Privacy Policy

Effective October 10, 2026

Thank you for trusting Outmake with your work. This page explains, in plain words, what happens to your information when you use the Outmake app and the outmake.app website. Outmake is made by Ambedo Labs LLC, a company in Utah, United States. In this policy, “we” means Ambedo Labs LLC.

If you want every detail, Help › Privacy inside the app lists each data flow, what it carries and when. This page is the summary. We keep the two in step, and if they ever seem to disagree, please write to us and we’ll fix it.

The short version

• Outmake runs on your Mac. Your chats, files, pictures, videos, memory and settings are stored on your Mac.
• There’s no Outmake account and no advertising. Nothing the app sends us identifies you or your Mac unless you write to us and give your address.
• When you choose a cloud AI company, Outmake asks you first, then sends your request from your Mac straight to that company, using your own account or key. We never see it.
• We receive very little: speed, usage and error records, if you turn them on; feedback and ratings you choose to send; a count of downloads from our website; how our website is used, through Google Analytics, which you can turn off; the ordinary requests your Mac makes when it checks for and downloads updates or opens our website; and any email you send us.
• We never sell your information, and we never share it for advertising.

What stays on your Mac

Your chats, attachments, pictures and videos, your memory notes, drafts, dictation history, browser history in Outmake’s browser, downloaded models and voices, and your settings are kept in folders on your Mac, mostly under ~/Library/Application Support/Outmake/. API keys and sign-ins are kept in the macOS Keychain. Passwords, cards and documents you save in Outmake’s Passwords are kept in that same folder, sealed with a key that only your Mac’s Secure Enclave or your recovery key can open, and are never sent anywhere. We have no copy of any of it.

Deleting it is up to you, at any time. See “Deleting everything” below.

When something leaves your Mac

Companies you choose to use

Outmake can send work to AI companies when you pick one of their models or agents. The first time something would go to a company, for a particular use, Outmake stops and asks you, naming the company and summarising what it would receive. A “yes” covers that company and that use only. A “no” sends nothing. You can change any answer later in Settings › Privacy, and turning one off stops the very next send.

What goes with a chat message. Depending on what you do and what you allow, a chat request can include: your message; files and pictures you add; what an agent reads in your files or on your screen while it works; your memory notes; the city you’re in; your next calendar event; a contact’s name, company, and up to two email addresses and phone numbers when an agent looks someone up; records from a CRM you connected, when you ask about them; which apps you use; and results of a file search. Outmake reads a document’s text and the speech in recordings on your Mac first, and sends a file itself only to a model that can read that kind of file.

Each of these has its own switch in Settings › Memory › Sources. Location, calendar and contacts are on once you allow them in macOS, which Outmake asks about on its welcome page. File search uses your Mac’s Spotlight index, needs no macOS permission, and is on from the start. Which apps you use is off until you turn it on. Memory is shared with each agent company you’ve allowed, unless you turn it off for that company. A Private Chat never uses your memory, and still goes to the company you chose.

Your Custom Instructions go with every chat to its company. When you add a PDF to a Claude chat, Claude receives the file’s location on your Mac, which includes your Mac’s user name. Scheduled tasks send at the time you set.

Each company handles what it receives under its own terms and privacy policy, under your account with it. Outmake links to each company’s privacy policy when it asks you.

If an agent fails while you’re talking to it, Outmake may send the same question to another agent you’ve used and allowed recently, and says so out loud and in the chat. This never happens for a chat that runs on your Mac.

Downloads and lookups

Some features fetch files or information from other services. They see your Mac’s internet address and what was asked for, as any download would. No account and no cookies are involved unless you sign in.

• Models, voices and dictation models: Hugging Face, Civitai and GitHub, when you browse, search or download. If you sign in to Hugging Face or Civitai, Outmake uses your own token with them, and signing in to Civitai fetches your user name. Model pictures and makers’ icons are loaded from those sites while you browse.
• Engines and tools: GitHub (the engines that run models, OpenCode), nodejs.org and the npm registry (agent adapters), when they’re first needed.
• Connectors: a connector search goes to the public Model Context Protocol registry. Connecting a service signs in with that service directly and registers Outmake as an app with it. Every agent can use a connector you add.
• Your plans with Anthropic and OpenAI: when Outmake starts, at most once a day, it asks Claude and ChatGPT’s own agents, signed in as you, which models your plan offers, and when you open the usage panel, how much of your Claude plan is used. These open an empty session; nothing you wrote is sent.
• The browser: words typed in the address field that aren’t an address are searched with the search engine you chose (Google unless you change it). While Search Suggestions is on (Settings › Privacy), what you type in the address field, a new tab’s search box, the home page’s Search widget or Open Quickly is sent to that search engine as you type, so it can suggest searches. That is sent without cookies, never from a Private chat or tab, and never for what reads as an address, a file path, an email address or a key. Pages you or an agent open load from their own sites, as in any browser.
• Skills: a skill you get is downloaded from its public GitHub repository.
• Key balances: DeepSeek, Moonshot and Vercel AI Gateway, like OpenRouter, are asked for your balance with your own key when Settings shows that key.
• Keeping agents current: Outmake asks the npm registry for newer versions of the Claude and ChatGPT agents, at most once an hour while automatic updates are on.
• Widgets an agent makes for you fetch from the services they show, such as weather or prices.
• Sharing models with your other Macs: when you turn it on, your Mac announces its name on your local network and lends its memory to Macs you pair with it.
• Code reviews: a pull-request review uses your own gh command, and posting a review publishes it on GitHub under your account.
• Apple: turning your location into a city name uses Apple’s geocoding. macOS may download a speech language from Apple, with no audio or words attached.
• Now Playing: the home page widget looks up album covers from Spotify or Apple’s iTunes Search. Hide the widget and nothing is looked up.
• Your CRM and your own servers: go straight to the address you set up.
• Websites: pages you open in Outmake’s browser, and their icons, load from those sites as in any browser.

Our own servers

Update checks. If you let it, Outmake checks outmake.app for a newer version once a day and downloads updates from there. The request carries Outmake’s version number. Our website host, Vercel, sees your internet address when this happens. We don’t use these requests to identify or track anyone.

Speed and error records (off unless you turn them on). See the next section.

Speed, usage and error records

Outmake can predict how fast a model will run on a Mac like yours. Measurements from Macs like yours make those predictions better for everyone. Setup shows a Send Measurements and Errors switch before anything is sent. It starts on, except in the EU, the rest of the EEA, the UK and Switzerland, where it starts off and nothing is sent unless you turn it on. You can change it in Settings › Privacy at any time. While it’s on, Outmake sends short records once a day, or sooner when fifty are waiting:

• your Mac’s chip, memory and core count, and the macOS and Outmake versions;
• which model from Outmake’s own catalog ran, and how fast; for a video, how many frames it had and how long it took;
• which parts of Outmake were used, counted at most once a day each (opened it, finished setup, sent a chat, made a picture or a video, sent feedback, shared it), with the Outmake and macOS versions and roughly how long ago Outmake was first opened, as one of six bands such as “2 to 6 days”, never a date. These records leave out your Mac’s chip and memory;
• whether a download finished, failed or was cancelled, with a short fixed code for why, its size and speed;
• when something goes wrong, a short fixed code for the kind of failure; for a failed reply, which agent and model it was; for a crash, the part of Outmake that stopped, macOS’s reason, and the functions it stopped in, with any line holding a file path left out; for a freeze (Outmake not answering for four seconds or more), the same: how long, and the functions it was busy in.

Never sent: prompts, replies, pictures, the names or paths of your files, error messages, your location, anything from a Private Chat, models you found by searching Hugging Face or Civitai, and any identifier for you or your Mac. Before you turn this on, See What Gets Sent shows you the exact records.

What we keep. Our server stores the records themselves, grouped by the day they arrived, with no internet address and no identifier. Records sent in the same upload are stored together, and nothing links one upload to another. We publish summaries, such as the typical speed of a model on a given chip, once a model and chip have at least five records, so no single result sets the number.

Who handles it. The server runs on Cloudflare. Cloudflare handles your internet address to deliver each upload and to block abusive traffic, and its security tools may log the address of a request they block. We’ve turned off Cloudflare’s per-request logging for this server, so we don’t receive or keep your address.

How long. We keep records for up to two years, then delete them. Published summaries contain no records about any one Mac and may be kept.

Turning the switch off stops sending and deletes any records still waiting on your Mac. An upload in progress can’t be called back. Because the records we hold can’t be traced to you, we can’t find or delete yours in particular.

Feedback and ratings

Help › Send Feedback and the rating Outmake asks for once send what you typed to our server when you press Send: your words or your stars, what it’s about if you came from a model’s page, and, only if you leave them in, the app details shown in the sheet (Outmake and macOS versions, chip and memory) and an email address to answer you at. Nothing else is added, and nothing is sent until you press Send. We read it to fix and improve Outmake, quote it only if you ticked that we may, and delete it within two years. Because you may have given an address, you can ask us to delete yours at hello@outmake.app. If our server can’t be reached, Outmake writes the same words into an email for you to send instead.

Our website

outmake.app uses Google Analytics to count visits and see how the site is used: which pages are visited, how people arrive (such as the search engine or website that sent them), how far down a page they scroll, which buttons they press (such as Download, Watch the Trailer, the + buttons and Play Sound), and how quickly pages load in their browser. Google Analytics also receives the browser and device type, screen size, language, and a rough location (country and city) that Google works out from the internet address. We never see your internet address, and nothing the site collects includes your name or email.

To recognise a browser that comes back, Google Analytics keeps a random number in a cookie. These are the cookies it sets on outmake.app:

The site remembers your answer about these cookies in your browser’s local storage (outmake.consent), so it doesn’t ask again. That isn’t sent anywhere.

Your choice. If your browser is set to a time zone in Europe or in one of the EU’s regions overseas, the site asks first, and nothing loads from Google unless you press Allow. Elsewhere analytics is on, and you can turn it off. Either way, Cookies at the bottom of every page changes your answer, and turning it off removes the cookies from your browser, including in other outmake.app tabs you have open. A browser that sends a Global Privacy Control signal is treated as having said Don’t Allow, even after an earlier Allow, unless you press Allow while the signal is on. If you’re in the EEA, the UK or Switzerland and your browser isn’t set to a European time zone, you aren’t asked: the Google tag still downloads from Google, but Google Analytics sets no cookies and sends no measurements unless you press Allow under Cookies.

What Google does with it. Google processes this data for us under its data processing terms for Google Analytics. We’ve turned off Google signals and ads personalization, and we don’t share the data with Google for its own products. Visit-by-visit data is deleted after 14 months; totals, such as visits a day, are kept. Google explains its own handling at policies.google.com/privacy.

Downloads. The Download button goes through our server, which adds one to a count for that day, that version, your country, and the website that sent you to us, if any; it does not keep your internet address or anything else about the visit. It’s hosted by Vercel, which sees your internet address and browser details when you visit, as every website host does, and keeps short-lived logs under its own privacy policy. If you email us, we keep your email to answer it, and delete it within two years unless we need it for a legal reason. Our email is handled by Apple (iCloud Mail), and a copy is kept in Google’s Gmail; each handles it under its own privacy policy.

Why we handle information, for readers in Europe and the UK

• Speed and error records: your consent, given with the switch. You can withdraw it at any time by turning the switch off.
• Analytics on outmake.app: your consent, given with Allow. You can withdraw it at any time with Cookies at the bottom of any page.
• Loading the Google tag without cookies or measurements, for visitors in Europe whose browser isn’t set to a European time zone: our legitimate interest in a website that asks only the people it should, while setting nothing and sending no measurements until they allow it.
• Update checks, the website and blocking abuse: our legitimate interest in delivering a working, secure app and website.
• Emails you send us: our legitimate interest in answering you.

Everything Outmake sends to an AI company happens because you chose that company and asked it to do something. That relationship is between you and the company.

Where information is handled

We’re in the United States. Cloudflare, which runs our measurements server, and Vercel, which hosts outmake.app, run worldwide networks, including in the United States. Where European or UK law applies to measurements we receive, we rely on Cloudflare’s data processing terms, which include the European Commission’s standard contractual clauses and the UK’s addendum. Google handles outmake.app’s analytics under its data processing terms for Google Analytics, which include the same clauses. Vercel handles visits to outmake.app, and Apple and Google handle email you send us, each under its own privacy policy.

Your choices and rights

You control almost everything from your Mac: turn sharing off in Settings › Privacy and Settings › Memory, review and delete memory, and delete Outmake’s folders. On outmake.app, Cookies at the bottom of every page turns analytics on or off.

Depending on where you live, you may have rights to ask what information we hold about you, and to have it corrected, deleted, restricted or given to you to take elsewhere, and to object to how we use it. Withdrawing consent doesn’t affect what happened before. We make no automated decisions about you, and nothing in this policy is required to use Outmake. Because we don’t hold your chats or files, and the records we keep can’t be traced to you, there’s usually nothing we can find. Write to us anyway and we’ll tell you honestly what we have, within the time the law allows, usually 30 days. We won’t treat you differently for asking.

If you’re in the European Economic Area or the UK, you can also complain to your local data protection authority.

Selling, sharing and tracking

We don’t sell personal information, and we don’t share it for advertising. Outmake and outmake.app don’t track you across other apps or websites: the Google Analytics cookies are outmake.app’s own, and Google signals and ads personalization are off. outmake.app treats a Global Privacy Control signal as a choice to turn analytics off. The older “Do Not Track” signal isn’t read.

Children and age

Outmake is for adults, 18 or older. It isn’t directed at children, and we don’t knowingly collect information from anyone under 18. If you think a child has sent us information, write to us and we’ll delete it.

Mature content is off unless an adult turns it on. Turning it on asks for your birth month and year, checked on your Mac and never sent, and your Mac’s password or Touch ID, if your Mac has one.

Security

Your information lives on your Mac, protected by your Mac’s account and the Keychain. Below Full Access, Claude and OpenCode run their commands inside a macOS sandbox and ChatGPT uses its own; Gemini chats aren’t sandboxed yet. Outmake gives each agent only its own company’s key, and the sign-ins for connectors you add. Connections to AI companies, download sites and our servers use HTTPS. A model or speech server you add by address uses whatever that server offers, which on a home network is often unencrypted. If you find a security problem, please tell us at hello@outmake.app. See outmake.app/security.

Deleting everything

The easiest way is Settings › About › Uninstall. It lists everything Outmake kept and removes what you choose, including signing out the extra Claude and ChatGPT accounts you added in Outmake.

To do it by hand:

1. Quit Outmake.
2. Delete these folders in your Library folder: Application Support/Outmake, Application Support/Outmake Worktrees, Caches/Outmake, Caches/app.outmake.Outmake, Logs/Outmake, HTTPStorages/app.outmake.Outmake and Saved Application State/app.outmake.Outmake.savedState.
3. In Terminal, run defaults delete app.outmake.Outmake to remove its settings, including your Custom Instructions.
4. In Keychain Access, search for “Outmake” and delete the items you find.
5. Empty the Trash, then move Outmake to the Trash.

We hold nothing that links back to you, apart from any email you sent us, which we’ll delete if you ask. What you sent to an AI company stays with that company under your account; use its own settings to delete it.

Changes to this policy

When we change this policy, we’ll update the date at the top and say what changed in the release notes. If a change would mean Outmake starts sending something new, or sending to someone new, Outmake will ask you first, the same way it asks today.

Contact

Ambedo Labs LLC, Utah, United States hello@outmake.app