Privacy
AgentActivity has no accounts, advertising, analytics, or telemetry upload. Activity processing happens on your Mac.
Cursor and Claude hooks keep privacy-minimized event metadata. They exclude prompts, responses, commands, source code, credentials, tool inputs, and tool results. Historical imports read local provider records only for the activity fields needed by the heatmap.
GitHub activity is requested through your authenticated GitHub CLI session. AgentActivity never reads or stores the GitHub token.
Local Git inspection is limited to repository paths supplied by a provider or folders you explicitly select. AgentActivity does not crawl broad Desktop, Documents, or home-directory locations.
Hook records live under ~/Library/Application Support/AgentActivity with owner-only permissions and bounded rotation. Repository-folder choices are stored in macOS preferences.