Privacy Policy

1. Who is responsible for your data

Taiva is an independent app developed and privately distributed for beta testing. The developer operates Taiva and is the data controller for the limited preferences stored locally on your Mac.

For data processed by the Anthropic Claude API, Anthropic, PBC is the data processor. Their privacy policy applies: anthropic.com/legal/privacy

2. Permissions Taiva requests and why

Accessibility

• Why: To detect text you have selected in any app on your Mac, powering the inline text actions (Explain, Summarise, etc.).
• What is read: The text you have currently selected. Polled every ~0.5 seconds. No selection is transmitted unless you explicitly click an action button.
• How to revoke: System Settings → Privacy & Security → Accessibility.

Automation (AppleScript)

• Why: To read the content of documents, emails, or web pages in supported apps (Preview, Mail, Pages, Word, Notes, Safari, Chrome, Firefox, Edge, Opera, Brave).
• What is read: The visible text of the active document or web page — up to 60,000 characters. Only when you explicitly click "Scan."
• How to revoke: System Settings → Privacy & Security → Automation.

Screen Recording

• Why: To capture a screen region when you use the Screenshot tab.
• What is read: The screen area you drag to select, converted to a JPEG image in memory.
• When it happens: Only when you click "Capture Area" and drag. Taiva never captures your screen passively.
• How to revoke: System Settings → Privacy & Security → Screen Recording.

3. What data Taiva reads from your Mac

Taiva may read the following — exclusively in response to your explicit actions:

Document content

• PDFs open in Preview: full text extracted using Apple's PDFKit framework.
• Pages and Microsoft Word documents: body text via AppleScript.
• Notes: the text of the selected note via AppleScript.

Email content (Mail.app)

• The subject line and body text of the email you have selected.
• A message ID is read periodically (~1 second) to detect when you click a different email so Taiva can clear the previous scan. The message ID is never transmitted externally.

Web page content (browsers)

• The visible text of the active browser tab (document.body.innerText), up to 60,000 characters, via AppleScript + JavaScript.
• The page title and URL are read to identify the page.
• The URL is polled ~every 1 second to detect tab/page changes. URLs are stored in memory for the session only and are never transmitted to any server.
• Supported browsers: Safari, Chrome, Firefox, Edge, Opera, Brave.

Selected text

• Text you have highlighted anywhere on your Mac, detected via the macOS Accessibility API. Only transmitted when you click an action button.

Screenshots

• An image of the screen region you drag to capture in the Screenshot tab. Converted to JPEG in memory, sent to Anthropic, and never saved to disk.

Chrome extension content (optional)

• If you install the optional companion Chrome extension, it can push the text of the current page to Taiva via a local HTTP server on localhost:27134. This connection is local-only and requires no authentication.

4. What data is sent to external services

The Anthropic Claude API

When you trigger any AI feature (Ask AI, Summarise, Explain, Screenshot Analysis, etc.), Taiva sends the following to Anthropic's servers:

• Your question or prompt.
• The document, web page, or email text as context (up to 60,000 characters).
• For screenshots: the captured image as a base64-encoded JPEG.

Transmitted over HTTPS to: api.anthropic.com/v1/messages

Taiva does not include your name, email address, device identifier, or any other personal identifier in these requests.

For Anthropic's data handling: anthropic.com/legal/privacy

Anonymous usage analytics (PostHog)

Taiva collects anonymous usage analytics via PostHog to help improve the app.

What is collected:

• Which features you use (Ask AI, Summarise, Screenshot, Explain, etc.)
• The type of document active when a feature is used (PDF, web page, email, or document) — never the document content itself.
• Whether an AI API request resulted in an error (error type and HTTP status code only — no request content).
• How long each panel session lasts (open to close, in seconds).

What is NOT collected:

• Your name, email address, or any other personal identifier.
• The content of your documents, emails, or web pages.
• Your AI prompts or responses.
• Your API key or any text you have selected or typed.

A random UUID is generated on first launch and stored locally on your Mac. This UUID has no connection to your identity. No IP address, device name, or macOS username is included in analytics payloads.

Events are sent over HTTPS to: us.i.posthog.com/capture/ — PostHog privacy policy

Opt-out: Quit Taiva and run in Terminal: defaults write com.taiva.app analytics_disabled -bool YES

No other external services

• No other analytics platforms (no Google Analytics, Mixpanel, Amplitude, etc.)
• No crash reporting services (no Sentry, Rollbar, etc.)
• No advertising networks.
• No cloud database or storage service controlled by the developer.

5. What data is stored locally on your Mac

Taiva stores the following in macOS UserDefaults (readable only by your user account):

No documents, AI responses, conversation histories, or screenshot images are written to disk. All in-session data is held in memory and lost when you quit Taiva.

6. Data retention

In-session data (memory only)

Document text, AI conversations, summaries, and page URLs are held in memory for the duration of your session. Cleared when you quit Taiva or switch to a different document/email/page.

Preferences (UserDefaults)

Stored indefinitely until you change the setting or uninstall the app. To remove manually: defaults delete com.taiva.app

Data at Anthropic

Data sent to the Anthropic API is subject to Anthropic's retention policies. Taiva does not have the ability to request deletion of data already sent to Anthropic on your behalf.

7. Security

• All communication with Anthropic is over HTTPS (TLS).
• The local HTTP server (localhost:27134) accepts connections from localhost only and is not accessible from other devices on your network.
• Screen Recording permission is used only in direct response to your action; Taiva does not run background screen capture.

8. Children's privacy

Taiva is not intended for use by anyone under the age of 13 (or the applicable minimum age in your jurisdiction). The developer does not knowingly collect data from children.

9. Your rights

Because Taiva stores only anonymous preferences locally on your Mac and does not maintain a user account or central database:

• There is no account to delete.
• The developer does not hold a copy of your documents, emails, or AI conversations.
• To remove your local preferences: defaults delete com.taiva.app in Terminal, or uninstall the app.
• For rights regarding data already sent to Anthropic, contact Anthropic directly at anthropic.com/legal/privacy

10. Changes to this policy

This policy may be updated as the app evolves. The "Last updated" date at the top reflects the most recent revision. Continued use of Taiva after a policy update constitutes acceptance.

11. Contact

For any privacy questions, contact the developer who shared Taiva with you.