BoxDo Terminal — Privacy Policy

BoxDo Terminal is a free macOS app that runs AI coding agents on your own Mac. This policy explains the only data the app sends anywhere, and the data it deliberately never sends.

The short version

Your code, your prompts, your conversations and your file paths never reach BoxDo. The app sends one anonymous statistics report per day — which AI agents are installed and how many sessions each has — and you can turn it off in Settings → General.

What stays on your Mac

Everything that matters. BoxDo Terminal stores its data locally, in ~/Library/Application Support/BoxDo Terminal/: your workspaces and sessions, your chat transcripts, the live activity events of a running agent, and your themes, shortcuts and preferences. None of this is uploaded, synced or backed up by us. There is no BoxDo account in BoxDo Terminal, and the app has no server-side copy of your work.

The anonymous usage report

Once every 24 hours, if enabled, the app sends a single JSON report to boxdo.com. This is the complete list of what it contains:

• A random install ID (a UUID created on this Mac) — so one Mac reporting daily isn't counted as a new user every day
• App version — to know which versions are still in use before changing anything
• macOS version — to know which macOS versions we must keep supporting
• Processor architecture (arm64 or x86_64) — to keep shipping the right builds
• For each supported agent: its id, whether it is installed, its version number, and how many sessions you have with it

Why the agent list matters: BoxDo Terminal ships adapters for nine agent CLIs that release constantly. Knowing which ones people actually run, and at which versions, is how the model lists, slash commands and install commands in the app stay correct.

What the report never contains: no name, no email, no account, no IP-based profile, no file names, no folder paths, no workspace or session titles, no prompts, no agent output, no source code, no Apple ID, no hardware serial or advertising identifier. The install ID is generated randomly by the app and is not derived from anything about you or your Mac; it is never joined with any other BoxDo data. The install ID is a pseudonymous identifier: it doesn't identify you, but it is stable for this installation, so we treat the report as personal data under the GDPR and describe it accordingly here.

Turning it off

Settings → General → “Share anonymous usage data”. Turning it off stops all reports immediately and permanently — there is no separate “essential telemetry” that keeps running. Development builds never report at all. Your first report is not sent on first launch, so you have time to opt out before anything leaves your Mac.

Other network connections the app makes

These are functional, contain no usage data, and cannot be used to profile you:

• App updates — once a day the app asks the GitHub Releases API whether a newer version exists, and downloads it if you accept. GitHub sees this request.
• Agent catalog — once a day the app downloads a signed JSON file from boxdo.com/terminal/catalog-v1.json containing agent definitions. Nothing about you is sent.
• Version checks — when you open Settings → Agents, the app queries the npm registry for agent package versions, from your Mac.

What the AI agents themselves do

BoxDo Terminal is a host: it launches agent CLIs you have installed and shows their output as a chat. Those agents send your prompts and parts of your code to their own providers under their own terms and privacy policies, using your own accounts and API keys. BoxDo never sees, proxies or stores any of that traffic. Please read the privacy policy of each agent you use.

Storage, retention and hosting

Reports are stored in our database, hosted on Supabase, and reach it through our website hosted on Vercel. Like any web request, the connection itself is visible to those providers' infrastructure and may appear in short-lived technical logs, including the originating IP address; we do not store the IP address with the report and we do not use it. Reports are deleted automatically after 12 months.

Your rights

Because reports carry no identifier we can link to a person, we cannot look up “your” data on request. If you want your reports gone, email us the install ID (Settings → General shows it under the toggle) and we will delete every row matching it. Under the GDPR you also have the right to object to this processing: the Settings toggle is that right, implemented as a switch. Our legal basis is legitimate interest (Art. 6(1)(f)).

Children

BoxDo Terminal is a developer tool and is not directed at children under 16.

Changes

If we ever change what the report contains, we will update this page and the in-app description before shipping the change.

Contact

Questions, deletion requests, anything else: privacy@boxdo.com