Privacy Policy

This Privacy Policy describes how Caret (“we”, “us”) handles information when you use the Caret macOS app and the website at caret.dev. The short version: Caret is a local-first app, we collect as little as possible, and your API keys and source code stay on your machine.

Information we collect

We collect only what we need to run the service:

• Account & contact data. If you email us, sign up for the beta, or contact support, we receive your email address and the contents of your message.
• Anonymous diagnostics. The app can send anonymous crash reports and performance metrics. This is off by defaultand can be enabled or disabled at any time from Settings → Privacy.
• Website analytics. caret.dev uses privacy-respecting, cookie-less analytics to count page views. We do not build advertising profiles.

What stays on your device

The following never leaves your machine through Caret:

• Source code, repositories, and files in your workspaces.
• Agent transcripts, sessions, and command history.
• API keys and credentials you provide for Claude, Codex, Cursor, Amp, opencode, or any other provider.

When you use a third-party coding agent through Caret, your prompts and relevant context are sent directly from your device to that provider’s servers under the terms of their own privacy policy. Caret is not in the middle of those requests.

Third-party services

Caret integrates with services such as Anthropic, OpenAI, Anysphere (Cursor), Sourcegraph (Amp), and others. Your interactions with those services are governed by their respective privacy policies. We recommend reviewing them before connecting an account.

How we use information

We use the limited information we collect to:

• Provide, maintain, and improve the app and website.
• Respond to support requests and feedback.
• Send important product updates (you can opt out at any time).
• Detect, investigate, and prevent abuse, fraud, or security incidents.

Data retention

We keep contact and support data for as long as is reasonably needed to provide the service and to comply with our legal obligations. Anonymous diagnostics are retained for up to 90 days. You can request deletion of your contact data at any time by emailing privacy@caret.dev.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete personal data we hold about you, and to object to certain processing. To exercise these rights, contact us at privacy@caret.dev. We will respond within a reasonable time frame.

Children

Caret is not directed to children under 13, and we do not knowingly collect personal information from children.

Changes

If we materially change this policy, we will update the “Last updated” date above and, where appropriate, notify you in-app or by email.

Contact

Questions about this policy? Email privacy@caret.dev.