Privacy Policy

Your code and your work stay on your Mac

Everything OpenCrew keeps about a folder lives in that folder, in .opencrew/: the conversation, goals and tasks, agents and their settings, and the record of what you approved. Local state (the database and caches) sits in .opencrew/state/ and is git-ignored; the record of approved work is meant to be committed with your code. Agents do their work in git worktrees under ~/Library/Application Support/OpenCrew on your Mac. Machine-wide preferences, logs and a random install id are kept there too.

We cannot see any of it. Delete the .opencrew/ folder and the app’s Application Support folder and it is gone.

AI providers, through your own login

Agents run on Claude Code (Anthropic) or Codex (OpenAI), signed in with your own account. To do the work, those tools send prompts and the parts of your code they read to Anthropic or OpenAI, exactly as they do when you use them directly, under your agreement with that provider and its privacy terms. OpenCrew does not proxy, copy or store that traffic, and we never receive your provider credentials.

Anonymous usage data we receive

To learn whether OpenCrew works for people, the app sends anonymous usage events to PostHog, the analytics service we use. They fall into three categories: app sessions (the app started or quit, and roughly how long it ran); feature usage counts (for example that a goal was started, a change was approved, or an agent turn finished, with which harness, whether it succeeded, and a rough duration); and errors (a category such as “commit failed”). Each event carries the app version, the OS and CPU architecture, and random ids for the install and the workspace that we generate and that are not derived from your folder or your machine.

These events never contain code, prompts, messages, titles, file or folder names, paths, your name or your email, and the app drops any property not on a fixed allowlist before anything is sent. Events are sent without location lookup and your IP address is discarded rather than stored.

Once a day the app also sends an anonymous ping to opencrew.run with the install id, version, OS and a few counts (projects, agents, recent runs). Its reply tells the app whether an update is available.

Turning it off

Open Settings → Privacy & updates and switch off “Share anonymous usage data” and “Send an anonymous daily ping”. The setting applies to every folder on that Mac, and nothing is sent once it is off. Setting OPENCREW_ANALYTICS=0 or OPENCREW_TELEMETRY=0 in the environment does the same.

Updates

The app checks our download server for new versions at launch and every few hours, and downloads updates from it. Like any web server, it may log the requesting IP address and the file requested; we use those logs only to keep downloads working.

This website

opencrew.run uses PostHog in a cookieless mode: nothing is stored in your browser (no cookies, no local or session storage), so every visit is anonymous and not linked to the next. We record that a page was viewed, with the referring site and any campaign (UTM) tags in the link, and when a download button is clicked, with which Mac build. No session recording, no advertising or cross-site tracking. Because nothing is stored on your device, there is no cookie banner.

Changes

If what the app or this website sends changes, this page changes with it and the date above moves.

Contact

Questions or requests: anup@opencrew.run.