Privacy Policy
Last updated: November 1, 2026
Mas+ is a macOS app developed by Francisco Goulu ("we"). This policy explains what data the app uses, where it is stored and how to delete it. Versión en español: Política de privacidad.
What never leaves your Mac
- Clipboard contents.
- Screenshots and screen recordings.
- Camera images (Mirror tab) and microphone audio.
- Your meetings and calendar events, including those the app reads from Google Calendar.
All of this is processed only on your Mac. We do not send it to our servers or to third parties.
What we store on our servers
- Your account: the email, name and identifier of your Google account, so you can sign in.
- Your post-its: the text of each to-do and a log of what happened to it (created, snoozed, completed and when), to sync them across your Macs and show them to you.
- Your Macs: an identifier per Mac, the app and macOS versions, and when it last connected, so you can see and sign out of sessions.
- Agent keys: if you create keys so other tools (for example, an AI assistant) can send you post-its, we store their name, permissions and last use. The key itself is stored as a hash and cannot be recovered.
Google user data
Mas+ uses Google Sign-In to identify you and, if you connect it, read-only Google Calendar access to show your next meeting in the notch.
- Calendar data is read directly from your Mac and shown only there. It is not stored on our servers or shared with anyone.
- We do not use Google data for advertising or to train artificial intelligence models, and we do not sell it.
- You can remove access at any time at myaccount.google.com/permissions.
Mas+'s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Usage analytics
The app sends usage events, anonymous or linked to your account (for example, "notch opened" or "post-it completed"), to understand which features are used. They never include content: no text, clipboard data, meeting titles, or file, app or people names.
Service providers
- Supabase (United States): database and authentication.
- Google: sign-in and Google Calendar.
- PostHog (United States): usage analytics.
- GitHub and Cloudflare: update downloads and this website.
We do not sell or share your data with anyone else.
Retention and deletion
We keep your data while you have an account. You can delete your account from the app: this permanently removes your account, post-its, their log, your Macs and your keys. You can also request it at hola@masplus.dev.
Security
Communications are encrypted (HTTPS). Each account can only access its own data. Sessions are stored in the macOS Keychain.
Children
Mas+ is not directed at children under 13.
Changes
If we change this policy, we update the date above and, for significant changes, notify you in the app.