Privacy Policy

Last updated November 13, 2026

This policy explains how Undefined Software, Inc. ("we", "us") handles information in the Current desktop app, the Current iPhone app, Current Teams and joincurrent.io. Where it says Mac, it means whichever computer runs Current: macOS, Windows or Linux. The short version: a workspace on your Mac stays on your Mac and needs no account with us. A Current Teams workspace is hosted by us, so you sign in and we store it. We do not sell personal data, and we do not train AI models on your content.

What stays on your Mac

Current stores your workspace in its folder on your Mac (~/.currentby default): issues, comments, bodies, attachments, agent conversations and logs, people and devices you add, and secrets you save. Nightly backups go to the same folder. Unsent drafts stay in the app's local storage. We do not receive any of this, and we cannot read or recover it.

Some features read files already on your Mac and keep the results there. The Usage page reads token counts from your Claude Code and Codex logs. The optional session import reads the sessions your agents saved on your Mac and files each one as an issue with its title, folder, branch, your messages and the agent's final replies, leaving out tool calls and tool output. To sort them, Current sends each session's title, folder, branch, first request and last reply to your own agent provider, as described below.

What goes to your agent providers

Current starts the coding agents you install, such as Claude Code, Codex and Cursor, using your own accounts with those providers. The prompts, issue content and code an agent works with go from your Mac straight to that provider, not through us. Current also asks your default agent, on its smallest model, to write issue titles and labels, which sends that issue's text to the same provider. Each provider handles this data under its own privacy policy and settings, including whether it trains on it. Check those settings before you connect an agent.

Usage data

Current sends usage data to our PostHog project so we can find bugs and see which features are used. It starts only after setup finishes and is on by default. A workspace owner can turn it off in Settings → Preferences → Privacy → Share usage data, and the choice applies to the whole workspace. Setting CURRENT_TELEMETRY=0 or DO_NOT_TRACK=1also turns it off, but only when you start Current from a terminal with that variable set. Current.app opened from Finder or the Dock does not read your shell's variables, so use the setting there. Builds from source send it only from their default data folder. When it is on, Current sends:

  • Actions: operation names and outcomes, changed field names, lengths and counts, attachment kinds and sizes, agent and model names, run outcomes and durations, token counts and reported cost, feature choices and shortcuts. Search text is excluded.
  • Workspace totals, such as counts of issues, comments, runs and people by role.
  • A random installation ID, person and issue IDs hashed with it, and temporary session IDs.
  • Environment: Current version, operating system, processor, screen and window size, language, time zone and theme.
  • Errors from the Mac app, its server, the page, the iPhone app and the currentcommand: the error type, a hash of the message, and the file, line and function in Current's own code where it happened. Original messages and your file paths are excluded.
  • Performance: CPU, memory and database size, request timings by route, page load timings and responsiveness.
  • Mac app reports, sent when the window first loads in a launch and when Current.app fails to start, a server stops, or the page crashes, fails to load or keeps reloading: the kind of report, app and macOS versions, Mac model, processor type, memory size, whether it runs under Rosetta, and the kind of folder Current.app is in (such as Applications or Downloads). Current also asks Spotlight for other copies of Current.app on the Mac and sends how many it found, their versions and the kind of folder each is in, never their paths.
  • Machines that run your issues' agents for Current: when they connect and claim a run, how long preparing it took, why a run could not start (such as a missing folder or an agent that is not signed in), the agent's exit code, and the kind of its last output line (such as a usage limit or a missing command) with a hash of that line. The line itself, prompts and folder paths are excluded.

Usage data never includes issue titles, bodies, prompts, comments, search text, attachment contents, personal or workspace names, file names, folders, commands agents run, phone tunnel addresses or access tokens. Current does not record sessions or take screenshots. PostHog stores the IP address each event arrives from, which is your Mac's, and looks up an approximate location from it: country, region and city. We use it to see which countries Current is used in. Turning usage data off stops new sending; it does not delete what was already sent. Current shows the complete list in the app under Settings → Preferences → Privacy → What Current sends.

iPhone app and phone access

The iPhone app is part of every plan. It reaches your Mac through our relay. Traffic is encrypted between the phone and your Mac, so the relay can read neither your issues nor the pairing code; it sees which Mac a phone connects to and when, and stores nothing. A phone signs in by scanning a pairing code. The app uses the camera to scan pairing codes and to take photos you attach, which go to your Mac. Face ID stays on the phone.

A Mac that turned on phone access before the relay keeps its Cloudflare tunnel until you turn it off. There, your phone connects to a Cloudflare address over HTTPS, and Cloudflare's servers decrypt that traffic and pass it through the tunnel to your Mac, so Cloudflare can read it in transit under its own privacy policy. It goes to your Mac, not to us.

If you allow notifications, your Mac sends new Inbox alerts through Expo's push service and Apple. Each alert contains the issue ID, its title, a short preview of the message and your Mac's server address. Signing out, revoking the device in Settings or turning off notifications in iOS stops them.

Current Teams and paid plans

Current Teams workspaces and the Team plan need an account. You sign in with Google or GitHub, and we receive your name, email address, profile picture and whether the provider verified the email. Workspaces you are invited to or that admit your email domain use that email.

A Teams workspace is stored by us: its issues, comments, bodies, attachments, apps, members and their emails, paired devices, agent conversations and logs, and the secrets its owners save, which are encrypted with a key only our servers hold. Members of the workspace can read its content. When a workspace is created, we fetch the icon of its creator's email domain from that domain's website, unless it is a public mail service. Agents for a Teams workspace run on Macs its members connect, which send their work back to the workspace. The iPhone app pairs with a Teams workspace the same way it pairs with a Mac, and its notifications carry the same fields as above.

Stripe processes payments: it receives your card and billing details, and we keep your plan and subscription status, never your card number.

We send email about a Teams workspace through Resend: invitations, a welcome when you join, notice when a member is removed or the workspace is scheduled for deletion, billing notices to owners, and a weekly summary of your activity, which you can unsubscribe from with the link in each one. Each email carries your address, name and the details it is about.

Integrations

When you connect GitHub, GitLab, Linear or Notion, Current reads and writes data in that service with the access you grant, such as repositories, pull requests, issues and pages. Connecting goes through our server, which completes the sign-in and hands the result to your Mac or Teams workspace. For Notion, our server also forwards Notion's change notices to your Mac: the IDs of the pages that changed, not their contents. Each service handles your data under its own privacy policy.

Website, downloads and updates

This website and the Current Teams server run on Render at joincurrent.io. The website has no ads, sets no cookies and stores nothing in your browser; signing in to Current Teams here sets cookies that keep you signed in. It sends page views, time on page, scroll depth and Download button clicks to our PostHog project: the page, referring site, who shared the invite link you followed (/invite/<name> or ?ref=), browser, operating system, language, time zone, screen size, IP address and the approximate location PostHog looks up from it. PostHog counts a visitor once per day from a hash of your IP address and browser with a salt that changes daily. On a phone, you can ask this site to email you the download link: we send your address to Resend for that one email and add it to no mailing list. To limit sends, our server keeps a hash of the address and of your IP address in memory for up to a day. PostHog records that you sent the link, how (email, share or copy) and, for email, the address you entered, and the link carries ?from= so we can count the visits and downloads it brings. Render processes standard request data, such as IP address, browser and the page requested, to serve the site and protect it. Downloads and updates are stored in Vercel Blob and served through this site: Current regularly asks our update service for the latest version for your processor, and that request carries your IP address. The Usage page downloads public model prices from Vercel AI Gateway once a day, without any workspace data.

Feedback and email

When you send feedback from Current, we receive what you wrote, the rating, the email address you enter, if any, the kind of page you sent it from, your Current version, the identifiers listed under usage data, and your Mac's IP address and approximate location, through PostHog. Files you attach are stored in our private Vercel Blob storage, and the feedback carries links to them. To limit uploads, we keep your Mac's IP address and each file's size for a day. Feedback sends even when usage data is off, because you chose to send it. If you email us, we receive your message and address. We keep both to reply and improve Current.

Help → Copy Diagnostic Report in the Mac app copies a report to your clipboard and sends nothing. If you paste it into a message to us, we receive what it holds: Current's version, your Mac's model, processor, memory and macOS version, the path of your Current folder, your workspace's name and folder, the address of the open Current page, and the last lines of Current's logs, which can include issue IDs, folder paths and your phone tunnel address. Read it before you send it.

How we use information

We use the information above to run, fix, secure and improve Current and to answer you. We do not sell or share personal data for advertising, we do not build advertising profiles, and we do not use your content to train AI models.

Service providers

  • PostHog (United States): usage data, when it is on, feedback you send, and website page views.
  • Render (United States): this website and the Current Teams server.
  • PlanetScale (United States): the Current Teams database.
  • Vercel: downloads, updates, files stored in Teams workspaces and attached to feedback, and the model price list.
  • Cloudflare: the phone tunnel on Macs that turned on phone access before the relay. It decrypts and forwards traffic between your phone and your Mac.
  • Expo and Apple: iPhone notifications, when you allow them.
  • Google and GitHub: signing in to Current Teams.
  • Stripe: payments for the Team plan.
  • Resend: email about Teams workspaces and billing.

Your agent providers are services you choose and sign in to yourself. They are not our service providers. We may disclose information if the law requires it, to protect rights and safety, or as part of a merger or sale of our company.

Retention and deletion

Data on your Mac stays until you delete it. To remove everything, quit Current and delete Current.app and its Current folder. We keep usage data and emails only as long as we need them for the purposes above. Usage data is tied to a random installation ID and the IP address it came from, not to your name or email. To delete it, email alon@joincurrent.io your installation ID: the install value in desktop/telemetry.json in your Current folder (~/.current/desktop/telemetry.json by default). We delete the events and feedback that carry it, with their attached files.

An owner deletes a Teams workspace in Settings → Workspace; it and its files are deleted 48 hours later unless an owner cancels. To delete your Current Teams account, email alon@joincurrent.io. Stripe keeps payment records as the law requires.

Your rights

Depending on where you live, including the EU, the UK and California, you may have the right to access, correct, delete or export your personal data, to object to or limit how we use it, and to complain to a data protection authority. Email alon@joincurrent.io to use these rights. We answer within 30 days and will not treat you differently for asking.

Under the GDPR, we process usage data and website page views based on our legitimate interest in keeping Current working and learning how it is used; you can turn usage data off at any time. We process feedback and emails you send based on your consent, since you choose to send them, and you can withdraw it by asking us to delete them.

Usage data, feedback and website page views are stored in the United States, in PostHog's US region (us.i.posthog.com); files attached to feedback are stored in Vercel Blob. The Current Teams database is in the United States. For personal data from the EU, the UK and Switzerland, we rely on PostHog's certification under the EU-U.S. Data Privacy Framework and its UK and Swiss extensions.

Security

A workspace on your Mac is protected by your Mac account. Saved secrets are files only your user can read, and agents run as your user. Phones pair only over HTTPS, and agent tokens are scoped and expire when a run ends. A Teams workspace's data is encrypted in transit and kept apart from other workspaces by database row security. No system is perfectly secure. Report vulnerabilities to alon@joincurrent.io.

Children

Current is not for anyone under 18, and we do not knowingly collect information from children.

Changes

We will update this policy when Current's data handling changes and change the date above. For material changes we will also give notice on this website or in Current.

Contact

Undefined Software, Inc., New York, NY. Email alon@joincurrent.io.