Privacy Policy

Attention is a Mac app that puts your messages, calendar, to-dos and contacts in one place. It’s made by American Productivity Company (“we”, “us”). This policy covers the Attention app, Attention Cloud (our optional online service), and this website.

The short version

• Local-first by default. The app stores your data on your Mac. Without Attention Cloud, your messages never pass through our servers.
• Nothing leaves your Mac for AI unless you turn it on. AI requests go to the provider you choose, with your own key.
• We don’t sell your data. Nothing in your accounts is used for advertising or to train AI models.
• Google data follows Google’s Limited Use rules (see Google user data).
• This website writes nothing to your browser — no cookies, no local storage.

The Attention app

The app keeps your data — messages, calendar events, to-dos, contacts, notes, and a log of what you do in the app — in a database on your Mac. Passwords, API keys, and sign-in tokens are kept in the macOS Keychain. Search indexes, including the AI search index, are built on your Mac by a model that runs on your Mac.

• iMessage is read from your Mac’s own Messages database, only if you allow it, and never uploaded to us.
• Gmail and Google Calendar can be connected directly from your Mac using your own Google OAuth client. Your Mac talks to Google, and the data never passes through our servers.
• Your contacts are read from the macOS Contacts database to put names on messages. They stay on your Mac.

The app sends no analytics or crash reports. It does make a few requests on its own:

• It checks our website for updates. That request includes the app version and your Mac’s architecture.
• It downloads models and tools it needs. That includes the search model from Hugging Face and, if you use the AI agent’s web browsing, a headless browser from Google.

AI features

AI features are optional, and the background agent is off until you turn it on. When you use them, the app sends the content needed for that task to an AI provider. That can include messages, calendar events, to-dos, and notes about people. Examples: summarizing a thread, drafting a reply, or deciding what a message needs.

• With your own key or account (OpenRouter, Anthropic, OpenAI, or a ChatGPT or Claude subscription), requests go from your Mac straight to that provider. They are covered by your agreement with that provider. OpenRouter passes requests on to the model provider you or the app selects.
• With AI we provide (such as a hosted-model trial), requests are sent to OpenRouter under our account. We only use providers that don’t train on these requests.
• When the agent browses the web for you, it visits public web pages from your Mac. It never signs in or enters payment details.

AI never sends a message, books, or pays on your behalf without your confirmation, unless you approved a standing rule for that action.

Attention Cloud

Attention Cloud is optional. It keeps your accounts syncing when your Mac is asleep, connects services that have no public API, and powers shared workspaces. If you sign in to it, it stores:

• Your account: your name, email address, and sign-in sessions. Sign-in is handled by WorkOS.
• Connected accounts: the access tokens for the accounts you connect. Google tokens are encrypted by our application before they are stored.
• A copy of the messages and calendars you connect to Cloud, so they can sync to your Mac. That includes message content, senders and recipients, attachment details, labels, and calendar events. It is kept in our database, hosted by Supabase.
• Messaging accounts such as LinkedIn, Instagram, WhatsApp, Telegram, Messenger, and X connect through our provider Unipile. Unipile receives those messages to deliver them to us. Public profile details we look up for you are cached for up to 30 days.
• Apps you let the agent use connect through Pipedream. For each action the agent takes, we keep a record of which action ran and when, not the content it carried.
• Workspace content, if you use workspaces (see below).

Attention Cloud runs on Render. Your data is encrypted in transit and at rest by our hosting providers.

Google user data

Attention can access Gmail and Google Calendar in two ways: directly from your Mac (above), or through Attention Cloud. This section covers both.

Attention’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

What we access

With your permission, Attention requests your Google account’s email address, and access to read, send, label, and archive Gmail, and to read and edit Google Calendar events. Attention Cloud may connect to Google directly or through our integration provider, Unipile.

How we use it

We use Google user data only to provide the features you see in Attention. That means showing your mail and calendar, searching them, sending and organizing mail when you ask, and AI features you turn on.

What we never do with it

• We don’t sell it.
• We don’t use it for advertising, including retargeting or interest-based ads.
• We don’t use it to train generalized AI or machine-learning models. We don’t let a provider working for us train on it either.
• We don’t use it to judge creditworthiness or for lending.
• People at American Productivity Company don’t read it. The exceptions are: you ask us to and agree to it for specific messages, it’s needed for security (for example investigating abuse), the law requires it, or the data has been aggregated and anonymized for running the service.

Who receives it

We transfer Google user data only to provide or improve these features, for security, or to comply with the law. It goes to:

• our infrastructure providers (Render, Supabase, Unipile)
• the AI provider handling a request you made
• a successor company in a merger or acquisition, after notifying you

Revoking access

You can revoke access at any time from your Google Account permissions. To have Attention Cloud’s copy deleted, see deleting your data.

Workspaces

Workspace members see the knowledge base, to-dos, and people you share with that workspace. Your messages are not shared with them: message threads stay private to you. Nothing is added to a workspace’s knowledge base unless you confirm it. Workspace invitations include the email address of the person invited.

This website

• Analytics. We use PostHog to count page views. It keeps nothing in your browser — no cookies, no local storage — so we can’t recognize you on a later visit. It respects Do Not Track and records no sessions. PostHog sees your IP address and browser details, and uses them to estimate a rough location.
• Downloads. When you download the app, we record an anonymous count. It includes the app version, your browser’s user agent, the page you came from, and — if you arrived from an ad or campaign link — that link’s campaign parameters (such as utm_source, gclid, or fbclid). That tells us which ads lead to downloads. The count is not tied to who you are.
• Ads. We advertise Attention on Meta (Facebook and Instagram) and LinkedIn, and may use other platforms. This site has no advertising pixels, tags, or tracking cookies. If you arrive from a Meta or LinkedIn ad and then download the app, our server tells that platform, so it can measure the ad. It sends the ad’s click identifier, your IP address, and the time. Meta also receives your browser’s user agent and the page you downloaded from. Each platform handles that under its own privacy policy (Meta, LinkedIn). We send an ad platform nothing if you didn’t arrive from its ad, or if your browser sends Do Not Track or Global Privacy Control.
• Waitlist. If you join the Attention Cloud waitlist (here or in the app), we store your email address. We use it only to tell you about Attention Cloud.

The site is hosted by Vercel, and app downloads are served from Cloudflare.

How we share data

We don’t sell or rent personal information. We share it only:

• with the service providers named in this policy, to run Attention
• with Meta or LinkedIn, when a download came from one of their ads (see This website)
• with other people when you direct it, such as sending a message or sharing to a workspace
• when the law requires it
• as part of a merger or acquisition, under this policy’s protections

Retention and deleting your data

Data in the app lives on your Mac. Deleting the app and its data folder deletes it.

Attention Cloud keeps your data while your account is active. To delete your Attention Cloud account and everything stored for it, email privacy@american-productivity.com. We delete it within 30 days, except where the law requires us to keep something. Waitlist addresses are deleted on request.

Security

Connections to our services are encrypted. Google tokens are encrypted before they are stored, and on your Mac secrets live in the Keychain. No system is perfectly secure. If a breach affects your data, we will tell you as the law requires.

Your choices and rights

You can use Attention without an account, turn off AI features and the agent, disconnect any account, and turn off iMessage access. Depending on where you live, you may have the right to access, correct, delete, or export your personal information, or to object to how we use it. Email us to use any of these rights. We won’t treat you differently for doing so.

Children

Attention is not meant for children under 13, or under 16 where local law sets a higher age. We don’t knowingly collect their information.

Changes

We’ll update this page when our practices change, and change the date at the top. If a change materially affects how we use data you’ve already given us, we’ll ask before applying it.

Contact

Questions or requests: privacy@american-productivity.com.