NotchBay privacy: what the app and this site collect

NotchBay needs no account, and your clips, transcripts and calendar events are never uploaded; the only thing the app sends is one anonymous install check-in (a random id, app version and license state, no personal data). This website is served by Cloudflare Pages and loads two analytics scripts, Microsoft Clarity and one from app.conclick.io.

What the app does with your data

• No account required. There is nothing to sign up for and nothing to sign in to.
• Clips, transcripts and calendar events are never uploaded. The Tray, dictation transcripts and the next-event activity are handled on your Mac.
• Dictation audio is processed on-device and never leaves the Mac. NotchBay uses Apple's SpeechAnalyzer, the macOS 26 speech API.
• File sharing goes to your own Google Drive, not to any NotchBay server. Drop-to-share uploads the file to the Google Drive account you connect and copies a share link.
• One anonymous install check-in. The app sends one anonymous install check-in: a random id, app version and license state. No personal data.
• Claude Code usage figures stay local. The 5-hour and weekly usage limits shown in the notch are computed from the local ~/.claude logs; nothing is sent to Anthropic or to NotchBay for it.

Permissions

Each permission is requested only when the feature needing it is switched on, and the Settings window has a live Permissions page showing what is granted. NotchBay can ask for six:

• Calendar, for the next-event live activity and its one-click join.
• Microphone, for dictation and transcription, which run on-device.
• Accessibility, needed by the Zoom and Google Meet call controls (mute, camera, leave).
• Full Disk Access, needed by message mirroring with quick reply and by the Focus (Do Not Disturb) status chip.
• Screen recording and Notifications, each requested only when a feature that needs it is switched on.

Nothing is requested up front: skip a feature and its permission is never asked for.

What this website does

• Hosting. notchbay.com is served by Cloudflare Pages.
• The download link. /download adds one to a per-day download counter (a single number per day, nothing about you) and then redirects to the disk image.
• The pricing card asks /api/drop for the current price state. That endpoint reads server configuration and stores nothing about the visitor.
• Buying a license sends you to a hosted Polar checkout page; card details are entered there, not on notchbay.com. Your license key arrives by email, and the thank-you page looks the same key up from Polar to show it right away.
• Forms on /free/ store what you type (an email address or a social handle, plus the URL of the post you submit) in the site's database so the claim can be reviewed and the key or trial code sent.
• Analytics. Two third-party scripts load on the pages: Microsoft Clarity (clarity.ms) and an analytics script served from app.conclick.io. There are no advertising pixels on the site.
• Fonts. The pages load the Instrument Serif typeface from Google Fonts, so Google receives that font request.

Contact

Questions about any of this: deepak@ossiandesignlab.com, or @thedeepflux on X. The developer page is /about/, the same facts in press form are on /press/, and the homepage and blog explain how the features work.