Privacy

What the app sends

An update check Only after you turn it on, or press Check Now.

It reads one file, armada.mgcrea.io/appcast.xml, which redirects to the latest release on GitHub. It sends no identifier with it: not your licence key, not a machine id. Your IP address is visible to the servers that answer, as it is for any download.

Voice's speech models Only when you press a Download button in Settings ▸ Voice.

It fetches Parakeet v3, about 480 MB, or Kokoro, about 95 MB, each from huggingface.co and each from its own button, and sends no identifier with either. If another app has already put a model in FluidAudio's shared folders on your Mac, Armada uses that copy and downloads nothing. Your IP address is visible to the servers that answer, as it is for any download.

That is the whole list for Armada itself: no analytics, no telemetry, no crash reporter and no first-run ping. make audit checks it against every build. It sweeps every Mach-O in the built app for URL loading, DNS and TLS symbols, with two narrowly named exceptions, Sparkle for the update check and FluidAudio for the speech model downloads, and checks that the supervisor's MCP endpoint binds 127.0.0.1 and nothing else, and that the microphone is the app's only entitlement. The script is scripts/audit-network.sh , and you can run it against the copy you downloaded.

Help ▸ Send Feedback is not a second entry. It opens the feedback form in your browser with the app version, macOS version, Mac model and language in the address bar, and the app sends nothing itself.

The programs it runs

To read plan limits, Armada runs your own installed claude and asks it a question that costs no tokens. That program talks to Anthropic over your own sign-in, under Anthropic's terms, as it does whenever you use it. For Grok Build it asks your own grok the same way, and that program talks to xAI. The same is true of a session you start or fork from Armada: it runs claude, codex or grok in your terminal, and what that agent does is between you and its vendor.

Voice, if you turn it on, is the one time Armada runs claude itself with a prompt: the question you just spoke, as text, on the account you chose. That claude gets no built-in tools and only Armada's read tools, plus starting a session and bringing one forward while Allow writes is on, and Armada closes it after five idle minutes.

Armada is not sandboxed. That is by design: it has to read other tools' folders, which a sandbox would refuse.

What never leaves

Your transcripts

Armada reads the session files Claude Code, Codex and Grok Build already write, where they already are, in ~/.claude*, ~/.codex and ~/.grok, and opens them read only. It has no connection of its own to send them over. The one way to read them from outside the app is the supervisor's MCP endpoint: off until you turn it on, on 127.0.0.1 only, for an agent you start or connect yourself. If you switch Archive on for an account, Armada also copies its transcripts into a folder you pick, such as one on a NAS or an external disk. It mounts nothing and connects to nothing to do that: the copies go only as far as the folder you chose.

Your voice

Only if you turn voice on. The microphone is on only while the card at the top of the screen says it is listening, or, with Keep listening on, while it speaks a reply you might answer. Your speech becomes text on your Mac, and the audio is never kept or sent. The question you asked goes on as text, through claude: see the programs it runs, below.

Your vendor accounts

Armada holds no vendor credentials. There is no sign-in, nothing reads or stores a token, and neither Codex's nor Grok Build's auth.json is ever opened. It writes into the agents' folders only in four named places, each from something you did: the flag Claude Code's own "Yes, I trust this folder" sets, for a project you saved, when you start a session there; one hook in each Claude Code account's settings.json while message delivery is on, removed when you turn it off; a copied transcript when you continue a Claude Code session on another account; and Armada's own MCP entry, in a Claude Code account's .claude.json or Codex's config.toml, when you press Configure, with the previous file kept as a backup. Grok Build's folders are only read.

Your licence key

Verified offline, on your Mac, with a signature check. No licence server is ever contacted by the app, so an installed copy has no idea who bought it.

What Armada writes

Only its own files: its preferences, usage history in ~/Library/Application Support/io.mgcrea.armada, kept 30 days and deletable from Settings, and a startup script in its own temporary folder when you start a session, with the connection details beside it when that session is a supervisor. With voice on, it also keeps a folder per account where its claude records the conversation. With Archive on, it writes copies of your transcripts into an Armada Archive folder inside the folder you picked, and deletes copies there only if you set a retention period.

Buying a licence

Apart from anything you choose to write to us, this is the one place personal data exists at all, and it exists because a licence has to be deliverable and a refund has to be traceable to a sale.

Checkout is handled by Stripe, who take the payment details; this site never sees a card number. What is kept afterwards is your email address, the Stripe session and payment identifiers, and the licence issued against them. The email is used to send you the key and to find the licence again if you ask for it or a refund needs it. It is not used for anything else, and there is no mailing list to be added to.

The app itself never sends your email anywhere. A key is checked offline, so an installed copy has no idea who bought it.

This site

Static files on Cloudflare, with no cookies and no third-party embeds. It loads no fonts and no images from anywhere else, and its content security policy refuses any request to an origin it does not name. Cloudflare keeps its own request logs, as any host does.

It counts page views with Cloudflare Web Analytics. That sets no cookie and stores nothing on your device, so there is no banner asking you to accept it. What it records is the page address, the referring page, your browser and operating system, your screen size, how long the page took to load, and the country the request came from. It never receives your IP address, and there is no identifier that would let one visit be joined to another or to you. Any content blocker stops it, and the page works unchanged without it.

The feedback form posts what you typed, and the four diagnostic fields shown beside it, to feedback.mgcrea.io, a small worker of ours. It does so only when you press Send, and keeps the report so it can be answered. The email address is optional and used only to reply to you. No other page on this site talks to it.

Asking

To get a copy of what is held against your email, or to have it deleted, write to support@mgcrea.io. Deleting a purchase record ends the licence it belongs to, because the record is the licence.

If this page changes materially, the date at the top moves. The canonical copy lives at https://armada.mgcrea.io/privacy.