Privacy

What Cue collects, why, and where it goes.

What Cue collects

• Captures. Whatever you type or say into the capture bar (for example, “read chapter 3 before Friday”), and your conversations with Q.
• Tasks (including any location you add) created from your captures, and the outcome of each capture (what Cue understood it as).
• Imported details, if you connect them: Canvas assignment details and Google Calendar event details, plus your Canvas feed link and Google Calendar sign-in tokens. If you allow it when connecting Google Calendar, Cue can add, change and delete events on your Google Calendar, only when you confirm a change in the app.
• Usage cost records: how much each language-model request cost, to keep Cue running within budget.

Your voice

Speech-to-text uses Apple’s on-device speech recognition when your Mac supports it. When it doesn’t, Apple’s speech servers are used instead, so audio may leave your Mac in that case. Either way, only the resulting text reaches Cue.

With Better voice accuracy on (Settings → General, on by default on Apple silicon Macs), Cue listens to the same recording again with a speech model that runs entirely on your Mac (OpenAI’s Whisper, downloaded once from Hugging Face). That second listen never sends your audio anywhere.

The microphone is only on while the capture bar is open.

Where it goes

What you enter is stored on Cue’s server, so your list syncs and Q can answer questions about it.

Cue first tries its fast built-in parser, which runs on Cue’s server with no AI. When that parser can’t confidently understand a capture, the capture’s text is sent to OpenAI’s API to help understand it, along with context so Q knows what you mean: your existing task titles, courses, imported event details, task categories and recent conversation with Q may be included. See OpenAI’s API data usage policy for how they handle that data.

Apple Calendar events stay on your Mac.

Logs and crash reports

Server logs avoid personal content. They record things like request timing and outcome codes, not the text of what you typed or said.

Crash reports contain technical details only, never task text, and are sent only with your permission or if you turn on automatic sending.

Exporting and deleting your data

In the app, Settings → Account → Export My Data… saves a copy of everything stored for your account as a JSON file. Delete Account… erases your account and all of its data from Cue’s server right away. Deletion is permanent, and every Mac signed in to the account is signed out.

Cue forgets a Google Calendar connection on its server when you delete your account, but doesn’t yet revoke it at Google. Remove Cue under your Google account’s third-party access as well.

Questions

Open an issue at github.com/ysta32/cue-releases, or use Help → Send Feedback in the app.