Cay Privacy Policy
This policy covers the Cay app for macOS (all 1.x versions) and the website at getcay.app. "We" and "us" mean Junhan Lee, the maker and seller of Cay. "You" means the person using Cay or the website.
Summary
- Cay runs on your Mac. Your captures, recordings, on-screen text, notes and search index stay on your Mac. We never receive them.
- Cay uses the internet for three things: checking your Cay Pro license with Lemon Squeezy, checking our update feed, and, only when you press Download in Settings › Capture, downloading the background removal model from Hugging Face. When you choose to install an update, it also downloads the update file.
- Search the Web and Look Up send the text you chose to a search engine or to Apple, through your browser or macOS, and only when you press them.
- An AI agent gets a capture after you take it and send it. By default the agent gets the capture as you took it. Press ⌥Space to send a copy with secrets hidden. With Cay Pro, an agent you allow can also capture a window or a screen itself: Cay shows a notice each time, keeps the capture in your library and gives the agent a copy with secrets hidden. Agents run on your Mac, but most of them send what they read to the company that runs their model. That part is covered by the agent's own terms.
- Cay has no analytics, no ads, no tracking and no user accounts. We do not sell or share personal data.
1. Who is responsible
Junhan Lee
Seoul, Republic of Korea
Email: support@getcay.app
2. Data that stays on your Mac
Cay creates and keeps the following on your Mac. None of it is sent to us.
| What | Where | How long |
|---|---|---|
| Captures and recordings (PNG, MP4, first-frame images) | ~/, or the folder you choose | Until you delete them. If you turn on Tidy, captures you did not keep move to the Trash after the number of days you set. |
| Library index: app name, window title, browser address, on-screen text read by OCR, tags, notes, boards | library.json in the library folder | Same as the captures |
| Replay data: frame times, on-screen text, transcript | A .replay.json file next to the recording | Same as the recording |
| Flick Shot window text: the text of the window you captured with Flick Shot | A .flickshot.txt file next to the capture | Same as the capture |
| Search index (Recall) | ~/ | Until you delete it. Cay can rebuild it from the library. |
| Settings, including which agents you allowed to read past captures or to capture on their own | ~/ | Until you delete it |
| The background removal model, if you download it | ~/ | Until you delete it in Settings › Capture |
| Outbox: the copies handed to AI agents (with secrets hidden when you send with ⌥Space), and capture cards when capture details are on | ~/ | Deleted 7 days after they are written. You can change the number of days in Settings. |
| Downloaded updates | ~/ | Until you or macOS remove them |
| Log file | ~/ | Replaced in turn at 5 MB. Cay keeps 3 files. |
| License status | Login Keychain, item day.junhan.cayapp.license | Until you deactivate the Mac |
| Trial start date | Login Keychain, item day.junhan.cayapp.trial | Stays after you delete the app, so a reinstall does not start a new trial |
| App preferences, such as window positions | macOS user defaults for day.junhan.cayapp | Until you delete them |
Processing on your Mac
These steps run on your Mac and send nothing to us or to any server we run:
- Reading text in captures (OCR), using Apple's Vision framework.
- Shield: finding secrets and personal data in a capture and covering them.
- Building a Replay brief: choosing frames and reading their text.
- Transcribing the voice in a recording (macOS 26 and later), using Apple's Speech framework. If the speech model for your language is not installed yet, macOS downloads it from Apple. That download is between your Mac and Apple.
- Searching your library (Recall).
- Translating on-screen text, using Apple's Translation framework (macOS 15 and later). If a language is not installed yet, macOS downloads it from Apple. That download is between your Mac and Apple.
3. Data that leaves your Mac
3.1 License activation and checks (Lemon Squeezy)
Cay Pro licenses are issued and checked by Lemon Squeezy.
When Cay contacts Lemon Squeezy: when you activate a license key, about once every 7 days while Cay Pro is active and your Mac is online, and when you deactivate a Mac.
What Cay sends to api.lemonsqueezy.com:
- your license key;
- a device label made of your Mac's model name and 4 random characters, for example "Cay on MacBook Pro (a1b2)". Cay never sends your computer's name, which often contains a person's name;
- for checks and deactivation, the activation ID that Lemon Squeezy gave this Mac.
Lemon Squeezy also sees your IP address, as with any internet request.
What Cay does not send: captures, recordings, on-screen text, file names, window titles, your computer's name, or your email address.
Lemon Squeezy's reply includes details of the order, such as the buyer's name and email address. Cay only uses the reply to confirm that the key belongs to Cay. It stores the key, the activation ID, the device label, the license status and the time of the last check in your Keychain. It does not store the name or email address.
The 3-day trial needs no network connection and sends nothing.
3.2 Update checks
When: 2 minutes after Cay starts and then about once every 24 hours, while automatic checks are on (they are on by default; you can turn them off in Settings › License). Also whenever you choose Check for Updates.
What happens: Cay requests a signed update feed file from getcay.app. The request carries no license key, account or device identifier. Like any web server, the server receives your IP address, the time and a standard user agent string. Cay checks the feed's signature. If a new version is available and you choose to download it, Cay downloads the disk image and checks its SHA-256 hash before opening it.
3.3 Buying Cay Pro (Lemon Squeezy as Merchant of Record)
Lemon Squeezy is the Merchant of Record for Cay Pro. When you buy, you buy from Lemon Squeezy, and Lemon Squeezy collects your name, email address, billing address and payment details, and handles tax. Lemon Squeezy's privacy policy applies to that data: https://www.lemonsqueezy.com/privacy
Lemon Squeezy shares with us the order details we need to deliver and support your license: your name, email address, billing country and region, what you bought, the order number and the license key. We do not receive your full card number. We use these details to answer support requests, issue refunds, reset activations and keep the records that tax law requires.
Buy buttons add one word to the checkout address saying where the button was: site, or in Cay settings, locked, trial, agent-request or agent. It comes back with the order so we can count which places lead to purchases. It says nothing about you or your screen.
3.4 Background removal model (Hugging Face)
Removing a background works on your Mac without it. If you press Download in Settings › Capture, Cay downloads a high-quality background removal model (about 95 MB, a public Core ML conversion of BiRefNet under the MIT license) from huggingface.co. The request carries no license key, account or device identifier, and Cay keeps no cookies from it. Hugging Face sees your IP address, as with any internet request. Cay checks each file's size and SHA-256 before using it. The model runs only on your Mac; your images are never uploaded. You can delete the model in Settings › Capture.
4. AI agents on your Mac
AI coding agents (such as Claude Code or Codex CLI) run on your Mac as separate programs. Cay gives them captures in these ways:
- Space send. You press Space on the island. Cay writes a copy of the capture to the Outbox and pastes the copy's path into the agent session you picked (in iTerm2, Terminal or tmux). If you turn on capture details in Settings › Agents (off by default), Cay also writes a capture card and pastes its path. Space sends the capture as it is; ⌥Space sends a copy with secrets hidden. Settings can swap the two.
- Flick Shot. You press the Flick Shot keys (both ⌘ keys by default). Cay captures the front window. If an agent is waiting for a capture or you used one agent session recently, Cay sends the capture right away under the same rules as Space; otherwise the island opens and you choose. Cay also reads that window's text through Accessibility, including text scrolled out of view, and keeps it next to the capture on your Mac. For a Terminal, iTerm2 or tmux window it reads the tab's recent output instead, and only if you already allowed Cay to control that terminal. An agent gets this text only inside the capture card, with secrets hidden by default. Flick Shot does not capture password manager windows.
- Ask to see. An agent that you connected to Cay's helper can ask to see something. The request appears at the top of your screen. Nothing is captured until you take the capture with ⇧⌘2 (or Frame) and press Space. The agent gets the capture as it is. ⌥Space answers with a shielded copy instead.
- Capture on its own (Cay Pro). An agent can capture one window or one screen without you pressing anything, but only after you allow that agent (Allow once, Always or Deny; Settings › Agents can also always allow or never allow). Each capture shows a notice at the top of your screen and is kept in your library. The agent always gets a copy with secrets hidden and a capture card; for a window the card also holds the window's text, including text scrolled out of view but not password fields. Cay does not capture the windows of apps excluded in Settings › Shield and leaves them out of a screen capture.
- Past captures (Cay Pro). A connected agent can list, search and open captures from the last 30 days (the default range) only after you allow it (Allow once, Always or Deny). Captures from password managers and captures tagged "private" are left out. Past captures are always shielded.
How the connection works. Cay's helper talks to the app through a local socket in your user folder that only your user account can open. Cay accepts only its own signed helper. Cay does not open a network port.
What an agent receives. The file path to the capture copy, or for a recording, the Replay brief and its frames. If capture details are on (off by default), or when an agent opens a past capture or captures on its own, it also receives the path to the capture card. A capture card contains the app name, the window title, the browser address with the query part removed, the size, a Shield summary, your note if you wrote one, the positions of numbers you placed in Cay's editor, and the on-screen text (with secrets hidden when the copy is shielded). For a Flick Shot capture the card also holds the window's text described above.
What happens next. Agents are made by other companies. Most of them send the files they read to the company that runs their AI model. That transfer is between you, the agent and its provider, under their terms and privacy policies. We do not receive it and cannot control it.
Shield has limits. Shield looks for secrets and personal data in the text it can read, such as API keys, tokens, private keys, passwords, email addresses, phone numbers, card numbers and Korean resident registration numbers. It can miss text it cannot read or formats it does not know, and it can cover harmless text. Check the preview before you send. Copy, drag and share use the original capture by default. You can turn on Shield for them in Settings.
5. Things you start that send data to other apps
When you share a capture (W), run a Shortcut (Q), paste into the front app (V), drag a capture into another app, or open a link, Cay hands the capture or its details to the app or service you chose. Their terms and privacy policies apply.
When you press Search the Web on the island, Cay opens your default browser with up to 200 characters of the capture's on-screen text as the search query, at the search engine you chose in Settings (Google by default, or Naver, Bing or DuckDuckGo). Before the search, Cay leaves out values that look like private keys, API keys, tokens, passwords, card numbers, Korean resident registration numbers and long random-looking strings, for the kinds turned on in Settings › Shield. The rest of the text, including email addresses, phone numbers and IP addresses, goes as it is. Cay finds these values by reading the capture's text, so it can miss a value that was read wrongly. For captures from password managers, Cay asks you to press the key again first. Automation rules cannot search the web. When you select text in a pinned capture and choose Look Up, Translate or Search, macOS handles it, and Look Up and Search may send that text to Apple or a search engine.
6. Permissions Cay asks for
| Permission | What Cay uses it for | When Cay asks |
|---|---|---|
| Screen Recording (on macOS 15 and later: Screen & System Audio Recording) | Taking captures and recordings | First launch. Required. |
| Accessibility | Pasting into the front app or your agent's terminal, scrolling the page during a scrolling capture, reading the title of the window you capture, and for Flick Shot noticing its keys and reading the front window's text | The first time you use one of these |
| Automation | Sending captures to iTerm2 or Terminal, reading the address of the browser tab you capture, and for Flick Shot reading the recent output of the front terminal tab | The first time Cay sends to that app or reads that browser. Flick Shot never asks; it reads a terminal only if you already allowed it. |
| Microphone | Adding your voice to a recording | The first time you turn on the microphone for a recording |
| System audio | Adding system sound to a recording | When you turn it on |
| Speech recognition (macOS 26 and later) | Transcribing a recording on your Mac for Replay | If macOS asks, the first time you build a Replay brief from a recording with sound |
You can change these at any time in System Settings › Privacy & Security.
7. Logs
Cay writes a log file so you can send it to us when something goes wrong. It records events such as shortcut presses, captures and the result of sending to an agent. It does not record on-screen text, agent request text, web addresses, license keys, or the secrets Shield found. For Shield it records only how many items were hidden and of what kind. Window titles are left out, and session names are replaced by a short code. The log stays on your Mac unless you send it to us.
Cay does not include its own crash reporter. If you share Mac Analytics with Apple, macOS may include Cay crash reports in what it sends to Apple. That is controlled in your macOS settings.
8. Website
The website at getcay.app sets no cookies and loads no analytics, advertising, third-party scripts, fonts or embedded content. The server that hosts the website may keep standard access logs (IP address, time, requested page, browser user agent) for security and operations. We do not use them to identify or track you. Buy links go to Lemon Squeezy's checkout, where Lemon Squeezy's privacy policy applies.
9. Support email
If you write to support@getcay.app, we use your email address and the content of your message, including any log file or capture you attach, to answer you. We delete support conversations 24 months after the last message, unless we need to keep them longer to meet a legal obligation.
10. What we do not do
- We do not sell or rent personal data.
- We do not share personal data for advertising.
- We do not track you across apps or websites.
- We do not use analytics or advertising code in the app or on the website.
- We do not require an account.
11. Legal bases (EEA and UK)
Where the GDPR or UK GDPR applies, we process personal data on these bases:
- to perform our contract with you: license activation and checks, update checks, refunds and support for your license;
- our legitimate interest in keeping updates secure and the website running: update feed and server logs;
- legal obligations: tax and accounting records of purchases.
12. Your choices and rights
Delete what Cay keeps on your Mac. In Cay, choose Settings › License › Deactivate this Mac if you have Pro. Quit Cay, move Cay to the Trash, and delete:
~/(or the library folder you chose)Pictures/ Cay Captures/ ~/Library/ Application Support/ day.junhan.cayapp/ ~/Library/ Caches/ day.junhan.cayapp/ ~/Library/ Logs/ day.junhan.cayapp/ - the Keychain items
day.junhan.cayapp.licenseandday.junhan.cayapp.trial(open Keychain Access and search for "day.junhan.cayapp")
If you connected an agent to Cay, also remove the cay entry from that agent's MCP settings.
Data we hold about you. We hold only the order details from Lemon Squeezy and any support emails. Depending on where you live, you may have the right to access, correct, delete or export this data, to object to or restrict its use, and to complain to your data protection authority. Write to support@getcay.app. We answer within 30 days. We may keep order records for as long as tax law requires. Lemon Squeezy keeps its own records; you can contact Lemon Squeezy about them as described in its privacy policy.
13. Children
Cay and its website are not directed at children under 13, or under the minimum age set by the law where you live. We do not knowingly collect personal data from children.
14. Changes to this policy
If we change this policy, we will post the new version at getcay.app/privacy with a new effective date. If a change affects what Cay sends from your Mac, we will also say so in the release notes of the version that makes the change.
15. Contact
Questions about this policy: support@getcay.app