The hard never list
Keystrokes
Not a character, not a word, not a shortcut. Ever.
Message and document content
What you type, read, or write in any app is yours. We can't see it and we don't want to.
Screenshots or screen recording
No screen capture of any kind today. Any future feature that needs screen context will be explicit, opt-in, and yours to refuse.
Camera or audio
Not accessed. Not requested. Not on the roadmap.
Location
We don't track or store where you are.
Employer reporting
Individual data is private to you. No employer access, no manager dashboard, no team analytics.
What the app actually reads
DustOff works from how you're working, never what you're working on. Two signals are on by default: which app is in focus and how often you switch (that's how it calculates drift and your bandwidth), and session timing, so it knows how long you've been at it and when you step away. One signal is off by default: window titles, which can improve detection but may contain sensitive text, which is exactly why you have to turn it on yourself.
Everything is processed on your device and stays there: capacity signals, session history, calibration answers, all of it. Nothing is transmitted to our servers. That's not a marketing line, it's the current architecture. On macOS the app asks for one permission, Accessibility, which is how it knows you switched from your writing app to Slack. It cannot read the content of either.
If team-level insights are ever added, they will be aggregate-only and opt-in, and we'll say so here before it happens, not after.