MoeDocs

Privacy

On the free plan nothing about you leaves your Mac. Three things send something to us, and each one asks you first: signing in with Google, which sends only who you are; starting Away, which moves Moe into your own cloud computer; and problem reports, which send what you asked us to look at. The speech recognition, the voice, the transcription and the memory all run on your Mac. The full policy is at moebot.app/privacy, and it lists every service that ever touches your data.

Settings › Privacy#

One page, in this order:

  • Let Moe send problem reports — off to start with. Sends Moe's description of the problem, the bit of your conversation it quotes, and recent lines from Moe's own logs to the Moe team. Our team and our coding assistant read them. Under it, What is sent? opens the whole list. Turning it on sends nothing by itself: nothing was kept while it was off. See When Moe itself breaks.
  • Report without saying who I am — off. We can't reply or tell you when it's fixed. On, no account, device, email or plan is attached to a report, and it isn't deleted with your account.
  • Keep a copy in the cloud — only on a paid plan. On, your cloud Moe keeps up with what Moe learns on this Mac. Turning it off asks first, Stop keeping a copy in the cloud?, and says what it means: your cloud Moe stops learning anything new from this Mac and keeps what it already has. Turning it back on needs your yes to the current Terms.
  • Cloud voice — only on a paid plan. The same setting as Settings › Voice's Use the sharper voice and hearing that come with my plan: on, what you say and Moe's replies go through speech services in the cloud; off, Moe hears and speaks on this Mac alone. The line under it says which is true right now.
  • Documents — the Terms of Service and the Privacy Policy, each with Open and the version you accepted and when, You accepted version 2026-09-15.1 on …, or Not accepted yet. You're asked when you sign in or upgrade.
  • Delete my account — only while this Mac is signed in.
  • Erase Moe from this Mac.

Terms and Privacy Policy: when you agree, and to what#

You agree in three places, and each is recorded with the documents' versions and the time: signing in with Google (the line under every sign-in button), Agree and continue on Before you start Away, and turning on problem reports. Turning problem reports off is recorded too. Each document shows its version at the top; both currently carry 2026-09-15.1. A small correction changes only the date; a change that matters gets a new version, and you are asked again: on a paid plan, Our Terms and Privacy Policy have changed appears the next time Moe opens, in a small window of its own; on the free plan, the next time you sign in, start Away or turn on problem reports. Nothing stops while it waits, and closing the window changes nothing.

Only you can agree#

Moe can work your Mac's screen for you, so the buttons that say yes on your behalf answer only to you: Agree and Agree and continue, the switches in Settings › Privacy, and Delete my account and Erase this Mac. A click or a key press you make works as normal. If anything else presses one, Moe itself, another app, a script, nothing happens, and your Mac asks you to confirm it's you with Touch ID or your password. If you did not mean to, cancel, and the control says Please click this yourself.

Every yes is also signed by a key that only the Moe app on this Mac can use. It is set up when you sign in with Google, and our server accepts an agreement only when it carries that signature, so nothing else on your Mac, even something that could read Moe's files, can agree for you. If the key has to be set up again (Moe was reinstalled, or the key was removed), Moe asks you to confirm it's you and sign in with Google once more, and we email the address you signed in with: A new key for agreeing was set up for your Moe account, naming the Mac and the time. If that wasn't you, reply to that email.

Delete my account#

Delete my account deletes everything of yours that we hold. The first step says what that means: on a paid plan, This cancels your plan and deletes your cloud computer, everything on it, your connected accounts, your problem reports and your Moe account. Moe on this Mac keeps working, signed out.; on the free plan, that it deletes your sign-in with us, the apps and accounts you connected through it, and your problem reports. The second: This can't be undone. Type DELETE to confirm. Then Google asks you to sign in, with the same account this Mac is signed in with; that is how we know it is you, and it works on any Mac. Choose a different Google account and nothing is deleted.

Your plan is cancelled at once (the time left in the current period is not refunded), your cloud computer is deleted, and so are your connected accounts, your problem reports, your agreements and your account. Stripe keeps its own record of past payments, because tax law requires it. A receipt goes to your address before we forget it. Moe on this Mac carries on, signed out, on the free plan. A problem report you sent without saying who you are isn't tied to your account, so it isn't deleted.

Erase Moe from this Mac#

Erase Moe from this Mac removes everything Moe put here: what it remembers about you, your conversations, notes and meeting recordings, the apps and accounts you connected, the ways you message it, the voices and models it downloaded, its background jobs (stopped first), Moe's entry in Login Items, the small tool Moe installed to work your screen (named only when it will actually be removed; anything else on your Mac that uses it stops working until it is installed again), and the permissions you gave Moe. It warns you twice, in different words, and lets you Delete my account too at the same time. Show exactly what will be removed lists every item before you confirm. Then it asks you to prove it's you, Google if you are signed in, otherwise Touch ID or your Mac's password, quits, clears itself away, and opens again at the welcome screen like a new install.

What stays: the Moe app itself, the Python it downloaded, and Claude Code and ChatGPT, their apps, their commands and their own sign-ins, which belong to them, and your own files. If macOS won't let Moe remove something, Moe doesn't pretend it did: when it opens again it shows one note naming what is left, with Show in Finder, so you can finish the job yourself. There is no separate uninstall; this is the one way out.

What we can and cannot see#

On your Mac, nothing. With Away, your conversations, your memory and your AI sign-in are sealed on your Mac under keys only your devices hold; the service that carries them between your devices holds them and cannot read them. What that service can see is your email address, your plan and usage, your agreements, your problem reports, the tokens for the chat apps you connected for Away, the key to your Composio project, the name of a stranger knocking at your bot before you let them in, and a message crossing a chat app in transit, because that is what receiving a message from another service means. Your cloud computer's own disk holds a readable copy of your conversations, which is the point of it; someone with access to our hosting account could technically open it, so staff open a cloud computer only to fix something you asked about, with your yes on the ticket. The privacy policy says all of this in full, and names where the computers are.