Your Mac, your data.

The Chrome extension

The Linda extension is in the Chrome Web Store. It is optional: without it, Linda works in its own browser.

• Only its own tabs. It acts only in tabs Linda opens itself, grouped as “Linda”, and only on sites you allow. It never lists, reads or changes your other tabs. Chrome shows its “debugging this browser” bar while Linda works.
• Only to your Mac. What it reads in those tabs (the page’s text and controls, a picture of the page) goes only to the Linda app on the same Mac, through Chrome’s native messaging. The extension sends nothing anywhere else.
• Nothing kept. It stores no history, no cookies of its own and no settings.

The Linda app

• Assistant on your Mac: when you choose an assistant that runs on your Mac, your tasks and what Linda reads stay on your Mac.
• Online assistant (optional): if you choose it, the task and the text Linda reads for it are sent to the provider you pick (OpenRouter, OpenAI, Anthropic, Google, Groq, Mistral, DeepSeek or your own server), with your own key. Passwords are never sent.
• Web search: when a task searches the web, Linda sends the search words, a short line from your request (so results fit the question) and a random id for the task to the search provider you pick in Settings › Web Search: Parallel by default, or Brave, Tavily, Exa or DuckDuckGo. Reading a page sends its address. Your memories, files, conversation and keys are never sent. Each provider’s own privacy policy applies.
• Voice: speech is turned into text on your Mac. Audio is never sent or kept.
• Passwords and keys live in your Mac’s Keychain, never in Linda’s files or memory.
• Updates: once a day Linda reads one public file on download.getlinda.app to see if a newer version is out. Nothing about you or your Mac is sent with it.
• Files: each task sees only its own folder and downloads, and the folder of the project you work in. Nothing carries over from one task to another.
• Before anything that can’t be undone (sending, buying, posting, sharing your details), Linda asks you.
• Downloads: assistants you choose to run on your Mac are downloaded from Hugging Face.

Usage counts (optional)

Off unless you turn on “Share usage counts” at the end of setup or in Settings › About. Then Linda sends metrics.getlinda.app counts that help us find what fails or is slow, under a random id you can reset there.

• What is sent: Linda’s version, macOS version, the chip and memory, Linda’s language, who thinks (on your Mac or online) and which assistant, the search provider; for each task, how it ended, how long it took, how many steps, which kinds of tools (search, pages, browser, files, commands, apps, skills), tokens and cost, approvals given or declined, and the specialist’s preset role.
• Never sent: what you ask, the replies, file or page text, file names, sites, addresses, memories, keys, your Mac’s serial or name.
• Kept for 13 months on Cloudflare, without IP addresses, and only used to improve Linda. Turning the switch off stops it at once.

News by email

Linda has no accounts. If you want to hear about new versions, you can leave your email address in the last step of setup, in Settings › About, or in the form at the bottom of this site. Nothing is sent until you press “Keep Me Posted”.

• What we keep: your address, Linda’s language, the version you had, where you joined (setup, Settings or the site), the sentence you agreed to and when. No IP address, no Mac identifier, nothing about your tasks, files or memories.
• Where: a database on Cloudflare (news.getlinda.app), used only to send Linda’s news. It is never sold or shared.
• Leaving: every email has a link to stop, and Settings › About › Stop News does the same. Leaving deletes your address; only a count of how many left each month is kept.

This website

If you accept in the bar at the bottom of the page, getlinda.app uses Google Analytics to count visits and see which pages people read. Google then receives your IP address and browser details and sets its own cookies. If you don’t, nothing is loaded from Google. You can change your choice under Cookie settings. This is only the website: the Linda app and the Chrome extension send nothing to Google Analytics. You can block it with any content blocker or Google’s opt-out add-on.

Your choices

Remove a project, a site or a memory in Linda’s Settings at any time. Stop Linda’s news from any of its emails or Settings › About. Remove the extension from Chrome’s Extensions page. Deleting Linda and its folder in Application Support removes everything it kept.

Questions

Write to hello@getlinda.app.