Enzo is a Mac app that records and transcribes on your Mac, remembers your work with your permission, and answers questions about it with cloud AI. This policy explains what stays on your Mac, what leaves it, and why. In this policy, "Enzo", "we" and "us" mean the operator of the Enzo app and its online service.
Your Enzo account
When you create an account we process:
- your email address. If you sign in with Apple or Google, the identifier and email address they share with us (Apple may give us a private relay address);
- a random identifier for each Mac you sign in on;
- whether and when you agreed to cloud AI processing;
- your plan, trial dates and subscription status;
- your answer to "How did you find Enzo?", if you give one;
- usage records: when each AI request ran, which kind of feature it was (for example Chat or meeting notes), which allowance it used and how much. Not its content.
These records are stored with Supabase in the United States. Sign-in codes are sent by email through Resend.
To delete your account, write to hello@tryenzo.ai from the email address you sign in with. We remove your account, sign-in and usage records from our service. Your history on your Mac is not affected. You can sign up again later with the same email address, but the Plus trial can be used only once.
What stays on your Mac
- Audio, transcripts, dictated text and meeting content
- Chats and the documents Enzo writes for you (notes, drafts, briefs)
- Voice profiles used to recognize who is speaking
- Recall: the apps, window and document titles, web page titles and addresses, readable text and timing Recall collects. In messaging apps such as Messages, WhatsApp and Signal, and on their websites, Recall keeps only the time spent, never what's in them. Recall is encrypted on your Mac and deleted after 30 days unless you choose another period
- Files and images you attach. When a question needs more than their text, up to three pictures from them can be sent with it (see below)
- Temporary screen frames used to read text on your screen, which are discarded after the text is read. When a question about your screen needs more than its text, one frame is sent with it (see below)
How Chat and other AI features work
What is sent. Your question, the recent conversation, and the context the question needs, chosen on your Mac from the sources you allow: transcript excerpts, Recall text, text from documents you attach, text on your screen when you ask about it, results from connected apps (below) and web sources. Images you attach, and pictures in files you attach such as a scanned page or a chart, are read on your Mac first. When a question needs more than their text, for example what a photo shows, up to three of them can be sent with that question so the AI can look at them. When you ask about your screen and its text isn't enough, for example for a chart or a layout, one picture of your screen can be sent with that question. A question sends at most three pictures in all. Our service never saves them, and a picture of your screen isn't saved on your Mac either. Chat never uploads your whole library.
Where it goes. Requests go through Enzo's service, which checks your account and remaining allowance, then sends them to Anthropic, whose Claude model answers in every mode, with processing only in the United States. The same applies to meeting notes, titles, drafts and briefs you ask for.
What we keep. Our service records usage (see Your Enzo account) but does not store your questions, the context sent with them (including any picture of your screen or from your files), or the answers. Answers are saved only in your chat history on your Mac.
What providers keep. Anthropic processes requests under its commercial terms for API customers: it does not use them to train its models, and keeps them only for a limited time to detect abuse, longer only where a request is flagged under its usage policies or the law requires it.
Answers on the Free plan search your recordings, Recall, mail and messages from today and your last working day, the most recent earlier day with a recording or Recall. This limit is applied on your Mac.
Automatic work. With notes after every meeting on, which they are from the start on every plan, Enzo sends each finished meeting's transcript for processing without you asking each time. Reading your upcoming events, on from the start on Plus, Pro and their trial, sends the titles and times of your next two weeks of events so Enzo can tell what each event is and when and how to help. With them go the kind of calendar each comes from, whether it repeats or is marked out of office, how many people are invited but never who they are, your time zone, and the suggestions you turned off. A repeating event is sent once. Follow-ups after meetings, which can read what a question in Chat can, start on and run once a meeting's notes are written. Overviews of your day from Recall and inbox watching each have their own switch, off until you turn it on. Inbox watching sends the sender, subject, time and a short preview of each new message in your connected Outlook mail and Teams chats and, if you allow it, the last few lines of new one-to-one chats in Messages (never group chats), so Enzo can tell which need a reply. Drafting replies to them, when you click or on Pro by itself, works like a question in Chat. The switches for notes, reading your events, follow-ups and inbox watching are on the Routines page, and the one for day overviews ("Write an overview of each day") is in Settings, Privacy, under Recall. Each switch is the only one its work needs: turning them off stops it.
Connected apps
You choose which apps Enzo may read, in Enzo's Connections page. Enzo reads them on your Mac when a question needs them, including questions you schedule as routines, and for automatic work you turn on, such as follow-ups after meetings. It sends only the relevant parts to the AI provider with that question. Your calendars are also read to show your day and upcoming meeting briefs in Enzo. A brief shows who else is invited, read on your Mac; their names go to the AI provider only if you send the question Enzo prepares for that meeting. You choose which calendars Enzo reads in Connections.
- Apple Calendar, Reminders and Contacts are read through macOS with your permission.
- Messages, Notes and Things are read from their databases on your Mac, which needs Full Disk Access that you grant in System Settings. Enzo opens only those databases, read-only, and never reads locked notes or Recently Deleted. A new Things to-do you confirm is added through Things.
- Folders you choose, including iCloud Drive, Dropbox, OneDrive and Google Drive folders on your Mac, are searched with Spotlight; a file is opened only when a question needs it. Hidden files, app libraries and files named like passwords or keys are never read.
- Google Calendar and Microsoft 365 (Outlook mail, Outlook calendar, Teams chats, OneNote and To Do) are read with the permission you grant when you connect. Sign-in tokens are stored in your Mac's Keychain.
- Notion is searched through Notion's own service. When you connect, Notion asks which pages Enzo may see; Enzo reads only those, and never changes them.
- Todoist is read through Todoist's own service with permission to read your tasks and add new ones. Enzo adds a task only when you click to confirm it, and never changes, completes or deletes one.
Enzo creates or sends something only when you click to confirm it in Chat: a calendar event, a reminder, a task, an email draft or a reply. It never changes or deletes existing items.
Google user data. Enzo's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Enzo does not sell Google user data, use it for advertising, or use it to train AI models, and does not store it on our servers. You can disconnect Google in Enzo's Connections page or at myaccount.google.com/permissions.
You can disconnect any app in Connections. For Microsoft, withdraw the permission itself at account.microsoft.com (personal accounts) or myapps.microsoft.com (work or school accounts).
Web research
Chat's AI decides when to search the web and writes its own search queries, as many as an answer needs. Your Mac sends each query directly to DuckDuckGo (or Microsoft Bing as a fallback) and opens the public pages it chooses. These requests go straight from your Mac, not through Enzo.
A query is written for the question you asked, so it can include details from your question or from what Chat read to answer it, such as a name, a product or a topic in a recording, Recall, an attachment or a connected app. Search engines receive the query and your Mac's IP address under their own privacy policies. To keep a particular question off the web, ask Chat not to search.
Payments
Subscriptions are sold through Polar, our merchant of record, which processes your payment details, billing address and tax information under its own privacy policy. We receive your plan, subscription status and a Polar customer identifier, never your card details.
Anonymous usage statistics
"Share anonymous usage statistics" (Settings, Privacy) is on unless you turn it off. While it is on, Enzo sends a short report shortly after it opens and then hourly. It carries a random installation identifier and:
- your app and macOS version, Mac model and memory;
- which permissions are granted, whether the speech models are installed, and how far setup got;
- numbers about your use: how many recordings you made, their total length and word count, how many meetings were calls or in the room, how many people you have named, on how many days in the last month you used each part of Enzo (such as Chat, Recall, search, the Today list, briefs, follow-ups and routines), and how many days after installing you first did each;
- some settings: retention periods, launch at login, notes after meetings, Recall and day overviews;
- your plan and trial days left, and how often usage limits, plan pages and paid features were shown;
- which apps are connected, whether any needs reconnecting, how sign-ins to them ended, and which kinds of app Chat read from;
- how often Enzo crashed or stopped responding, as macOS reports it, and how long your last meeting took to process.
It never includes audio, transcripts, chats, titles, file names, speaker names, your account email or anything from connected apps, and it is never linked to your account. Our server adds the country the report comes from, and the state in the United States, worked out from its IP address; the address itself is not kept. If you turn the statistics off and on again, Enzo starts over under a new identifier. You can turn them off at any time.
Update checks. Enzo checks tryenzo.ai for updates when it opens and every six hours, whether or not statistics are on. We count each copy once a day, with its app version and country, under an identifier made from a salted hash of the day, your IP address and the app's version string, so a copy cannot be followed from one day to the next.
Website
tryenzo.ai counts visits without cookies. Each visit gets a random identifier kept in that browser tab, which is gone when the tab closes and is never linked to another visit. With it we record the pages you view, how long you stay and how far you scroll, which site, campaign or search ad brought you, your device type, browser and operating system, the country you visit from (with the state in the United States) and whether you clicked Download.
The site also counts page views and Download clicks with Vercel Web Analytics, which uses no cookies either. Vercel recognizes a visit by a one-way hash of the request, which it discards after 24 hours. It records the page, the site that brought you, your approximate location (country, region and city), your device type, browser and operating system and, for a Download click, the app version and where on the site you clicked. These counts are anonymous and aren't linked to your Enzo account.
Google Ads measurement runs only if you allow it on the site, and you can change that choice on this page.
Feedback and support
When you send feedback or contact support from Enzo, you review the message before it is sent, and choose whether to include a diagnostic report (app version, Mac and audio setup, with personal details removed). Bug reports and feature requests become public issues on GitHub, as Enzo tells you before you send them. Other messages are delivered by email through Resend to our support inbox.
Service providers
- Supabase: Enzo accounts, usage records, anonymous usage statistics and website visit records (United States)
- Vercel: hosts the website, update checks and Enzo's service, and counts website visits (United States)
- Anthropic: generates Chat answers (United States)
- Resend: sign-in codes and support email
- Polar: payments and subscriptions
- Upstash: rate limiting, using a salted hash of your IP address
- Apple, Google, Microsoft, Notion and Todoist: sign-in and connected apps, only if you use them
- DuckDuckGo, Microsoft Bing and public websites: web research, only from your Mac
- GitHub: app downloads, and the bug reports and feature requests you send
- Cloudflare: hosts the speech and search models Enzo downloads
- Google Ads: website advertising measurement, only if you allow it
Keeping and deleting your data
- History on your Mac stays until you delete it. Recall deletes context after your retention period (30 days by default). Speak and Recall let you delete single items, days or everything.
- Account and usage records are kept while you have an account, and deleted when you delete it, except payment records and plan changes, which we keep for tax and accounting, and our log of staff actions on your account. Copies in our backups are gone within 30 days.
- Anonymous usage statistics, update-check counts and website visit records are kept for up to 24 months.
Your rights
You can see, correct, export and delete what is on your Mac directly in Enzo. To delete your account, or for anything else, including access, correction or deletion requests under GDPR, UK GDPR or California law, write to hello@tryenzo.ai. We will not discriminate against you for exercising these rights.
Legal basis (EU and UK). We process your account, plan and usage records, and the AI requests you make, to provide the service you signed up for (contract). We keep anonymous usage statistics, update-check counts and website visit records, ask how you found Enzo, and protect the service against abuse because we have a legitimate interest in running it well; you can turn the app's statistics off and skip the question. Website advertising measurement runs only with your consent. We keep tax and accounting records because the law requires it. You can complain to the data protection authority where you live.
Children
Enzo is not intended for anyone under 16, and we do not knowingly collect their data.
International transfers
We and our service providers process data in the United States. If you are outside the United States, the data Enzo's service handles is transferred there. Where the law requires it, these transfers rely on our providers' Standard Contractual Clauses or the EU-U.S. Data Privacy Framework.
Changes
If we change this policy we will update the date above, and tell you in the app or by email when a change is significant.
Contact
hello@tryenzo.ai