Privacy Policy

Your agents and their providers

Coincide doesn’t provide AI models. It starts each agent’s own command-line tool (Claude Code, Codex, Cursor, Grok Build, OpenCode or Antigravity) with the sign-in or API key you set up, and that tool talks to its provider, such as Anthropic, OpenAI, Cursor, xAI, OpenCode or Google, or whichever service you set an account to use.

What reaches the provider depends on the agent and on what you ask it to do. It typically includes your messages and attachments, files and command output the agent reads, and pages or screenshots it takes in Coincide’s browser or with Computer Use. Coincide itself also gives agents some text:

• Thread titles. Unless you turn this off, Coincide asks a thread’s agent to name it, sending the current title and a few hundred characters of the conversation.
• Switching agents. When you switch agents in a thread, the next agent gets a recap of the turns it missed.
• Git. When Coincide writes a commit message or pull request description for you, an agent writes it from your changes.
• Bots. A bot’s personality and instructions go to its agent at the start of each session.

Each provider handles this under its own terms and privacy policy. Coincide never proxies, stores on a server, sells or meters your tokens. The agent tools also keep their own files on your Mac (such as ~/.claude or ~/.codex), which Coincide doesn’t control.

What stays on your Mac

Coincide keeps its data on your Mac, here:

• ~/Library/Application Support/Coincide (or the folder set in COINCIDE_DATA_DIR): projects, threads and transcripts, attachments, bots, settings, checkpoints, usage history (the latest 10,000 finished turns), the background agent host’s event logs, sign-in folders for extra agent accounts you add, exact copies of CLI sessions you import, browser history and bookmarks, the list of logins you save (without their passwords), and Coincide Remote settings.
• Your login Keychain: API keys you add for agents and dictation, passwords and one-time-code secrets for logins you save, your Bitwarden session if you connect Bitwarden, Coincide Remote’s certificate and key, and a hash of each paired device’s token.
• ~/Library/WebKit: the browser’s shared profile, with its cookies and site data.
• ~/.coincide/worktrees (or worktrees inside COINCIDE_DATA_DIR): git worktrees Coincide creates for threads, holding copies of your project’s files.
• ~/Library/Caches/com.apoorvdarshan.coincide: app updates while they’re downloaded and checked.
• ~/Downloads/Coincide: files downloaded in Coincide’s browser.

Whisper models you download also stay on your Mac. Deleting these folders and Keychain items removes Coincide’s data; Settings › Browser can also clear browsing data. Your own backups, such as Time Machine, may include them.

Other connections the app makes

Apart from your agents, Coincide connects to other services only for these features. None of them sends anything to us.

Update checks

When you choose Check for Updates, and once a day while automatic checks are on (on by default; turn them off in Settings › About), Coincide asks GitHub’s public Releases API for the latest version. Downloading an update fetches it from GitHub. As with any request, GitHub sees your IP address.

Usage limits

To show how much of your plans you’ve used, Coincide asks Claude Code and Codex through their own tools, and calls Cursor, xAI (Grok Build), OpenCode, Google’s Cloud Code service (Antigravity) and OpenRouter directly, with the sign-in or key that agent already keeps on your Mac. The credential goes only in a request header to that provider’s own address. Coincide reads Cursor’s sign-in from the Keychain only if you allow it in Settings. Anthropic API-key rate limits are read only when you ask, with a one-token request on that key. If you add an Anthropic Admin API key, Coincide reads your organization’s usage and cost reports from Anthropic.

Usage from provider websites (off by default)

If you turn these on in Settings › Usage, Coincide reads Codex credit details from chatgpt.com, your prepaid API credit balance from the Claude Console (platform.claude.com) and your OpenCode Zen credit balance from the OpenCode Console (opencode.ai), using your sign-in in Coincide’s browser. The cookies are sent only to their own site.

Antigravity setup

Setting up Antigravity downloads Google’s Antigravity runtime from Google, checked against pinned checksums and Google’s signature, and signs you in with Google in your browser.

Dictation

By default, dictation uses Apple’s speech recognition on your Mac, and your audio stays on your Mac (macOS may first download the language’s speech files from Apple). If you download a Whisper model in Settings › Voice, it comes from Hugging Face and then runs on your Mac. If you choose OpenAI or Groq and add your own API key, your recording is sent to that provider to be transcribed. Recordings are held in memory only while they’re transcribed.

Browsing

Pages you or your agents open load from their sites, as in any browser, under those sites’ policies. Searches from the address bar go to the search engine you pick (Google by default). Images and media an agent links to in a reply load from their sites, without cookies.

Git, password managers and sync

• Pushing, pulling and pull requests use git and each host’s own command-line tool (such as gh) or web page, signed in as you.
• If you connect 1Password or Bitwarden, Coincide uses their own command-line tools, which talk to their services.
• “Let agents use your unlocked password managers” (Settings › Browser › Passwords, on by default) gives agents Coincide starts your unlocked Bitwarden session, so they can read any item in your vault with the bw command, such as API keys and tokens, without asking. Anything an agent reads can be sent to its provider like the rest of the conversation. Turn the setting off to stop this.
• If you choose to, Coincide keeps a copy of an instruction file in your iCloud Drive, or in a Git repository you pick and can push to its remote.
• If you click to install an agent, Coincide opens Terminal and runs that agent’s official install command, which downloads from its maker.

The browser and saved sign-ins

• Threads share one browser profile on your Mac, so sign-ins last across threads and relaunches. Settings › Browser offers private, per-thread sessions instead.
• Importing cookies, history and bookmarks from other browsers happens entirely on your Mac; nothing imported leaves it. To read a Chromium browser’s cookies, macOS first asks you to allow access to that browser’s key in the Keychain.
• Logins you save in Coincide are kept in your Keychain. Coincide can also fill sign-ins from 1Password or Bitwarden.
• If you connect Bitwarden, Coincide’s browser can sign you in with passkeys saved there, each time after you confirm the sign-in; Coincide also asks for Touch ID or your Mac password when the site requires it, or on every sign-in if you turn that on in Settings. Coincide reads the passkey locally through your own Bitwarden command-line tool, uses it only on your Mac to answer the site’s sign-in request, and never sends it to us. The site receives only the signed answer, as from any passkey.
• With Agent Control (on by default, per thread), an agent can open pages, read them, click, type and take screenshots. What it reads and captures goes to its provider. Agents can’t read cookies, site storage or password fields. If an agent asks Coincide to sign in, Coincide does it only after you allow that site, without showing the agent the password or one-time code.
• Other passkeys don’t work in Coincide’s browser yet. Coincide offers to open the page in your default browser and then import that site’s sign-in; the import reads only that site’s cookies, on your Mac.

Computer Use

Computer Use is off by default. When you turn it on, agents can list apps and windows, read a window’s controls, click, type, scroll and take screenshots. Screenshots and window contents an agent reads go to its provider.

To do this, Coincide runs a bundled copy of Cua Driver, an open-source helper made by Cua AI, on your Mac. Cua Driver normally sends content-free product telemetry to Cua AI and checks online for newer versions of itself. Coincide switches both off every time it starts the helper (it sets DO_NOT_TRACK=1, CUA_DRIVER_RS_TELEMETRY_ENABLED=false and CUA_DRIVER_RS_UPDATE_CHECK=false), so the helper sends nothing to Cua AI. Cua Driver is updated only when Coincide itself is.

Permissions and local helpers

• macOS asks before Coincide can use the microphone and speech recognition (dictation), the local network (Coincide Remote), and Accessibility, Screen Recording or Automation (Computer Use and Appshots).
• Appshots (off by default) capture another app’s window into a chat when you press the shortcut, optionally with that window’s text. Like any attachment, it goes to the agent when you send it.
• The coincide command-line tool talks to the app over a Unix socket that only your Mac user can open. You can turn it off in Settings › General.
• Agents reach the browser, scheduled tasks and Computer Use through private connections on your Mac, each limited to their own thread.
• Agents keep running in Coincide’s background agent host after you quit. It runs on your Mac and talks only to the app and the agents.
• Keep Awake changes your power settings with pmset after asking for your password, and “Sleep normally on battery” adds a small helper that runs as root while that option is on. Neither sends anything anywhere.
• Notifications on the Mac are ordinary local macOS notifications.

Coincide Remote

Coincide Remote is the companion app for iPhone and iPad. Remote is off on the Mac until you turn it on in Settings.

• How it connects. Your phone connects directly to Coincide on your Mac over your local network or your Tailscale network, using TLS 1.3. The Mac accepts connections only from local, private and Tailscale addresses. There’s no Coincide relay server or account.
• Pairing. You scan a one-time code that expires after five minutes. The phone pins your Mac’s certificate and keeps a random token in its Keychain; the Mac keeps only a hash of that token. While Remote is on, your Mac announces itself on the local network with Bonjour, under your Mac’s name.
• What a paired device can do. It can see and control much of what Coincide on that Mac can: projects, threads, messages and attachments, diffs and git actions, schedules, bots, usage and settings, and it can send messages to your agents. Photos and files you attach on the phone go to your Mac and, when you send them, to the agent’s provider. The phone tells the Mac whether it’s in use and which thread is open, so alerts go to the device you’re using.
• Permissions. Camera (to scan the pairing code and take photos you attach), photo library (photos you pick or save), microphone and speech recognition (dictation, using Apple’s recognition on the device), and local network.
• Lock-screen alerts (off by default). If you turn on “Notify this iPhone when it’s locked”, the Mac writes a short alert (the thread’s title, what happened and a detail line of up to 120 characters) to your own private iCloud database, and Apple delivers it as a push notification. We can’t read your private iCloud database. Coincide deletes each alert once you’ve seen its thread, and tries to remove any older than six hours.
• Apple. If you install Coincide Remote through TestFlight or the App Store, Apple may share crash reports and usage statistics with us, and for TestFlight your tester details and any feedback you send, as described in Apple’s terms and your device settings.

The website

coincide.dev is a static site hosted on Cloudflare. It sets no cookies and runs no analytics or tracking scripts. Like any web host, Cloudflare processes your IP address and request details to deliver and protect the site, under Cloudflare’s privacy policy. The pages load fonts from Google Fonts, so your browser also contacts Google, which receives your IP address and browser details. Links to GitHub, Discord, X and Instagram take you to those services, under their own policies.

The “Not on a Mac?” buttons count taps for Windows, Linux and Android. Each tap adds one to a public total stored with the site on Cloudflare; nothing else is saved. To stop automated tapping, the site briefly keeps your IP address in memory (never on disk) to limit how fast one address can tap.

Discord and Brulee

The Coincide community lives on Discord, and Discord’s privacy policy covers your account and messages there. Brulee is the server’s bot. It runs on Cloudflare Workers and answers slash commands only in the Coincide server.

/ask

Your question is sent to Google’s Gemini API to write an answer, which Brulee posts in the channel. Brulee sends only the question, not your name or ID, and doesn’t store it. Google handles it under its Gemini API terms.

/bug and /feature

Your report may be sent to Gemini to organize into a title and summary. Brulee then opens a public issue in the apoorvdarshan/coincide GitHub repository, with that summary and your original report quoted unchanged. Brulee doesn’t add your Discord username or ID to the issue. Anyone can read it, so don’t include passwords, API keys, tokens, private code or personal information.

So it can tell you when your issue is closed, Brulee privately stores the issue number with your Discord user ID, the channel ID and the ID of its reply, for up to two years. When the issue closes, it replies in that channel and mentions you. Notifications that can’t be delivered are retried for up to seven days.

Cooldowns

To limit how often commands run and to ignore repeated deliveries, Brulee keeps short-lived records keyed by a hash of your Discord user ID: about a minute for /ask, and for reports the times of your recent reports, for up to two days.

Spam moderation

About once a minute, Brulee checks new messages in the server’s channels and active threads for spam, using fixed rules on Cloudflare; no AI is involved. It stores Discord IDs, fingerprints (hashes) of recent messages, strike counts and times, but not message text. A member’s record becomes eligible for deletion after 30 days without a checked message, and strikes reset after 30 days without a new one. When Brulee removes spam, it posts a warning in the channel and logs the outcome, with the user ID and a message link, in a private staff channel, where it stays until removed.

Releases and logs

Brulee announces new public Coincide releases from GitHub, which involves no personal information. Cloudflare keeps operational logs of requests to the bot, which come from Discord and GitHub rather than from you; Brulee’s own log lines record event and error types, not your messages.

GitHub and email

Issues, pull requests and comments you post on GitHub are public and covered by GitHub’s privacy statement. Links in the app to report a bug open GitHub’s issue form in your browser and fill in only the versions of Coincide and your system; nothing is sent until you submit it. Please report security problems privately through GitHub’s private vulnerability reporting. If you email us, we use your message and address only to reply to you.

Who receives information

We don’t sell, rent or trade personal information, and we don’t use it for advertising. Information reaches other parties only as described above:

• your agents’ providers;
• Apple (iCloud, push notifications, speech files, TestFlight and the App Store);
• GitHub (updates, issues and the git hosting you use);
• Google (Fonts, Gemini for Brulee, and Antigravity);
• Cloudflare (the website and Brulee) and Discord;
• Hugging Face, OpenAI or Groq, for the dictation options you choose;
• services you connect yourself, such as 1Password, Bitwarden, Tailscale or your Git host.

We may disclose information if the law requires it.

Security

Credentials stay in the macOS or iOS Keychain, or in the agent tools’ own files, and are sent only in request headers to their own provider. Coincide Remote uses TLS 1.3 with a pinned certificate and per-device tokens. No software is perfectly secure; if you find a problem, please report it privately as described above.

Children

Coincide is a tool for software developers and isn’t directed to children. Discord requires its members to meet Discord’s minimum age.

Your choices

• Turn off what you don’t want: Coincide Remote, Agent Control, Computer Use, automatic thread titles, usage from provider websites, update checks and command-line control are all settings.
• Delete Coincide’s data from your Mac using the locations above, and reset Coincide Remote’s pairing in its settings.
• Ask us to remove what we hold about you, such as a report’s notification record, moderation records, or an issue Brulee created for you. Depending on where you live, you may have rights to access, correct or delete personal information; email us and we’ll help.
• For data held by your agents’ providers, Apple, Discord, GitHub or Google, use their own tools.

Changes and contact

When Coincide changes how it handles information, we’ll update this page and the date at the top.

Questions or requests: Apoorv Darshan, apoorv@fud-ai.app.