What Aria reads

Aria shows what your agents are doing by reading the logs they already write. It opens them read-only and never changes them.

• Claude Code session logs

  • ~/.claude/projects/<project>/<session>.jsonl

  To list your Claude Code sessions and show whether each one is working, waiting or done, with its title and project.

  Access

  Reads

  When

  Always Always while Aria runs, if the folder exists.

  Leaves your Mac

  Nothing leaves the Mac.

  From Sources/AriaAgents/ClaudeCodeSource.swift, Sources/AriaAgents/AgentCenter.swift, Sources/AriaAgents/AgentHome.swift

• Codex CLI session logs

  • ~/.codex/sessions/YYYY/MM/DD/rollout-*.jsonl

  To list your Codex sessions and show their state.

  Access

  Reads

  When

  Always Always while Aria runs, if the folder exists.

  Leaves your Mac

  Nothing leaves the Mac.

  From Sources/AriaAgents/CodexSource.swift, Sources/AriaAgents/AgentCenter.swift

• Gemini CLI chat recordings

  • ~/.gemini/tmp/<project>/chats/session-*.jsonl
  • ~/.gemini/tmp/<project>/chats/session-*.json

  To show Gemini CLI sessions (observe only; Aria cannot answer Gemini's requests).

  Access

  Reads

  When

  Always Always while Aria runs, if the folder exists.

  Leaves your Mac

  Nothing leaves the Mac.

  From Sources/AriaAgents/OtherAgentSources.swift

• Cursor agent transcripts

  • ~/.cursor/projects/<workspace>/agent-transcripts/<chat>/<chat>.jsonl

  To show Cursor agent sessions (observe only).

  Access

  Reads

  When

  Always Always while Aria runs, if the folder exists.

  Leaves your Mac

  Nothing leaves the Mac.

  From Sources/AriaAgents/OtherAgentSources.swift

• GitHub Copilot CLI session events

  • ~/.copilot/session-state/<session>/events.jsonl

  To show Copilot CLI sessions (observe only).

  Access

  Reads

  When

  Always Always while Aria runs, if the folder exists.

  Leaves your Mac

  Nothing leaves the Mac.

  From Sources/AriaAgents/OtherAgentSources.swift

• Whether each agent has been used on this Mac

  • ~/.claude
  • ~/.codex
  • ~/.gemini
  • ~/.cursor
  • ~/.copilot
  • /Applications/Cursor.app

  Setup suggests only the agents you actually have. It checks that the folder or app exists and does not look inside.

  Access

  Reads

  When

  Always During setup.

  Leaves your Mac

  Nothing leaves the Mac.

  From Sources/AriaOnboarding/Detection.swift

• The list of running processes

  • /bin/ps -axo pid=,tty=,%cpu=,command=
  • /usr/sbin/lsof -a -p <pid> -d cwd -Fn

  To spot other command-line agents (aider, opencode, amp, cline, goose, roo, or names you add) and the folder each runs in.

  Access

  Reads

  When

  Always Every few seconds while Aria runs. The folder of a process is read only for processes whose name is on that list.

  Leaves your Mac

  Nothing leaves the Mac.

  From Sources/AriaAgents/GenericAgentSource.swift

• Hook events from Claude Code and Codex

  • ~/Library/Application Support/AriaNotch/agents/hook.sock (a local socket)

  After you connect an agent, its hooks send each event (prompt submitted, tool about to run with its input, permission request, stop) to Aria, so you can allow or deny from the notch.

  Access

  Reads and writes

  When

  After you connect it Only after you click Connect Claude Code or Connect Codex.

  Leaves your Mac

  Nothing leaves the Mac.

  From Sources/AriaAgents/HookScript.swift, Sources/AriaAgents/HookSource.swift, Sources/AriaApp/AppModel.swift

• Agent history for automatic session capture

  • ~/.claude/projects
  • ~/.codex/sessions
  • ~/.codex/archived_sessions
  • ~/.gemini/tmp

  Session capture turns agent logs into a private, searchable record of your sessions. It keeps its own read position so nothing is read twice.

  Access

  Reads

  When

  If you turn it on Only if you turn on session capture. It is off until you opt in, and every launch waits for you to confirm before recording resumes. Importing older history is a separate choice.

  Leaves your Mac

  Nothing leaves the Mac unless you sign in to a hosted account and approve sending specific reviewed entries to it (see Hosted account).

  From Packages/AriaCapture/Sources/AriaCapture/CaptureSourceReader.swift, Packages/AriaCapture/Sources/AriaCapture/CapturePolicy.swift, Sources/AriaApp/CaptureHost.swift

• Front app, approved documents and approved screens for session capture

  • NSWorkspace front application
  • Documents you approve one by one
  • Screens you approve (ScreenCaptureKit)
  • Journal folders you approve

  Optional extra context for captured sessions: which app was in front, and observations from documents or screens you approved.

  Access

  Reads

  When

  If you turn it on Each is off by default and needs its own switch or approval inside session capture. Screens also need Screen Recording permission, and documents need Accessibility.

  Leaves your Mac

  Nothing leaves the Mac.

  From Packages/AriaCapture/Sources/AriaCapture/CapturePolicy.swift, Packages/AriaCapture/Sources/AriaCapture/WorkspaceDocumentSource.swift, Sources/AriaApp/CaptureHost.swift

Aria changes an agent's settings only when you click Connect, and takes its entries back out when you click Disconnect or Remove. Before it adds anything, it saves a backup next to the file.

• Claude Code hook settings

  • ~/.claude/settings.json
  • ~/.claude/settings.json.aria-backup-YYYYMMDD-HHMMSS

  Connect adds one hook entry per event (SessionStart, SessionEnd, UserPromptSubmit, PreToolUse, PostToolUse, PostToolUseFailure, PermissionRequest, Notification, Stop, StopFailure, SubagentStop) under "hooks". Each runs Aria's script aria-notch-hook.sh. Your own settings and hooks are kept.

  Access

  Reads and writes

  When

  Always Read at launch to show whether Aria's hooks are present. Changed only when you confirm Connect Claude Code, Remove Aria's hooks, Repair hooks or Restore the backup, after Aria shows the exact change; each change saves a backup next to the file first.

  Leaves your Mac

  Nothing leaves the Mac.

  From Sources/AriaAgents/HookInstaller.swift, Sources/AriaAgents/AgentCenter.swift, Sources/AriaApp/AgentsTab.swift

• Codex CLI hook settings

  • ~/.codex/hooks.json
  • ~/.codex/hooks.json.aria-backup-YYYYMMDD-HHMMSS

  Connect adds one hook entry per event (SessionStart, SessionEnd, UserPromptSubmit, PreToolUse, PostToolUse, PermissionRequest, Stop) that runs aria-notch-hook.sh with the word codex. Codex may ask you to review the new hooks once.

  Access

  Reads and writes

  When

  Always Read at launch to show whether Aria's hooks are present. Changed only when you confirm Connect Codex, Remove Aria's hooks, Repair hooks or Restore the backup, after Aria shows the exact change; each change saves a backup next to the file first.

  Leaves your Mac

  Nothing leaves the Mac.

  From Sources/AriaAgents/HookInstaller.swift, Sources/AriaAgents/AgentCenter+Steering.swift, Sources/AriaApp/AgentsTab.swift

• MCP server entry for Team agent tools

  • ~/.claude.json (mcpServers > aria-team)
  • ~/.codex/config.toml ([mcp_servers.aria-team])
  • <file>.aria-backup-YYYYMMDDHHMMSS

  Lets Claude Code or Codex use Aria's team tools. Only the aria-team entry is added or removed; the rest of the file is kept.

  Access

  Reads and writes

  When

  If you turn it on Read when the Team connections page is shown, to show whether it is connected. Changed only when you click Connect or Remove for that agent; Connect saves a backup first.

  Leaves your Mac

  Nothing leaves the Mac.

  From Sources/AriaTeam/Connect.swift, Sources/AriaApp/TeamSupport.swift, Sources/AriaApp/TeamTab.swift

When an agent works in a git repository, Aria looks at that repository so it can show what changed.

• Git status and diffs of the repository an agent works in

  • git rev-parse, status, diff, ls-files, log, show (read-only)

  To show which files an agent changed and the size of the change.

  Access

  Reads

  When

  Always For agent sessions whose working folder is a git repository.

  Leaves your Mac

  Nothing leaves the Mac.

  From Sources/AriaAgents/DiffPeek.swift, Sources/AriaAgents/AgentCenter.swift

• Replay and checkpoint snapshots

  • refs/aria/replay/..., refs/aria/checkpoints/... and refs/aria/backup/... inside the repository

  Replay lets you step back through what an agent changed; checkpoints let you undo a workspace. Snapshots are built with a throwaway index, so your index, branches, stash and files are not touched. The only repository writes are git objects and these private refs. Before a workspace merge or cleanup, Aria saves the old branch tips under refs/aria/backup so the change can be undone.

  Access

  Writes

  When

  After you connect it Replay snapshots are taken from hook events, so only after you connect Claude Code or Codex. Checkpoints only when you use workspaces.

  Leaves your Mac

  Nothing leaves the Mac.

  From Sources/AriaAgents/SnapshotEngine.swift, Sources/AriaAgents/Replay.swift, Sources/AriaAgents/WorkspaceCheckpoints.swift, Sources/AriaAgents/WorkspaceMerge.swift

• Worktrees and branches for agent races and workspaces

  • ~/Library/Application Support/AriaNotch/agents/worktrees/<repo>-<branch>
  • branches named aria/<task>-<agent>-<id>

  Running the same task with another agent, or in its own workspace, needs a separate git worktree so the original is not touched. Nothing is merged without your approval: a workspace merge shows the exact commits and files first, and Undo merge moves the branch back with git reset --keep, which git refuses if it would lose an edit. Cleanup removes a folder only when it holds no unsaved work. For races, Aria copies the merge command for you to run.

  Access

  Writes

  When

  If you turn it on Only when you start a race, a retry with another agent, or a workspace.

  Leaves your Mac

  Nothing leaves the Mac.

  From Sources/AriaAgents/Worktrees.swift, Sources/AriaAgents/AgentCenter.swift, Sources/AriaAgents/WorkspaceMerge.swift

• A repository's .aria folder

  • <repo>/.aria/setup.json
  • <repo>/.aria/policy.json
  • <repo>/.aria/playbooks/

  Optional files a team can commit: workspace setup steps, an approval policy, and agent recipes. Playbooks need your approval before use; a policy can only make approvals stricter until you approve it.

  Access

  Reads

  When

  Always Read when an agent works in a repository that has them.

  Leaves your Mac

  Nothing leaves the Mac.

  From Sources/AriaAgents/RepoSetup.swift, Sources/AriaLedger/PolicyStore.swift, Sources/AriaPlaybooks/PlaybookStore.swift

What Aria saves about itself. All of it stays on your Mac.

• Aria's data folder

  • ~/Library/Application Support/AriaNotch/

  Everything Aria keeps lives here: the hook script and socket (agents/), replay timelines, clipboard history, shelf files, caught windows, setup progress, the governance ledger, the search index, and the folders of each pack you turn on.

  Access

  Reads and writes

  When

  Always Always. Folders for packs and features appear only once you use them.

  Leaves your Mac

  Nothing leaves the Mac.

  From Sources/AriaApp/AppModel.swift, Sources/AriaApp/main.swift, Sources/AriaAgents/AgentCenter.swift

• Aria's preferences

  • ~/Library/Preferences/app.aria.notch.plist (UserDefaults)

  Small settings: which packs are on, the last tab, orb theme, bedtime and stage options, Team choices.

  Access

  Reads and writes

  When

  Always Always.

  Leaves your Mac

  Nothing leaves the Mac.

  From Sources/AriaApp/AppModel.swift, Sources/AriaApp/AppPack.swift, scripts/bundle.sh

• Briefing history

  • ~/Library/Application Support/AriaNotch/briefing/events.jsonl

  To tell you what your agents did while you were away. It records agent names, project names, session titles (which can include the start of your prompt), approval tool names and times. Entries are kept for 7 days. Clear them any time in Settings > Clear briefing history.

  Access

  Writes

  When

  Always Always on a normal launch. Demo and test-folder runs keep no history.

  Leaves your Mac

  Nothing leaves the Mac.

  From Sources/AriaApp/BriefingSources.swift, Sources/AriaInsight/BriefingJournal.swift

• Temporary local sockets

  • /tmp/aria-<hash>.sock
  • /tmp/aria-mcp-<uid>-<hash>.sock
  • /tmp/aria-browser-<uid>-<hash>/socket

  Local connections between Aria and its helpers: the hook socket when the data folder path is too long, the Team agent tools, and the browser receiver.

  Access

  Reads and writes

  When

  If you turn it on Only when that connection is in use. macOS clears /tmp on restart.

  Leaves your Mac

  Nothing leaves the Mac.

  From Sources/AriaApp/AppModel.swift, Sources/AriaTeam/TeamRuntime.swift, Sources/AriaApp/BrowserNativeBridge.swift

Ordinary Mac information Aria reads to fill its tabs. None of it needs a permission prompt.

• The clipboard

  • NSPasteboard (general)
  • ~/Library/Application Support/AriaNotch/clipboard/

  Clipboard history in the Clipboard tab: up to 200 recent items, saved on disk. Items marked concealed or transient and copies from known password managers are skipped; text that looks like a secret is masked and kept in memory only.

  Access

  Reads and writes

  When

  Always Always while Aria runs, unless you pause clipboard history.

  Leaves your Mac

  Nothing leaves the Mac.

  From Sources/AriaClipboard/ClipboardStore.swift, Sources/AriaClipboard/ClipboardModel.swift, Sources/AriaClipboard/Privacy.swift

• Your Downloads folder

  • ~/Downloads

  Shows downloads in progress in the notch and offers to put a finished one on the shelf. Files are never opened or run.

  Access

  Reads

  When

  Always On by default; turn off the Downloads tool to stop it.

  Leaves your Mac

  Nothing leaves the Mac.

  From Sources/AriaTools/Downloads.swift, Sources/AriaTools/ToolsModel.swift, Sources/AriaApp/AppModel.swift

• What is playing

  • MediaRemote, through a small helper loaded by /usr/bin/perl
  • Music and Spotify (Apple Events)

  The Now Playing tab: title, artist, artwork and play controls.

  Access

  Reads

  When

  Always Always while Aria runs. Music and Spotify need Automation permission for each app.

  Leaves your Mac

  Nothing leaves the Mac.

  From Sources/AriaGlance/HelperNowPlaying.swift, Sources/AriaGlance/MediaRemoteNowPlaying.swift, Sources/AriaGlance/AppleScriptNowPlaying.swift

• Battery, heat, CPU load, network state, idle time and window count

  • IOKit power sources, thermal state, host statistics, NWPathMonitor, CGWindowList (count only, no titles)

  So the orb can react to the Mac: getting hot, low battery, a messy desktop, going idle.

  Access

  Reads

  When

  Always Always while Aria runs.

  Leaves your Mac

  Nothing leaves the Mac.

  From Sources/AriaSenses/LiveProviders.swift

• Volume, brightness and output device

  • CoreAudio and display brightness readings

  The notch's volume and brightness indicator.

  Access

  Reads

  When

  Always Always while Aria runs. Replacing the system indicator needs Accessibility.

  Leaves your Mac

  Nothing leaves the Mac.

  From Sources/AriaHUD/Volume.swift

• Checks, pull requests and local ports (Developer pack)

  • gh (GitHub CLI) for repositories you recently worked in
  • git remote get-url origin
  • lsof listening TCP ports
  • docker ps

  The Developer tab: CI and pull request lights, deploy status, and which local servers are running in which project.

  Access

  Reads

  When

  If you turn it on The Developer pack is on by default. gh runs only if it is installed and signed in; ports and Docker are read only while that section is on screen.

  Leaves your Mac

  Yes. gh talks to GitHub with your own gh sign-in.

  From Sources/AriaDev/GitHubCLISource.swift, Sources/AriaDev/CI.swift, Sources/AriaDev/Localhost.swift, Sources/AriaApp/AppPack.swift

• Recent files in Downloads and Desktop, upcoming events, open apps

  • ~/Downloads
  • ~/Desktop
  • EventKit
  • NSWorkspace running applications

  Personal context the assistant can use to answer you.

  Access

  Reads

  When

  If you turn it on Only after you pick that source and refresh it. Events also need Calendar permission.

  Leaves your Mac

  Nothing leaves the Mac by reading it. If you then ask a cloud AI, the context you selected is sent with your message.

  From Packages/AriaAssistant/Sources/AriaMacAssistant/MacPersonalContextSystem.swift

macOS asks you first. Aria works without any of these; the feature that needs one says so.

• Calendar events

  • EventKit (Calendars)

  Upcoming meetings in the notch, with join links. An event is created only when you approve an action.

  Access

  Reads and writes

  When

  With your permission Only if you grant Calendar access.

  Leaves your Mac

  Nothing leaves the Mac.

  From Sources/AriaGlance/CalendarSource.swift, Sources/AriaActions/Services.swift

• Reminders

  • EventKit (Reminders)

  Due reminders in the Now tab. A reminder is created only when you approve an action.

  Access

  Reads and writes

  When

  With your permission Only if you grant Reminders access.

  Leaves your Mac

  Nothing leaves the Mac.

  From Sources/AriaAttention/Reminders.swift, Sources/AriaActions/Services.swift

• Contacts

  • Contacts framework

  Looks up meeting participants for the Founder pack, and names you say to the assistant.

  Access

  Reads

  When

  With your permission Only if you grant Contacts access.

  Leaves your Mac

  Yes. Only if you ask for an AI summary: participant details go to your configured AI provider.

  From Sources/AriaFounder/ContactsEnricher.swift, Sources/AriaApp/AssistantSystemVoiceCommands.swift

• Windows and text fields of other apps

  • Accessibility API (AXUIElement)
  • CGWindowList

  Catch a window and hand it back, paste a clipboard item, replace the system volume indicator, read the selected field when you ask, and observe approved documents.

  Access

  Reads and writes

  When

  With your permission Only if you add Aria in System Settings > Privacy & Security > Accessibility. Aria checks without prompting until you use a feature that needs it.

  Leaves your Mac

  Nothing leaves the Mac by reading it.

  From Sources/AriaWindows/AXWindowSystem.swift, Sources/AriaClipboard/ClipboardModel.swift, Sources/AriaApp/MacTextEditing.swift, Sources/AriaHUD/Volume.swift

• The screen

  • ScreenCaptureKit
  • CGWindowList window titles

  Text grab, screenshot to shelf, ask about the screen, Lens, and window previews.

  Access

  Reads

  When

  With your permission Only if you grant Screen Recording, and only when you use one of those features.

  Leaves your Mac

  Yes. Only when you ask a question about the screen with an Anthropic key: the text read from the screen, and the screenshot if you turned on Send screenshot with questions, go to Anthropic.

  From Sources/AriaTools/CaptureLive.swift, Sources/AriaAssist/AssistLive.swift, Sources/AriaApp/LensScreenSelection.swift, Sources/AriaWindows/AXWindowSystem.swift

• Microphone and speech recognition

  • AVAudioEngine input
  • SFSpeechRecognizer

  Meeting notes, dictated questions, holding the mic to reply to an agent, the voice key, lecture capture, and room voice.

  Access

  Reads

  When

  With your permission Only if you grant Microphone and Speech Recognition, and only while one of those features is listening. Audio is not saved.

  Leaves your Mac

  Yes. Speech is recognised on this Mac when macOS supports it for your language; otherwise Apple's speech service may process it. Room voice is relayed live to the room you joined.

  From Sources/AriaAssist/AssistLive.swift, Sources/AriaAssist/SharedSpeechService.swift, Sources/AriaApp/AppModel.swift

• Sound your Mac plays

  • Core Audio process tap

  Music-reactive orb, and the other side of a call in meeting notes.

  Access

  Reads

  When

  If you turn it on Only while Music-reactive orb is on (off by default) or meeting notes are capturing the other side of a call, and only if you grant audio capture. Nothing is recorded or stored.

  Leaves your Mac

  Nothing leaves the Mac.

  From Sources/AriaHUD/AudioLevelService.swift, Sources/AriaAssist/AssistLive.swift

• Camera

  • AVCaptureDevice (video)

  Mirror in Tools, to check how you look. Nothing is recorded.

  Access

  Reads

  When

  With your permission Only when you open Mirror and grant Camera access.

  Leaves your Mac

  Nothing leaves the Mac.

  From Sources/AriaTools/MirrorLive.swift, Sources/AriaTools/ToolsLive.swift

• Bluetooth devices

  • IOBluetooth paired devices

  A peek when AirPods or other Bluetooth devices connect, with their battery level.

  Access

  Reads

  When

  With your permission Only if you grant Bluetooth access.

  Leaves your Mac

  Nothing leaves the Mac.

  From Sources/AriaHUD/Bluetooth.swift, Sources/AriaApp/AppModel.swift

• Whether a Focus is on

  • INFocusStatusCenter

  To keep peeks quiet while you concentrate. It says only whether a Focus is on, never which one.

  Access

  Reads

  When

  With your permission Only if you allow Focus status.

  Leaves your Mac

  Nothing leaves the Mac.

  From Sources/AriaHUD/FocusLock.swift

• Other apps through Apple Events

  • Safari, Chrome and other browsers (tabs)
  • Terminal and iTerm (bring an agent's tab forward)
  • Music and Spotify
  • System toggles

  Count and read browser tabs you choose, jump to the terminal an agent runs in, and run automation in supported apps when you approve an action.

  Access

  Reads and writes

  When

  With your permission Only if you allow Aria to control that app (macOS asks once per app).

  Leaves your Mac

  Nothing leaves the Mac by reading it.

  From Sources/AriaSenses/LiveProviders.swift, Sources/AriaAgents/TerminalJumper.swift, Sources/AriaTools/TogglesLive.swift, Packages/AriaAssistant/Sources/AriaMacAssistant/MacBrowserAccess.swift

• Your local network

  • Bonjour _aria-presence._tcp
  • Team LAN relay
  • http://127.0.0.1:11434 (Ollama)

  Find paired Macs for the Friends pack or a LAN team relay, and talk to a local vision model you choose.

  Access

  Reads and writes

  When

  If you turn it on Only if you turn on Friends, a LAN team relay, or a local vision model.

  Leaves your Mac

  Yes. Friends and LAN relay traffic goes to the paired Macs on your network. The local model stays on this Mac.

  From Sources/AriaPresence/LocalNetworkTransport.swift, Sources/AriaTeam/RelayServer.swift, Sources/AriaAssist/OllamaVisionClient.swift

Secrets are kept in your login Keychain, readable only while the Mac is unlocked and never synced to other devices.

• API keys and private addresses you enter

  • Keychain service app.aria.notch, accounts anthropic, stripe, pagerDuty, geminiSpeech, elevenLabsSpeech, canvasURL, canvasToken, icsFeed

  Your own keys for the features that need them (Connections > Keys and Student).

  Access

  Reads and writes

  When

  If you turn it on Only once you enter a key. Clearing the field deletes the item.

  Leaves your Mac

  Yes. Each key is sent only to its own service when that feature runs.

  From Sources/AriaApp/Secrets.swift

• Hosted sign-in session

  • Keychain service app.aria.notch.supabase.<project host>, account team-session

  Keeps you signed in to the hosted account.

  Access

  Reads and writes

  When

  If you turn it on Only after you sign in.

  Leaves your Mac

  Nothing leaves the Mac except as part of the hosted requests below.

  From Sources/AriaTeam/SupabaseBackend.swift

• Other Aria Keychain items

  • app.aria.notch.personal-connectors (Google, Slack, Notion, GitHub, Linear tokens)
  • app.aria.notch.presence (Friends pairing)
  • app.aria.notch.room-device.<id> (encrypted room device key)
  • com.aria.capture.cursor-cloud.v1 (Cursor key for capture)

  Credentials for features you connect.

  Access

  Reads and writes

  When

  If you turn it on Only after you connect that feature.

  Leaves your Mac

  Nothing leaves the Mac except as part of that feature's own requests.

  From Packages/AriaAssistant/Sources/AriaMacAssistant/PersonalConnectorKeychain.swift, Sources/AriaApp/Secrets.swift, Sources/AriaTeam/RoomDeviceStore.swift, Packages/AriaCapture/Sources/AriaCapture/CaptureCloudCredentials.swift

• Speech keys from the older Voice Aria app

  • Keychain service com.aria.agent, accounts gemini_api_key and elevenlabs_api_key

  To copy your old speech keys across if you ask.

  Access

  Reads

  When

  If you turn it on Only when you start that migration yourself. The old items are not deleted.

  Leaves your Mac

  Nothing leaves the Mac.

  From Sources/AriaApp/LegacySpeechKeyMigration.swift

Everything Aria sends over the network, and when.

• Update checks

  • https://mkkxrrcqukxalagjsktt.supabase.co/storage/v1/object/public/aria-updates/appcast.xml

  To offer signed updates (Sparkle). The feed and the update are both signed and checked before installing.

  Access

  Reads

  When

  Always Once a day after the updater starts, and when you choose Check for Updates.

  Leaves your Mac

  Yes. The request reaches the update host with your installed version and normal request details. System profiling is off.

  From Sources/AriaApp/Updater.swift, scripts/bundle.sh, config/public-beta.json

• Anonymous usage counts

  • POST https://mkkxrrcqukxalagjsktt.supabase.co/functions/v1/api/counts

  Six numbers and a random install ID, so the developer can see whether setup works and where it is abandoned.

  Access

  Writes

  When

  If you turn it on Off by default. Only if you turn on Share anonymous usage counts (first setup screen or Settings > Privacy); once a day, and again during setup when you reach a new step.

  Leaves your Mac

  Yes. The Aria Supabase project. Settings shows the exact text before it is sent.

  From Sources/AriaAppLogic/UsageCountsCore.swift, Sources/AriaApp/UsageCounts.swift

• Crash reports

  • POST https://mkkxrrcqukxalagjsktt.supabase.co/functions/v1/api/crash-reports
  • ~/Library/Application Support/AriaNotch/crash-reports/<report>.json (waiting reports, kept at most 30 days)

  So the developer can measure how often Aria crashes. Each report holds: Aria version and build, macOS version, Intel or Apple silicon, crash type, code and signal, a termination reason (only if it has no path or name in it), and the crashing thread's frames as program name, offset and program ID. A random report ID is made per report. No account, install ID, device name, IP address, file name, path, window title, prompt or agent output.

  Access

  Reads and writes

  When

  If you turn it on Off by default. Only if you turn on Send crash reports in Settings > Privacy, and only after a crash, on the next launch (macOS MetricKit delivers it). Turning it off deletes waiting reports.

  Leaves your Mac

  Yes. The Aria Supabase project. Settings > Privacy > Preview what is sent shows the exact text before it is sent.

  From Sources/AriaAppLogic/CrashReportsCore.swift, Sources/AriaApp/CrashReports.swift

• Hosted account and teams

  • https://mkkxrrcqukxalagjsktt.supabase.co (auth, database, functions)

  Sign-in, teams, shared agent status, hand-offs, rooms, and capture entries you approve for your private account.

  Access

  Reads and writes

  When

  If you turn it on Only if you turn on the Team pack and sign in.

  Leaves your Mac

  Yes. The Aria Supabase project: your email, team membership, and the records you share with your team or approve for your account.

  From Sources/AriaTeam/SupabaseBackend.swift, Sources/AriaApp/CapturePrivateSync.swift, Sources/AriaAppLogic/AppConfiguration.swift

• Anthropic, with your own key

  • https://api.anthropic.com/v1/messages

  Ask about the screen, meeting notes, drafts and summaries.

  Access

  Writes

  When

  If you turn it on Only with an Anthropic key in Connections > Keys, and only when you ask.

  Leaves your Mac

  Yes. Anthropic: the text you ask about and the context you selected.

  From Sources/AriaAssist/AnthropicModel.swift, Sources/AriaApp/Secrets.swift

• Optional spoken replies

  • https://generativelanguage.googleapis.com (Gemini speech)
  • https://api.elevenlabs.io (ElevenLabs)

  A spoken voice other than the Mac's own.

  Access

  Writes

  When

  If you turn it on Only with your own key and that provider chosen in Voice settings. The Mac's own voice is the default.

  Leaves your Mac

  Yes. The chosen provider: the text to be spoken.

  From Sources/AriaVoice/OptionalSpeechProvider.swift

• Google, Slack, Notion, GitHub and Linear

  • accounts.google.com, oauth2.googleapis.com, www.googleapis.com, gmail.googleapis.com
  • slack.com
  • api.notion.com
  • api.github.com
  • api.linear.app
  • http://127.0.0.1 (sign-in callback)

  Lets the assistant read or act in those services for you.

  Access

  Reads and writes

  When

  After you connect it Only after you connect that service and sign in.

  Leaves your Mac

  Yes. That service only, with your own sign-in.

  From Packages/AriaAssistant/Sources/AriaMacAssistant/GooglePersonalOAuth.swift, Packages/AriaAssistant/Sources/AriaMacAssistant/SlackPersonalOAuth.swift, Packages/AriaAssistant/Sources/AriaMacAssistant/PersonalNotionTools.swift, Packages/AriaAssistant/Sources/AriaMacAssistant/PersonalDeveloperTools.swift, Packages/AriaAssistant/Sources/AriaMacAssistant/PersonalOAuthLoopback.swift

• Services behind the packs

  • api.pagerduty.com (Developer)
  • api.stripe.com (Founder)
  • Your Canvas address and .ics feed (Student)
  • query1.finance.yahoo.com (Markets)
  • api.cursor.com (session capture)

  Incidents and who is on call, company pulse, coursework due dates, prices, and Cursor history.

  Access

  Reads

  When

  If you turn it on PagerDuty, Stripe, Canvas, .ics and Cursor only with a key or address you enter. Markets only with the Markets pack on.

  Leaves your Mac

  Yes. That service only. Markets sends the ticker symbols on your watchlist.

  From Sources/AriaDev/Pager.swift, Sources/AriaFounder/StripeSource.swift, Sources/AriaStudy/Canvas.swift, Sources/AriaStudy/ICS.swift, Sources/AriaMarkets/YahooSource.swift, Packages/AriaCapture/Sources/AriaCapture/CaptureCloudClient.swift

• Web search and pages you ask for

  • https://html.duckduckgo.com/html/
  • HTTPS pages you name

  When you ask the assistant to look something up or read a page.

  Access

  Reads

  When

  If you turn it on Only when you ask.

  Leaves your Mac

  Yes. DuckDuckGo receives the search query; the site you named receives a normal page request.

  From Packages/AriaAssistant/Sources/AriaMacAssistant/MacBrowserAccess.swift

• Problem reports

  • A mail draft in your mail app
  • A file you choose to save

  Report a problem shows the report, with optional diagnostics, before anything is sent.

  Access

  Writes

  When

  If you turn it on Only when you choose Report a problem.

  Leaves your Mac

  Yes. Only if you send the email yourself.

  From Sources/AriaApp/Feedback.swift, Sources/AriaAppLogic/SupportContact.swift