and contacts rely on the permission you give in macOS or iOS, and you can withdraw it at any time.

Your choices

• Remove an account, a connection or an API key in Input's Settings.
• Turn off Sync with iCloud in Settings, General. To delete what was synced, delete the Input folder in iCloud Drive.
• Turn off notifications, and access to your calendar, reminders, contacts or files, in System Settings on your Mac or Settings on your iPhone.
• To remove what Input keeps on your Mac, delete the Input folders in ~/Library/Application Support and ~/Library/Caches.

To access or delete what the relay keeps about you, email privacy@input-app.com with your name and who invited you; we answer within 30 days.

Children

Input is not intended for children under 13. If you believe a child under 13 has given us personal data, email privacy@input-app.com and we'll delete it.

Changes

We'll post changes here with the new date, and announce important ones in Input's release notes.

Contact

privacy@input-app.com