1. Your content
When you run a command, inputs drawn from your context (for example, selected content in the active app) are sent from your Mac directly to the provider whose key you used — OpenAI, Anthropic, Google Gemini, or xAI. Summon's servers are not involved in this request, and we never see your content, prompts, or results.
2. License activation
Summon uses Polar to manage license keys. When you activate your license, a device activation record is created via Polar's API, which may include a device label and your license key. Summon checks the license with Polar about once a day. This data is handled under Polar's privacy policy.
3. App usage analytics
The Summon app sends pseudonymous usage events to PostHog EU so we can see which features work and where people get stuck. Events include app launches, onboarding steps, permission status, whether an API key validated, which kind of command ran and whether it succeeded, rough text length ranges, the AI provider and model family used, and the app version and macOS version. Each install has a random Support ID instead of a name or email.
App analytics never include selected text, prompts, generated output, API keys, license keys, app names, window titles, document names, or file contents. You can turn them off at any time with Share usage data in Summon's Settings → General.
4. Website analytics
This website uses PostHog EU for pseudonymous website analytics. We use this to understand page views, referral sources, pricing interactions, CTA clicks, and handoffs to Polar checkout.
You can choose Use cookies for better measurement across sessions, or Cookieless only for aggregate website analytics without browser-stored analytics identifiers. You can change this at any time from the Analytics control in the footer.
Website analytics does not collect selected text, prompts, generated output, API keys, raw license keys, license key IDs, activation IDs, emails, payment details, app names, window titles, document names, file contents, or support message contents. Summon does not use ads, retargeting pixels, session replay, or heatmaps.
5. Updates and model list
Summon checks our server for app updates and for the latest list of AI models. These requests contain only standard information such as your IP address and the app version, and they carry no account or content data.
6. API keys
Your provider API keys are stored in the macOS Keychain on your Mac and are only sent to the provider they belong to.
7. Secure fields
Summon automatically ignores all secure text fields (e.g. password inputs) and never reads or processes their content.
8. Contact
For privacy-related questions, email hello@usesummon.com.