Privacy

What the app sends

An update checkOnly after you turn it on, or press Check Now.

It reads one file, armada.mgcrea.io/appcast.xml, which redirects to the latest release on GitHub. It sends no identifier with it: not your licence key, not a machine id. Your IP address is visible to the servers that answer, as it is for any download.

That is the whole list for Armada itself: no analytics, no telemetry, no crash reporter and no first-run ping. make audit checks it against every build. It sweeps every Mach-O in the built app for URL loading, DNS and TLS symbols, with one narrowly named exception for Sparkle, the framework the update check uses. The script is scripts/audit-network.sh, and you can run it against the copy you downloaded.

Help ▸ Send Feedback is not a second entry. It opens thefeedback form in your browser with the app version, macOS version, Mac model and language in the address bar, and the app sends nothing itself.

The programs it runs

To read plan limits, Armada runs your own installed claude and asks it a question that costs no tokens. That program talks to Anthropic over your own sign-in, under Anthropic's terms, as it does whenever you use it. The same is true of a session you start or fork from Armada: it runs claude or codex in your terminal, and what that agent does is between you and its vendor.

Armada is not sandboxed. That is by design: it has to read other tools' folders, which a sandbox would refuse.

What never leaves

Your transcripts

Armada reads the session files Claude Code and Codex already write, where they already are, in ~/.claude* and ~/.codex, and opens them read only. It has no connection of its own to send them over.

Your vendor accounts

Armada holds no vendor credentials. There is no sign-in, nothing reads or stores a token, and Codex's auth.json is never opened. It never writes to Claude Code's or Codex's configuration either: no hook, no settings file, no MCP server entry.

Your licence key

Verified offline, on your Mac, with a signature check. No licence server is ever contacted by the app, so an installed copy has no idea who bought it.

What Armada writes

Only its own files: its preferences, usage history in ~/Library/Application Support/io.mgcrea.armada, kept 30 days and deletable from Settings, and a startup script in its own temporary folder when you start a session.

Buying a licence

Nothing is on sale yet. This is how a purchase will be handled once it is.

Apart from anything you choose to write to us, this is the one place personal data exists at all, and it exists because a licence has to be deliverable and a refund has to be traceable to a sale.

Checkout is handled by Stripe, who take the payment details; this site never sees a card number. What is kept afterwards is your email address, the Stripe session and payment identifiers, and the licence issued against them. The email is used to send you the key and to find the licence again if you ask for it or a refund needs it. It is not used for anything else, and there is no mailing list to be added to.

The app itself never sends your email anywhere. A key is checked offline, so an installed copy has no idea who bought it.

This site

Static files on Cloudflare, with no cookies and no third-party embeds. It loads no fonts and no images from anywhere else, and its content security policy refuses any request to an origin it does not name. Cloudflare keeps its own request logs, as any host does.

It does not count page views today.

The feedback form posts what you typed, and the four diagnostic fields shown beside it, to feedback.mgcrea.io, a small worker of ours. It does so only when you press Send, and keeps the report so it can be answered. The email address is optional and used only to reply to you. No other page on this site talks to it.

Asking

To get a copy of what is held against your email, or to have it deleted, write tosupport@mgcrea.io. Deleting a purchase record ends the licence it belongs to, because the record is the licence.

If this page changes materially, the date at the top moves. The canonical copy lives athttps://armada.mgcrea.io/privacy.