Privacy

• The app wants no account and sends us nothing: not the content, not usage statistics, not crash reports.
• Storing, searching and computing vectors all happen on your Mac. The only feature that sends anything to the internet is the Conversation tab, and only if you supply your own key and press the button: it sends the text to Anthropic, in your name, without passing through us.
• We do not train any model on your data, we do not sell it, we do not use it for advertising and we do not build profiles from it.
• The only personal data that reaches us is whatever is in the emails you send and the visits to this website.
• This website uses Google Analytics, which sets cookies, and Vercel analytics, which does not. The details are in This website.
• You have the right to access the data we hold about you, correct it, erase it and object to its processing. Write to esfis@f.cat.

The controller for the processing described in this policy is the owner of esfis, a project by f.cat, with an office on carrer de Pallars, in Poblenou, Barcelona. For any privacy matter, write to esfis@f.cat. A person answers, not an automated form.

This policy applies in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”), Spanish Organic Law 3/2018 on the protection of personal data and the guarantee of digital rights (“LOPDGDD”) and Spanish Law 34/2002 on information society services and electronic commerce (“LSSI”).

This policy covers:

• the macOS app, the esfis command line and the MCP server built into it;
• the esfis.com website;
• the emails you send us, early access requests included.

It does not cover the AI agents you open or connect to esfis, the model providers you hold your own account with, or any other third-party service. Each has its own policy, and that policy governs what it does with what it receives.

Everything esfis stores is on your Mac:

Agents, usage and activity. To show how much each agent has used and what has happened in each project, the app reads files that are already on your disk: the session logs the agents leave behind (such as ~/.claude/projects, ~/.codex/sessions or ~/.grok/sessions), Git's HEAD and the modification dates of the files in the folders you add. It reads them to show them to you, and sends them nowhere.

No telemetry. The app makes no internet connection other than Conversation, plus the local one to Ollama (127.0.0.1) if you use it. There are no usage statistics, no background update checks and no automatic crash reports. To fill Antigravity's model menu, the app runs agy models, that CLI's own command, which asks its provider for the list exactly as it would from your terminal. We do not know how often you open the app, which projects you keep in it or what you store there.

You are in control. You can inspect it, copy it, move it or delete it whenever you like. Uninstalling the app does not delete ~/.esfis; deleting the folder does, permanently, because we hold no copy of it. Since this data never reaches us, we cannot see it, restore it or delete it on your behalf.

The Conversation tab reads a conversation you paste into it and proposes what is worth remembering. To do that, it sends the Anthropic API (api.anthropic.com) the text of the conversation, the extraction instructions and the related items you already have, so the model does not propose duplicates.

• It only happens when you press the button. With no API key, this tab sends nothing.
• The call goes straight from your Mac to Anthropic, with your key. It does not pass through our servers and we see neither the text nor the result.
• In that relationship, Anthropic's customer is you. What Anthropic does with the text it receives is governed by the terms and the privacy policy you accepted when you created the key.
• Do not paste in third-party data you have no right to process, or special categories of data (health, political opinions, religion, sexual orientation and the like).

If you would rather nothing left the Mac, do not use Conversation: the rest of the app works exactly the same, and agents can store items directly over MCP.

When you connect an agent (Claude Code, Codex, Cursor or any MCP client), the esfis MCP server runs on your Mac and talks to the agent over standard input and output, without opening any network port.

Each query hands the agent the items your policies allow for that agent and that space. From there on, that context is part of the conversation with the agent, and what the provider does with it — storing it, sending it to its servers, training on it — is governed by its terms, not by these. The agents you open in esfis tabs are your own CLIs, and they talk to their providers exactly as they would outside esfis.

Before connecting an agent, look at how it treats conversations. esfis --why and the Test tab tell you what each one received on each query, so you can adjust the policies knowing what you are adjusting.

You do not have to take our word for it:

• Open ~/.esfis and look: it is a SQLite database and text files.
• With an application firewall such as Little Snitch or LuLu, you will see the app connect only to api.anthropic.com when you use Conversation, and to 127.0.0.1 if you use Ollama.
• Run esfis --why to see what each agent received, what stayed out and why.

If you ever see something that does not match this page, write to us: it is a bug, and we will fix it.

Hosting. The site is served by Vercel. Like any server, it receives your IP address, your browser, the page you request and the one that sent you there, and it keeps technical logs for a short period in order to run the site and protect it from abuse. Legal basis: our legitimate interest in offering a site that is secure and works (GDPR article 6(1)(f)).

Google Analytics 4. We use Google Analytics (property G-L2435X9GBC) to know how many visits each page gets, where they come from and which route they take. It loads on every page, sets cookies (_ga, _ga_*) and sends Google your IP address, browser and device data, the pages you visit and how long you spend on them. GA4 does not store IP addresses. We use this data only in aggregate reports, we do not enable Google signals for advertising and we do not combine it with any other data about you. Legal basis: our legitimate interest in understanding the site's audience in aggregate. You can object at any time by blocking the cookies or the googletagmanager.com domain in your browser, with a content blocker, or with the Google Analytics opt-out add-on. The site works just the same.

Vercel Web Analytics and Speed Insights. They measure visits and performance in aggregate. They are served from this same domain, set no cookies, store nothing in your browser and cannot follow you from one visit to the next. Legal basis: legitimate interest.

Typefaces. The Inter and JetBrains Mono typefaces are loaded from Google Fonts (fonts.googleapis.com and fonts.gstatic.com). Google sees your IP address and your browser, as it would with any external resource, but Google Fonts sets no cookies.

Prefetching. To make navigation fast, your browser may download pages from this same site in advance when you are likely to open them. Those requests go to no third party.

The site has no accounts, no forms and no comments, and it uses no other tracking tool, no advertising pixel and no embedded social network.

This is the complete list of what the site stores in your browser:

The last two exist only in your browser: they are never sent to us and we never read them. They serve a feature you chose to use, which is why they do not ask for consent.

You can view and delete all of this from your browser settings. Deleting it breaks nothing: at worst, you will see the default theme again.

This website has no forms. The only way to write to us, early access requests included, is by email, at esfis@f.cat. If you do, we receive your address, whatever name it carries and whatever you have written, such as which agents you use or which Mac you have.

We use it only to reply to you, to decide when to open access to you and to send you the app and the notices that depend on it, such as an important update or a change to these terms. Legal basis: your consent in writing to us, and the steps you ask us to take before you use the app (GDPR articles 6(1)(a) and 6(1)(b)).

We have no newsletter and no mailing list, and we will not send you advertising. If we ever have one, we will ask for your explicit consent, every email will carry an unsubscribe link, and we will say so here.

We share data only with the providers we need in order to run the website and the email:

When a provider processes data outside the European Economic Area, the transfer is made under the EU-US Data Privacy Framework, if the provider is certified under it, or under standard contractual clauses approved by the European Commission.

Anthropic and the agents' providers are not on this list because they are not our providers: if you use Conversation or an agent, that relationship is directly between you and them.

Beyond that, we will only disclose data if the law or a judicial or administrative decision requires it, and we will do so as narrowly as possible. Where it is lawful to do so, we will tell you first. In any case, we could disclose nothing of your context: we do not have it.

The best protection is not holding the data: that is why the context is on your Mac and not on our servers. For the rest, we apply measures proportionate to the risk: encrypted connections with HTTPS and HSTS across the site, email access restricted to the people who need it, and protected credentials.

The security of ~/.esfis depends on the security of your Mac. We recommend turning on FileVault, protecting your user account with a password, and keeping an eye on compiled files with private context so they do not end up in a public repository.

If we detected a security breach affecting personal data we process, we would notify the Spanish Data Protection Agency within 72 hours and tell you without delay if there were a high risk to your rights.

If you find a vulnerability, write to esfis@f.cat.

These commitments do not depend on any version:

• We will not add telemetry, usage statistics or automatic crash reports without asking you first, and they will always be possible to switch off.
• We will not send your context to any server, ours or anybody else's, unless you turn it on.
• If there is ever a feature that has to keep it off your Mac, it will be encrypted with keys only you hold.
• We will not record your screen, we will not read your mail, and we will not look at anything outside the folders you point us at.
• We will not sell or rent data to anyone, or use it for advertising or to train models.

esfis is not aimed at children under 14 and we do not knowingly process their data. If you are a parent or guardian and believe a child has written to us, tell us and we will delete the email.

As regards the personal data we process, you have the right to:

• access it and know how we process it;
• rectify it if it is inaccurate or incomplete;
• erase it when it is no longer needed or you withdraw consent;
• object to processing based on our legitimate interest, such as website analytics;
• restrict its processing while a complaint is resolved;
• port it to another service in a structured, commonly used format;
• withdraw consent at any time, without affecting processing carried out beforehand;
• not be subject to decisions based solely on automated processing. We take none.

Write to esfis@f.cat saying which right you want to exercise. If necessary, we will ask for the bare minimum needed to confirm it is you. We will reply within one month at most, extendable by two more if the request is complex, and we will tell you if that happens.

The app's data never reaches us: you control it directly. Rights over anything you have sent to Anthropic or to an agent must be exercised with that provider.

If you believe we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency. We would be grateful if you wrote to us first, in case we can sort it out.

If we change this policy, we will update the date at the top. Changes affecting what leaves your Mac, who receives data or what we use it for will be announced in the changelog at least 30 days before they take effect, and by email to everyone with early access. We will never use data we already hold for a new purpose without telling you and, where required, asking for your consent.

Privacy questions, doubts or requests, and any security matter: esfis@f.cat.