Last updated: October 12, 2026
This policy explains what information the Cyclops app for Mac and the website thecyclops.app handle, and why. Cyclops is made and published by Carl Moebis, an independent developer based in the United States (“I”, “me”).
The short version: the Cyclops app has no account, no analytics, no advertising and no tracking. Almost everything it does happens on your Mac, and I don’t receive what you do in the app. The website uses Google Analytics to understand how it’s visited.
The Cyclops app
What stays on your Mac
Your settings, Super Note drafts, timers and the other data Cyclops needs are stored locally on your Mac; sign-ins it keeps are stored in your Keychain. None of it is sent to me.
Permissions
Cyclops asks macOS for a permission only when you use the feature that needs it, and uses it only for that feature:
- Calendars, to show your events and countdowns.
- Camera, for the webcam mirror. Video is shown live and is never recorded, saved or sent.
- Audio capture, to draw the live waveform. Sound is analysed on your Mac and is never recorded or sent.
- Microphone and Speech Recognition, for Super Note dictation. Speech is recognised on your Mac; audio is not kept or sent.
- Location, to show the names of nearby Wi-Fi networks and, if you turn it on, travel time to calendar events.
- Automation, to control Apple Music, Spotify and Apple Notes, and to open meeting links.
- Accessibility, to handle media keys and show volume and brightness changes.
- Bluetooth, to show the connection and battery of your headphones.
You can turn any of these off at any time in System Settings › Privacy & Security.
When the app goes online
Cyclops connects to other services only for features you turn on, directly from your Mac. I don’t run a server for the app and receive none of this data:
- Claude usage (Anthropic). When you turn on Claude in Vibe View, Cyclops uses your Claude sign-in to read your plan usage from Anthropic.
- Codex usage (OpenAI). When you turn on Codex, Cyclops reads usage from the Codex app on your Mac and uses your Codex sign-in to request account statistics from OpenAI.
- Apple Music and Spotify. Track details and artwork are fetched from Apple and Spotify to show what’s playing.
- Calendar travel time (Apple Maps). If you turn on travel time, an event’s location and your location are sent to Apple to estimate the trip.
- Super Note. Your text goes only where you send it: to Apple Notes on your Mac, or prefilled into Codex or Claude Code for you to review and send there.
Those services handle that information under their own privacy policies.
Mac App Store
Apple handles purchases, downloads and updates. If you have chosen to share analytics with app developers, Apple may give me aggregated usage and crash statistics that don’t identify you. I don’t receive your name, email address or payment details from Apple.
The website
thecyclops.app is a static website with no advertising. Apart from its hosting, the one third-party service it uses is Google Analytics.
- Hosting and delivery. The site is hosted by DigitalOcean in the United States and delivered through Cloudflare, which also protects it from abuse. To deliver the site, they process your IP address, browser type and the pages you request. Cloudflare may set strictly necessary security cookies. Server logs are kept for a short time (typically about two weeks) for security and troubleshooting, then deleted.
- Google Analytics. The site uses Google Analytics to count visits and learn which pages are useful. It records the pages you view, how you arrived (such as the site that linked to you), your browser, device type and language, and an approximate location that Google derives from your IP address; Google Analytics doesn’t log or store IP addresses. It sets first-party cookies (named
_gaand_ga_…) that last up to two years, and the data is kept in Google Analytics for no more than 14 months. It isn’t used for advertising, and the data isn’t sold. You can block these cookies in your browser’s settings or use Google’s opt-out browser add-on. Google describes how it processes this data at policies.google.com. - Stored in your browser. The site remembers the language you choose and, while you use them, drafts in the interactive demo and in the support form. They stay in your browser, are never sent to me, and you can clear them in your browser’s settings.
- Camera demo. If you click “Try it with your camera”, your browser asks for permission. The video stays on the page and is never recorded or uploaded.
The support form
When you send a message from the support page, the form sends your email address, your message and topic, anything optional you add (your name, your Mac and macOS version), the page’s language and your browser’s user agent. It is delivered to my email inbox through Google’s Gmail service. Your IP address is used briefly to prevent abuse and is not stored with your message.
I use this information only to answer you and to improve Cyclops, and I keep messages only as long as needed for that. Please don’t include passwords or other sensitive information.
Google user data (Cyclops Support)
The support form is delivered by a small server-side service called Cyclops Support, which sends each message to my own inbox through the Gmail API. It uses one Google permission, gmail.send (“Send email on your behalf”), granted only for my own Gmail account. Visitors never sign in with Google. Cyclops Support doesn’t read, search, store or share anyone’s Gmail messages, contacts or other Google data; the only thing it sends through Google is the support message you submit, and it uses that permission for nothing else.
Cyclops Support’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Sharing
I don’t sell or rent personal information. I share it only with the service providers named above as needed to run the website and the support form, when the law requires it, or to protect the rights and safety of users and others.
Your rights
Depending on where you live, including the EU, the UK and several US states, you may have the right to access, correct, delete or receive a copy of your personal information, and to object to or restrict how it is used. To make a request, use the support form; I will respond within the time required by applicable law. You may also contact your local data protection authority.
Legal bases (EU and UK)
Where the GDPR or UK GDPR applies, I process website and support information on the basis of legitimate interests (running, securing and improving the site, measuring its use with Google Analytics, and answering your message). The camera demo and the app’s permissions rely on your consent, which you can withdraw at any time.
International transfers
I’m based in the United States, and the providers above may process information in the United States and other countries. Where required, transfers rely on appropriate safeguards, such as the standard contractual clauses those providers offer.
Children
Cyclops and this website aren’t directed to children under 13, and I don’t knowingly collect their personal information.
Changes
If this policy changes, I’ll update this page and the date at the top.
Contact
Cyclops is published by Carl Moebis. For privacy questions or requests, please use the support form.