Summary in five lines
- EscutAdor listens to the conversation and turns it into text on your Mac. The audio never leaves the computer.
- To suggest an answer, the app sends the text of the question (and, depending on the mode, a short excerpt of the conversation) to the Anthropic API, using your own key.
- We at Hasman Corp receive nothing. No server of ours, no usage analytics, no tracking.
- What stays on your Mac (key, profile, log) is yours to see and delete whenever you want. The question log ships off.
- The app hears the other people in the conversation. Informing the participants is your responsibility, wherever the law or your organization requires it.
What the app accesses on your Mac, and why
| Access | Purpose | How macOS asks |
|---|---|---|
| System audio (the sound coming out of the Mac: a call, a video, a lecture) | Transcribe what the other people say and find the questions | The "System Audio Recording" permission, the first time you click Listen |
| Microphone (you and the room) | Transcribe what you or the people near you say, in Microphone or Both mode | The "Microphone" permission, the first time you use that mode |
| Apple speech recognition | Turn audio into text, in English or Brazilian Portuguese (your choice in Settings) | Runs on the Mac itself and sends no audio to Apple. On first use, macOS may download Apple's language model (that is Apple's traffic, not the app's) |
| Internet | A single destination: the Anthropic API (api.anthropic.com) | No extra permission; it is the only address the app calls |
The app does not ask for screen recording and does not access files, camera, contacts, location or calendar.
What stays on your Mac and never leaves
| Data | Where it lives | How to delete it |
|---|---|---|
| Your Anthropic API key | In the macOS Keychain, protected by the system, on this Mac only (it does not go to iCloud) | EscutAdor Settings › "Remove key" |
| "Who you are in this conversation" (the text you write about your role and topic) | In the app's preferences, inside the app container | Clear the text in Settings, or uninstall the app |
| Preferences (chosen mode, pinned window, conversation language, consent accepted) | In the app's preferences | Uninstall the app |
| Question-and-answer log (optional, off by default) | Files inside the app container, readable only by your macOS user | Settings › "Delete log" (deletes everything at once) |
| Session cost (how many requests and what they cost, in US dollars) | Only in memory while the app is open; if the log is on, it is stored along with it | Same as the log |
| Audio | Nowhere. The app never writes audio to disk. | Nothing to delete |
| Full transcript | Nowhere. Only recent text stays in memory (the last few hundred words, enough for 1:20 of conversation) and is discarded when listening stops. | Nothing to delete |
Container path, for anyone who wants to check in Finder: ~/Library/Containers/dev.hasman.escuta/Data/Library/Application Support/EscutAdor/
Uninstalling the app (dragging it to the Trash) removes everything above except the key in the Keychain, which you remove first with the "Remove key" button or with the Keychain Access app.
What leaves your Mac, to whom, and under which rules
Only text leaves. It goes only to Anthropic. It goes only with your key.
For every question it detects, the app makes one request to the Anthropic API (Claude Haiku model), sending:
- the text of the question the app detected;
- a short excerpt of the preceding conversation, as text, with a length set by the mode (see section 04). In Privacy Mode, no excerpt at all;
- the "who you are in this conversation" text you wrote in Settings (up to 500 characters);
- the app's fixed instructions to the model (how to answer, in what tone);
- your API key, in the request header, so Anthropic knows the account is yours;
- the app's identification (
EscutAdor/<version>), so Anthropic knows which program made the request.
Settings has a "What was sent" panel with the exact text of the last request, so you can check for yourself.
Who receives it: Anthropic
Anthropic is the company that operates the Claude API. The request leaves from your account, with your key, under the terms you accepted when you created your Anthropic account (its Commercial Terms and Privacy Policy). EscutAdor is only the program that assembles the request on your Mac; there is no intermediary.
How long Anthropic keeps what it receives through the API, and whether it uses that content to train models, is Anthropic's rule, not ours, and it can change without this page knowing. Check the source on the day you read this: how long Anthropic stores your data and API and data retention.
Because the account is yours, you use Anthropic's tools (console, spend limits, data deletion) directly. Hasman Corp has no access to your account or to your requests.
What never leaves
- Audio. Neither the system's nor the microphone's. Not one second.
- The full transcript. Only the short excerpt set by the mode, and only alongside a question.
- Identifiers of your Mac (serial number, computer name, hardware address, advertising ID). The app reads none of them.
- Your name, email or Apple Account. The app has no login.
- Anything at all to Hasman Corp. There is no server of ours. The app has no usage analytics, sends no automatic crash reports and has no tracking of any kind.
- Nothing to other services. The only address the app calls is
api.anthropic.com, fixed in the code.
What changes per mode
The mode sets how much text of the preceding conversation goes along with the question. More context helps the model answer questions like "and what about that?", but it sends more of what other people said.
| Mode | What goes with the question | How to get it |
|---|---|---|
| Privacy Mode | Nothing. Only the text of the question. | In-app purchase |
| Standard | Up to about 35 seconds of conversation, as text, before the question | Included |
| Super Listener Mode | Up to 1 minute or 1 minute 20 seconds of conversation, as text, before the question (your choice) | In-app purchase |
In every mode: the audio never leaves; the question and the excerpt are cut at a character limit; if the question stands on its own (no "this", "that", "he" or "she"), the app shrinks the excerpt automatically. The local log works the same in every mode (off by default).
Local log: how to turn it on, see it and delete it
- Ships off. Turn it on in Settings › "Keep a log of questions and answers on this Mac".
- It stores: date and time, where the question came from (Mac audio or microphone), the text of the question and the answer. It does not store audio or the whole conversation.
- The files are readable only by your macOS user. "Show in Finder" opens the folder.
- To delete it: Settings › "Delete log". Deletes questions, answers and costs at once.
- Remember: if the log is on, it contains other people's words. Treat it the way you would treat meeting notes.
In-app purchases
The two extra modes are one-time purchases (non-consumable), processed by Apple through the App Store (StoreKit). Apple receives the payment and holds your card and Apple Account details, under Apple's privacy policy. Hasman Corp never sees your card, name or email; it receives only aggregated sales reports from Apple. To restore a purchase on another Mac with the same Apple Account: Settings › "Restore purchases".
The other people in the conversation: your responsibility
EscutAdor hears everyone in the call, the video or the room. That means the text of what other people said may go to Anthropic along with the question (except in Privacy Mode) and, if the log is on, may be stored on your Mac.
So:
- You are responsible for telling the participants that the conversation is being listened to and processed by an assistant, whenever the law of your country, your organization's rules or common sense require it. In many places this is mandatory.
- The app shows a visible indicator that it is listening (a red dot and "Listening" in the menu bar; "LISTENING" in the window). There is no hidden mode, and the indicator cannot be turned off.
- On first launch, the app asks you to read and accept this notice before it listens to anything.
- Use Privacy Mode whenever you want no third-party speech to leave the Mac.
- The app is not made to record people without their knowledge, and must not be used that way.
LGPD and GDPR, in plain language
Who is responsible for what
- The data the app sends to Anthropic leaves from your account and by your decision. Under the law, you (or your organization) are the controller of that data; Anthropic processes it under the contract you have with them; Hasman Corp does not receive, store or process any data from you or from the participants.
- Since we receive no data, there is nothing to ask Hasman Corp to access, correct or delete: everything that exists is on your Mac (section 02) and in your Anthropic account (section 03). You exercise those rights directly in both places.
Your rights, and where to exercise them
LGPD, art. 18; GDPR, arts. 15 to 22.
| Right | Where |
|---|---|
| Know what exists | Section 02 of this page and the "What was sent" panel in Settings |
| Access | The log in Finder (if on); the Anthropic console for the requests |
| Delete | Settings › "Delete log" and "Remove key"; your Anthropic account for what is there |
| Take it with you (portability) | The log is a plain text file (JSON Lines); copy it |
| Withdraw consent | Stop using the app or uninstall it; for Anthropic, delete the key in your account there |
Legal basis
The app works on your consent (the first-launch screen) and to carry out what you asked for (answering questions). For other people's data, the legal basis is whatever you have in your context (their consent, your organization's legitimate interest, and so on); that is why informing the participants is your responsibility.
International transfer
Anthropic is a United States company and may process the requests outside Brazil and the European Union. Which regions that happens in is defined by Anthropic, under the terms you accepted when you created your account there; that is where the up-to-date information lives.
Minors
The app is not intended for children under 13 (the minimum age for an Anthropic account is 18). We collect no data from anyone, so we hold no data about minors.
Data protection officer and privacy contact: [email protected].
Security
- The key lives in the macOS Keychain, protected by the system, and is never synced to other devices.
- The connection to Anthropic uses HTTPS (TLS) under Apple's default App Transport Security rules.
- The app runs in the macOS App Sandbox with minimal permissions: system audio, microphone and outgoing network. Nothing else.
- No file the app writes is readable by other users of the same Mac.
Changes to this policy
If we change what the app sends, to whom, or for how long anything is kept, we update this page and the date at the top and, if the change matters, the app asks for your consent again on the next launch. Earlier versions are available on request by email.
Contact
Hasman Corp
Email: [email protected]
Support page: escutador.app/en/support/