Your thoughts.
Your business.

Toby is a macOS app made by Rohan Pahwa. This policy describes how Toby and thetoby.app handle information, including information from connected Google accounts. Contact rohanphww@gmail.com with privacy questions.

What stays on your Mac

Toby stores your notes, conversations, meeting recordings, transcripts, and imported files locally on your Mac. Google account tokens are stored in macOS Keychain. Your Codex and Grok sign-in is managed by their installed command-line tools. Toby does not require a separate Toby account.

Local storage does not mean all processing is offline. When you use an AI feature or a connected service, the information needed for that action is sent to that service as described below.

Voice and meeting capture

Microphone access lets you talk to Toby and record your side of a meeting. Optional system-audio access captures meeting audio from other apps. Toby saves audio, not screen images. Speech recognition uses the on-device recognition capability supported by your Mac.

You control recording and can enable automatic recording separately. Make sure everyone involved has been informed and that you have any required permission to record. When you ask Toby to summarize a meeting, its transcript is supplied to your selected AI provider.

When you use Codex or Grok

Toby uses the provider you select through its authenticated CLI. Requests can include your prompt, the current conversation or note, attached files, and notes you chose to remember. The provider may process that information on its servers under its own terms, privacy policy, and your account settings.

Review OpenAI’s privacy policy or xAI’s privacy policy before sharing sensitive information. Removing information from Toby does not remove information already sent to a provider.

Google accounts and calendars

Connecting Google is optional. You sign in through Google in your browser, and can connect more than one account. Toby uses your account identity and email to distinguish your accounts.

Read-only calendar access lets Toby list your calendars and read their events, including titles, times, meeting links, descriptions, organizers, and attendees. This supports your agenda, meeting reminders, event details, and joining meetings with the relevant account. Toby does not request permission to edit your calendars.

Google Drive

Toby requests access to individual Drive files you select for use with Toby, and files Toby creates for you. It does not request access to every file in your Drive or index your Drive in the background.

When you choose a file to import, Toby downloads or exports a local copy. When you choose to save a note or meeting to Drive, Toby uploads that content as a new Google document. If you attach an imported file to an AI request, its contents may be processed by the AI provider you select.

The requested Google permissions are account identity and email, read-only calendar lists and events, and access to selected or app-created Drive files (drive.file).

How Google data is used

Google data is used to provide the features you choose. It is not sold, used for advertising, or used by us to train general-purpose AI models. Content you choose to use with an AI provider is processed under that provider’s terms and your settings.

Toby’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Disconnecting, archiving, and deleting

You can remove a connected Google account in Toby’s settings. This removes its saved credentials and synced calendar information from Toby. You can also revoke Toby’s access in your Google account connections. Previously imported files and documents you created in Drive remain until you delete them.

Archiving a conversation excludes it from context and memory supplied to future conversations by Toby. Deleting a conversation removes its local record and associated files. Neither action retracts information already sent to an AI provider, deletes Google documents, or removes copies in your own backups.

Other local content remains until you remove it. Contact us if you need help locating or deleting Toby’s local data. We cannot access that content remotely.

This website and contacting us

This website does not implement analytics, advertising trackers, or tracking cookies. Its hosting provider may process normal request information, such as your IP address and browser details, to deliver and secure the site.

If you email us, we receive your email address and whatever you include. We use that information to respond and handle your request. Do not send passwords, access tokens, or private recordings in a support email.

Changes and questions

We will update this page and its effective date when the way Toby handles information changes. For questions, access or deletion requests concerning information you have sent us, email rohanphww@gmail.com.

Your thoughts.Your business.