Peki — Privacy

Last updated: November 6, 2026 · Version 0.9.2

Peki is a Mac app. Peki has no server, no accounts, no analytics and no telemetry. With the default settings your notes, tasks, agents and conversations never leave this Mac. If you turn on one of the features below, only the data that feature needs goes only where you chose. Whenever that is the case, Peki shows it in the interface (for example "☁︎ Goes to Anthropic", "Internet", "2 connections" on an agent).

What stays on this Mac

Notes, tasks, folders, tags, agents, jobs, conversations and attachments live in the app's sandbox container (~/Library/Containers/com.erdogankesgin.peki). Note bodies, each agent's soul, duty and memory, chat messages and chat attachments are encrypted with AES-GCM; the key is in the macOS Keychain. Note titles, tags, folder names, colors, dates and agent names/emoji are not encrypted (so lists can be drawn without opening every note).
The default AI runs on this Mac (Apple Foundation Models): the default agent, the note assistant, the command bar and "While you were away" summaries. Those summaries always stay on this Mac, even if you pick another provider.
Recordings are transcribed on this Mac (Apple speech recognition or Whisper). The audio is never sent anywhere; only the transcript is attached to the chat. The microphone is on only while you record a voice message or a meeting (macOS shows its orange indicator). A meeting recording's audio file waits, unencrypted, in the sandbox container until it is transcribed, then it is deleted; if transcription fails it is kept for at most 7 days. A voice message's file is deleted once transcribed.
API keys, MCP access keys and sign-in tokens are stored only in the Keychain, never in logs, files or preferences. Your Peki Pro license key and the day your 30-day trial started are in the Keychain too; the trial is counted on this Mac.
Notifications, reminders and agents' scheduled jobs are set up on this Mac.

Features you turn on, and what they send

Feature (default: off)	What is sent	Where
A cloud model for an agent: Claude API, OpenAI API, Gemini API	The agent's instructions (name, personality, duty, memory), the conversation, files you attach (images, PDFs or their text), and notes the agent reads if you gave it access	Anthropic, OpenAI or Google, with your API key
A CLI tool for an agent: Claude Code, Codex, Gemini CLI, OpenCode, Cursor Agent	The same as above	You install the tool and sign in with your own account; Peki runs it on this Mac and the tool sends to its own provider. Peki never sees or stores your sign-in
A local server: Ollama, LM Studio	The same as above	The server at the address you set (by default this Mac)
Another provider for the note assistant, command bar and tag suggestions	The note being summarized, tagged or worked on, the command you type	The provider you chose
Internet for an agent	The agent's search queries; addresses of pages it opens	DuckDuckGo (or Brave Search if you added a Brave key); the site of the opened page. With Claude API and Claude Code, search and page reading use that provider's own tools. Peki does not open local network addresses or this Mac
MCP servers for an agent	What the agent sends to that server's tools (you are asked before a tool that changes something); the sign-in flow if you sign in with the browser	The server you added. A local MCP server runs on this Mac with the command you entered
Transcription with Whisper	No personal data	Model files (about 575 MB) are downloaded from Hugging Face only when you click "Download"
Apple speech recognition	No personal data	If the language model is not installed, Apple downloads it on first use
Peki Pro license (if you enter a key)	The license key and your Mac's model (for example "Mac15,3"; not your computer's name); Polar sees your IP address	Polar (the payment provider that sells Peki Pro): when you activate the key, when you remove it from this Mac, and at most once a week to check it. What you give when you buy (email, payment) stays with Polar and never reaches Peki. Nothing is sent during the trial
Update checks (Sparkle)	Peki's version number (in the request header); that server sees your IP address	The update list on Peki's website (`getpeki.app/updates/appcast.xml`). Peki asks on the second launch before checking automatically; if you allow it, once a day. Turn it off in Settings → General → Updates. No system profile is sent

CLI tools and your files: Codex, Cursor Agent, Gemini CLI and OpenCode can read files on this Mac with their own reading tools (read-only; verified with Cursor Agent). With Claude Code, Peki turns those tools off. A web page or a connection's answer that the agent reads could trick such a tool into reading one of your files and sending it out; the agent editor warns while one of these tools is selected, in orange when the internet or connections are also on. For sensitive work, choose Claude Code or an API.

How data sent to a cloud provider, CLI tool or MCP server is stored and used is governed by that service's own privacy terms; Peki cannot control it. If you give an agent both a cloud model and access to your notes, its editor shows an orange warning: that agent may send your notes to that provider.

Agents do not follow instructions found in web pages or tool results, and a scheduled job (running while you are away) never uses an MCP tool that changes something unless you allowed that tool for that job beforehand.

Deleting your data

To remove Peki and its data completely:

Quit Peki and delete /Applications/Peki.app.
Delete ~/Library/Containers/com.erdogankesgin.peki (notes, agents, attachments, the downloaded Whisper model).
In Keychain Access, delete the items named com.erdogankesgin.peki (note key, API keys, sign-in tokens, license). To use Peki Pro on another Mac, first choose "Remove from This Mac" in Settings → General → Peki Pro.

For data already sent to a cloud provider, use that provider's own deletion options.

Contact

Questions: destek@getpeki.app