Privacy Policy
WOS is a local-first macOS productivity tool. Almost all data WOS handles never leaves your Mac. We do not have a backend, we do not run user accounts, we do not collect analytics inside the app, and we do not sell your data.
The short version: WOS is a keyboard tool that lives on your Mac. It tracks app/tab/file activity locally to make Cmd+Tab smarter, then keeps that data on your machine in a JSON file you can read, copy, or delete at any time. The only network requests it makes are an update check and feedback you explicitly submit.
1. What WOS processes locally
The following data is processed and stored entirely on your Mac, in files you can inspect, copy, and delete. None of it is transmitted to us or to any third party.
Switching history
A rolling list of the most recent apps and browser tabs you've switched between. Includes app name, bundle identifier, tab title, and URL. Used to rank entries in the Cmd+Tab / Opt+Tab switcher by Last-Recently-Seen order.
Recent files history
Paths and timestamps of files you've opened or modified recently. Sourced from macOS file-system change events (FSEvents), the system Spotlight index, and the Accessibility API observing the focused window's document attribute.
- Direct distribution build: files anywhere in your home directory, excluding system-managed paths (
~/Library/,.git, build directories, hidden directories). - Mac App Store version: only files in folders you have explicitly granted access to via the "Add Folder" picker. Sandbox prevents WOS from observing folders you have not explicitly added.
Clipboard history
The text and image content of items you've copied recently, plus the source application name. Stored locally, never transmitted. The clipboard monitor applies metadata filters (e.g. password-manager-tagged items, transient secret types) and content heuristics to avoid retaining likely-secret content; details are in the Security & Kernel Isolation page.
Bookmarks
URLs and titles of pages you have explicitly saved with the Save Bookmark shortcut. Stored locally.
Settings & preferences
Hotkey choices, HUD appearance settings, watched-folder selections (App Store version), and similar configuration. Stored in macOS UserDefaults under the WOS bundle identifier.
2. What WOS sends over the network
WOS makes network requests in only two cases. Both are limited in scope and contain no personal identifiers.
- Update checks. WOS periodically fetches a small JSON manifest from the WOS website to discover new versions. The request includes only your current WOS version string and your macOS version. It does not include a user identifier, install identifier, IP-derived geolocation tracking, or any data about your activity.
- Feedback submission. When you explicitly use the in-app Feedback feature, the message you write is sent to the WOS feedback endpoint. The form clearly shows what is being sent before you submit. Diagnostic information attached to feedback (recent log lines, version, macOS version) is included only when you explicitly opt in via the form.
WOS does not include analytics SDKs, telemetry frameworks, advertising libraries, or attribution services. We do not collect crash reports beyond what macOS itself reports to Apple via the system-level crash reporter (which we do not have access to and which is governed by Apple's privacy policy).
3. Permissions WOS requests
WOS requires several macOS privacy permissions to function. All are granted explicitly by you via the standard system prompts. You can revoke any of them at any time in System Settings → Privacy & Security.
| Permission | Why WOS needs it |
|---|---|
| Accessibility | Reads the focused window's title and document path so the Recent Files HUD can surface what you're currently editing; positions and snaps windows for the window-management features. Read-mostly: only writes to move and resize windows. |
| Apple Events / Automation | Sends scripting commands to your installed browsers (Safari, Chrome, Brave, Arc, Orion, Opera, Firefox) and iTerm to switch between tabs and read tab titles. Each browser is prompted separately on first use, and you can revoke any single browser without affecting the others. |
| Files & Folders App Store | Required so you can explicitly grant WOS access to specific folders you want the Recent Files feature to watch. WOS cannot see folders you have not added. |
| Input Monitoring Direct only | Lets WOS detect Cmd+Tab so it can intercept and override the system App Switcher. This is the same permission required by Karabiner-Elements, BetterTouchTool, and similar productivity tools. The Mac App Store version of WOS uses Opt+Tab via a different mechanism that does not require this permission. |
4. What WOS does not collect
- We do not assign you a user ID, install ID, or device fingerprint.
- We do not collect your name, email address, or any contact information unless you explicitly enter it in the Feedback form.
- We do not track which apps or websites you use beyond what is needed to populate the switcher, recent-files, and clipboard HUDs locally on your machine.
- We do not record the contents of files you open. Only paths and timestamps appear in the recent-files history.
- We do not transmit clipboard contents anywhere. Clipboard history lives in a local file only.
- We do not collect crash reports beyond what macOS itself sends to Apple.
- We do not use third-party analytics, advertising SDKs, or attribution frameworks inside the app.
- We do not sell, rent, share, or license your data to anyone.
5. Your data, your control
Because all WOS data lives locally on your Mac, you have full control. You can:
-
Inspect it. Open
~/Library/Application Support/WOS/(direct distribution) or~/Library/Containers/com.agentic.wos.mas/Data/Library/Application Support/WOS/(App Store version) in Finder. The JSON files are open formats — any text editor will read them. - Delete it. Quit WOS, then move those folders to the Trash. WOS will start fresh on the next launch.
- Export it. Copy the JSON files anywhere. They're plain text.
- Clear specific items. Clipboard history entries, bookmarks, and recent files entries can be removed individually from within their respective HUDs.
- Disable specific features. Each tracking feature (Recent Files, Clipboard History, etc.) has an on/off toggle in WOS's Settings panel. Turning a feature off stops new data being recorded; data already on disk can be deleted as above.
6. The marketing site you're reading right now
The wosapp.io marketing website (which serves this privacy policy and the rest of the public site) uses Google Analytics 4 to measure aggregate visit traffic. This is purely about the public website — the WOS app itself does not include analytics. If you would prefer not to be measured here, your browser's tracking-protection or an extension like uBlock Origin will block these requests; the site functions identically without them.
7. Children's privacy
WOS is not directed at children under 13. We do not knowingly collect personal information from anyone, including children.
8. Changes to this policy
If we materially change how WOS handles your data, we will update this page and bump the "Last updated" date at the top. For substantial changes, we will surface a notice in the app's About panel so existing users are informed without needing to revisit this page.
9. Contact
Questions, concerns, or want a copy of any data we may incidentally hold (we don't, but if that ever changes, you have the right to ask)? Reach us at:
- Contact form on this site
- GitHub issues: github.com/cmdwosapp/wosapp/issues
- Email: wosapp@proton.me