Your thoughts.
Your business.

Toby is a macOS app made by Rohan Pahwa. This policy describes how Toby and thetoby.app handle information. Contact rohanphww@gmail.com with privacy questions.

What stays on your Mac

Toby stores agent profiles, direct and group conversations, task history, memories, reusable skills, routines, connector settings, and workspace files locally on your Mac. Toby does not require a separate Toby account or use a Toby-hosted backend to sync this workspace. Your ChatGPT and Grok sign-ins are managed by their provider tools.

Local storage does not mean all processing is offline. When you use an AI feature or a connected service, the information needed for that action is sent to that service as described below.

When you use ChatGPT or Grok

Each agent uses the provider and model you select through your ChatGPT/Codex or Grok subscription. Requests can include your prompt, conversation context, agent instructions, saved memories and skills, attached files, and information returned by tools. The provider may process that information on its servers under its own terms, privacy policy, and your account settings.

Public group messages reach every active member and can be included in each member’s selected provider context. Agents can also share private task assignments, results and files with teammates. That information may be sent to the receiving agent’s provider even when it is kept out of the visible group chat.

Review OpenAI’s privacy policy or xAI’s privacy policy before sharing sensitive information. Removing information from Toby does not remove information already sent to a provider.

Files, browser, and Mac permissions

Agents can read and write files in their workspaces. Attaching a file copies it into an agent workspace. You choose whether Toby asks before actions or has full access, with per-agent overrides and remembered action categories. These choices control approvals for terminal commands, browser interactions and Mac actions. You can change them in Settings; macOS permissions still apply.

With the relevant macOS permissions and your chosen access settings, Mac tools can read the active app, capture the screen, or control the pointer and keyboard. Page text, app information, and captured screen images may be supplied to the selected AI provider to carry out your request. The built-in browser stores browsing sessions locally; websites you visit handle information under their own policies.

Connected services and routines

You can configure local connectors to give agents access to other tools and services. What a connector accesses or sends depends on its configuration and the service involved. Review those services’ permissions and privacy policies before enabling them. This release does not include built-in Google account, calendar, or Drive integrations.

Scheduled routines run while Toby is open and your Mac is awake. They can make AI requests using the saved instructions and the agent’s available context. You can pause or remove routines in Toby.

Voice

Voice input and meeting recording are unavailable in this release. Assistant replies appear as text.

Removing local data

You can edit or remove saved memories, skills, routines, and connectors. Hiding an agent keeps its history and workspace; it does not delete them.

Reset Toby in Settings clears Toby-managed local data and browser sessions after confirmation, then returns to onboarding. Shared ChatGPT and Grok sign-ins, macOS permissions, and folders outside Toby storage are kept. Resetting does not remove information already sent to providers or connected services, or copies in your own backups.

Other local content remains until you remove it. Contact us if you need help locating or deleting Toby’s local data. We cannot access that content remotely.

Downloads and updates

Toby downloads the provider components it needs from GitHub and xAI during setup. Download services receive normal request information such as your IP address. App releases are downloaded from GitHub; this release does not include an in-app automatic updater.

This website and contacting us

This website does not implement analytics, advertising trackers, or tracking cookies. Its hosting provider may process normal request information, such as your IP address and browser details, to deliver and secure the site.

If you email us, we receive your email address and whatever you include. We use that information to respond and handle your request. Do not send passwords, access tokens, or private files in a support email.

Changes and questions

We will update this page and its effective date when the way Toby handles information changes. For questions, access or deletion requests concerning information you have sent us, email rohanphww@gmail.com.

Your thoughts.Your business.