Privacy Policy

1. Scope and how MARC works

MARC connects to the Mac you choose. Your SSH connection does not pass through a server I run, and normal use does not send me your passwords, terminal output, files or system readings.

The app has no MARC account to create, advertising, behavioral analytics or cross-app tracking. If you email me for help, I receive what you include in that message. If you turn on API-based AI, your requests go to the provider you choose.

2. Information processed by the app

MARC saves your Mac profiles and preferences on your iPhone. These include names, addresses, SSH usernames and ports, appearance settings, Quick Launch choices, selected models and remembered folders.

Connection credentials, trusted SSH host identities, SSH private keys and saved API keys are stored in Apple’s Keychain. Your private SSH key is used to authenticate your connection; MARC’s normal authentication flow does not upload it to your Mac.

While connected, MARC reads system statistics, running processes, file details and control information from your Mac. Commands and file transfers use SSH. Nearby discovery looks for SSH services on your local network. Your Mac or services you connect to may keep their own login and activity logs.

MARC uses SSH for remote connections and HTTPS for API requests. You should still protect your devices and review commands before running them.

3. Files and monitoring history

When you preview or download a file, MARC makes a temporary copy on your iPhone. It keeps that copy while the preview or share interface needs it, then attempts to remove its temporary folder. If the app closes unexpectedly, some temporary files may remain until the system cleans them up.

Files you upload, export or share become separate copies at the destination you choose. Deleting a temporary copy in MARC does not delete those copies. Changes to files on your Mac use your SSH account’s permissions.

During monitoring, MARC saves statistics about every five seconds on your Mac at ~/.local/share/marc/history.sqlite, under the SSH account you use. While monitoring is active, it periodically removes its own sample rows older than two hours. When monitoring stops, the database remains until you remove it or a later monitoring session prunes those rows. History tables from older collectors are left in place.

The recent live chart buffer and terminal display are held in app memory. Removing a saved Mac from MARC does not delete its history database, files or logs. You can remove those on the Mac using the account that owns them.

4. Optional AI services

AI starts Off, and you can use MARC without it. If you choose Local, your prompt goes through SSH to Ollama on the selected Mac. The service, model and configuration you run there determine how it processes requests, keeps logs or makes other network connections.

API providers

If you choose API, MARC asks for your permission before sending a prompt to the configured HTTPS endpoint. The request contains the prompt you submit, the selected model and instructions to suggest a shell command. Your saved API key is included if selected. The receiving service also sees your IP address and normal connection information.

The built-in presets connect to OpenAI at api.openai.com, Google Gemini at generativelanguage.googleapis.com and Groq at api.groq.com. If you use a custom endpoint, its operator receives the request. MARC shows the destination before you approve it.

Loading a provider’s model list asks for separate permission. That request sends the selected API key and normal connection information, but not your command prompt.

What is included in a request

MARC does not automatically add your terminal output, remote files, Mac passwords or SSH private keys to an AI request. Anything you type or paste into the prompt is sent, so leave out secrets or personal information you do not want the provider to receive.

Each provider sets its own rules for retention, human review, training and processing locations. Those rules can vary by your region and account plan, including between free and paid services. Read your provider’s current terms; I cannot promise that every provider or custom endpoint keeps nothing or never uses requests for training.

Your choices

You can cancel a pending request or switch AI Off in Settings → Terminal & AI. Canceling cannot take back information already sent. Switching AI Off or removing a saved key does not erase a provider’s records or revoke the key with that provider. Use its account settings or privacy contact for those actions.

AI-generated commands are suggestions. MARC sends one to your shell only when you tap Run. Please read it first.

5. Permissions, storage, and deletion

Local Network permission lets MARC discover and connect to nearby Macs. If you enable app locking, Apple’s device-authentication system handles Face ID or device authentication. MARC does not receive your face data. File and photo pickers let you select the items you want to transfer.

You can remove saved Macs in Settings. Use Settings → Keychain to manage SSH keys, API keys and trusted fingerprints. You can also switch AI Off and change permissions in iPhone Settings.

When you remove a Mac profile, MARC first deletes its saved connection credential. Once that succeeds, it removes the profile and its per-Mac preferences. Reusable SSH keys, trusted fingerprints and global AI settings are managed separately.

Uninstalling MARC does not reliably erase Keychain entries, remote files, exported copies, provider records or existing device backups. Remove saved secrets in MARC before uninstalling if you want to delete them. Data already held by your Mac, an AI provider or another destination follows that service’s own deletion rules.

There is no developer-operated MARC account to delete. If you want me to correct or delete information from a support conversation, use the contact below.

6. Support and privacy requests

I use support messages to answer your questions and help resolve problems. Those messages may include your email address, what you write and any attachments you send. Please do not include passwords, private SSH keys or API keys.

I delete resolved support correspondence from my active support records within 90 days after the issue is resolved, unless the law requires me to keep it longer. Email providers and existing backups may have their own retention rules. This period covers my support records, not files on your Mac or information held by AI providers.

For privacy questions or requests to access, correct or delete support information, email [email protected]. I may need enough information to confirm that the request concerns you. Your privacy rights depend on where you live.

7. Open-source transparency

MARC is open source under the MIT License. You can review how the app works—including its SSH connections, API requests and other network calls—on GitHub. Third-party dependencies have their own licenses, which are documented in the repository.

8. Website hosting and external services

This website serves information about MARC. The website code does not include advertising or behavioral analytics scripts and does not set tracking cookies. Its own images, styles and scripts are served with the site.

The web host and Cloudflare may process IP addresses, browser details and request information to deliver, troubleshoot and protect the site. Operational records are subject to the hosting services and server configuration. Contact me if you have questions about website request records.

Links to GitHub, GitHub Sponsors, Apple and AI-provider pages open those services. Information you submit there is handled under their own terms. Please do not put credentials or sensitive logs in a public GitHub issue.

9. Changes to this policy

I’ll update this policy and its effective date when MARC’s data practices change. Updating the policy does not replace permission that is needed before sharing your information.

If you open a provider policy, send an email or visit a hosted policy page, that website or email service receives the normal connection information needed to handle your request. Its own terms apply.