Everything stays on your Mac.

Gisti handles your clipboard and your screen. That demands a stricter standard than a marketing promise. This page is specific on purpose.

The principle

All data is stored locally on your Mac. Gisti has no accounts, no sync service, no telemetry, and no analytics – not "disabled by default", but not implemented in the code at all.

What is stored on disk

Notes, clipboard history, screenshots, OCR text, chats, and the embeddings index live in a local SwiftData database, inside Gisti's sandboxed App Store container:

~/Library/Containers/com.gisti.app/Data/Library/Application Support/com.gisti.app/

Settings → Storage → Location opens it directly in Finder. It's your file – back it up, export it (Settings → Storage), or delete it. Gisti keeps no copy anywhere else.

What is never collected

No analytics or telemetry of any kind.
No crash reporting to remote servers.
No device identifiers, no fingerprinting.
No account, no email, no registration.

AI is opt-in

AI features are off until you configure a provider. Your choice defines where content goes:

Cloud provider (OpenAI, Anthropic, Google, …): the selected text or image is sent to that provider when you invoke an AI action. Their data policies apply.
Local provider (Ollama, LM Studio, MLX): nothing leaves the machine.
Topics and semantic search always run locally (MLX embeddings), regardless of the chat provider.

API keys

Keys are stored in the macOS Keychain. They are sent only to the provider they belong to, over TLS, and appear in no logs or config files.

Network requests

Gisti's own code makes exactly one kind of network request: anAI request, to the provider you configured, only when you invoke an AI action. Gisti never checks for updates or phones home. It's distributed on the Mac App Store, which delivers and installs updates on its own, outside the app's code.

Clipboard and screenshots

Clipboard content and screenshots never leave the device except by your explicit action: an AI request you invoke, an export, or a share. Apps you add to the ignored list are never recorded at all.

Permissions

Screen Recording: required for ⇧⌘X screenshots, and the only permission Gisti asks for. Revoke: System Settings → Privacy & Security → Screen Recording; Gisti keeps working without it, minus screenshots. Global hotkeys work with no permissions at all. Gisti never listens to your keyboard.

Browser extensions

The Gisti Web Clipper extension (Safari and Chromium browsers) follows the same rules as the app: no analytics, no tracking, no remote code. It reads a page only when you explicitly save it, and the extracted content goes to the Gisti app on the same Mac, via the browser's native messaging channel, never over the network.

This website

gisti.app is a static site on Cloudflare Pages. No analytics, no cookies, no fingerprinting, no external fonts or scripts. The only thing it remembers is your theme choice, stored in your own browser's localStorage.

Closed source, open architecture

Gisti's source code is not public. Privacy is enforced by design rather than by audit: data is written only to the local database, network calls exist only for the purpose above, and telemetry mechanisms are not present in the code. There is no "we promise not to enable it"; there is nothing to enable.

Questions: hi@gisti.app.