Privacy policy
Effective 5 October 2026. Applies to the Oriel iOS app and the Oriel Mac companion by 67 Enterprise.
The short version
Oriel has no account, no analytics, no advertising and no crash reporting of its own; if you share crash and usage data with Apple and app developers in your device settings, Apple may show us crash reports under its policies. Oriel has no cloud service of ours. Your screen travels only end-to-end encrypted from your Mac to your paired phone. We do not receive your screen, your typing, your clipboard, your device names or your pairing keys. Models you choose receive what the sections below describe, and nothing more.
What stays on your devices
| Data | Where it is processed | Stored? | Sent to 67 Enterprise? |
|---|---|---|---|
| Screen frames | Your Mac, then your paired phone, encrypted end to end | No | Never |
| Pointer, keyboard and scroll input | Your phone to your Mac, encrypted end to end | No | Never |
| Typed text | Your Mac, at the moment of typing only | No; never logged | Never |
| Pairing keys and the list of trusted devices | Each device's own Keychain | Yes, on that device until you forget or revoke it | Never |
| Camera (iPhone/iPad) | On the phone, only to scan the pairing code | No | Never |
| Local-network discovery | Bonjour on your network | No | Never |
| Assistant settings and instructions | Your Mac | Settings yes; instructions and the assistant's steps in the activity log below | Never |
| Activity log | Your Mac, in Library/Logs/Oriel in your home folder | Yes, for seven days; delete it any time in the companion's Settings, Diagnostics | Never |
| Diagnostics report | Your Mac | Only if you export it | Only if you send it to us yourself |
The activity log is there for troubleshooting. It records when sessions start and end and why, each assistant step with the names of the controls it used, and what the assistant reported back to you. Typed text and your answers appear only as a character count, an instruction that mentions a password, code or card number is left out, and long numbers are masked. It is a plain text file on your Mac and leaves it only if you send it to someone.
What a model receives
The assistant reads the screen on the Mac and produces a text description: the frontmost app and window title, control names, roles and positions from the accessibility tree, and text recognized on the Mac. Secure fields are never read, and text that looks like a password, one-time code or card number is left out. This description, your instruction and the assistant's own step history are sent to the models you configured.
- Built in (default): models run on your Mac. Nothing leaves it. The weights are downloaded from Hugging Face on first use; Hugging Face sees the download request, not your data.
- Ollama or an OpenAI-compatible server on your Mac or your own network: the text description goes to that server. If the server is on your Mac or your local network, the executor may also send a downscaled screenshot.
- A model on the internet (Anthropic, or an endpoint outside your network, with your own key): the text description only. A screenshot is sent only if you switched that on in the Mac's Assistant settings and allowed it on the phone for that run. The planner model never receives screenshots wherever it runs.
Those providers process the data under their own terms. 67 Enterprise is not a party to those requests and cannot see them.
What we receive
Nothing, in normal use. If you email support, we receive what you write. Apple provides us aggregate App Store statistics under its own policies.
Optional relay
The companion contains an optional, off-by-default relay for connecting across networks. When you enable a relay (ours or one you run), it forwards encrypted bytes it cannot read and can observe connection metadata: addresses, timing and byte counts. It stores none of it beyond the connection; our relay logs only rejected registrations and its own start-up. A paired phone also keeps a reconnect key for that relay in its Keychain, next to the pairing keys, so it can find your Mac from outside your network; it is handed over inside the encrypted session and never passes through the relay in clear. Nothing else about the relay has changed in this policy, and it is enabled.
Children
Oriel is not directed at children under 13 and collects no personal data from anyone.
Changes and contact
We will post changes here with a new effective date. Questions: support@67enterprise.com.