Privacy policy

Last updated: July 2026

Station is a local-first Mac app with no telemetry. The app can be tried without an account or card. A Clerk account is used for purchase, license recovery, device-code activation, and account management.

What Station stores

App and group configuration
Your apps, groups, dependencies, quick links, health checks, and board positions are stored in Application Support on your Mac. They never leave your machine.
Logs and terminal output
Output from services Station runs stays in local terminal sessions on your Mac.
AI provider keys
If you configure AI Doctor, your API key is stored in the macOS Keychain — not in files and not on Station's servers.
Trial and license credentials
The 7-day trial marker, license key, activation lease, and device identifier are stored locally. License keys and leases are stored in Keychain where possible.

What Station collects about you

Station does not collect analytics or crash reports. The website account area stores the minimum records needed for licensing: Clerk user ID, email, Paddle customer and transaction IDs, license status, active device labels, device hashes, and signed lease metadata.

Purchase and account services

Clerk provides authentication for the account center. Paddle is the merchant of record for checkout, receipts, invoices, refunds, and payment portal access. Station receives Paddle webhook events so it can issue or revoke licenses.

The Mac app contacts Station servers to activate a license key, poll a device-code activation, refresh a signed license lease, or deactivate a Mac. It can keep running during the offline grace window using the signed lease stored locally.

AI Doctor and your data

AI Doctor is off until you configure a provider and approve local inspection. When you run a diagnosis, Station sends redacted evidence — runtime status, port listeners, log excerpts, manifest summaries, and env variable key names only — to the AI provider you chose (for example OpenAI or Anthropic), using your own API key. Secret values are redacted before anything is sent. Your use of that provider is governed by the provider's own terms and privacy policy.

By policy, AI Doctor never reads Keychain or credential stores, SSH or GPG material, cloud and Kubernetes credentials, browser profiles, or Mail and Messages data.

Contact

Questions about this policy: support@usestation.app