Privacy Policy
Last updated 6 November 2026
Most of what Rhythm does happens on your Mac, but not all of it. Some features talk to other services, and this page lists every one: who receives what, and when.
Rhythm has no account and no sign-up. It contains no analytics, no advertising and no crash reporting. Your dictation is transcribed on your Mac and the audio is never uploaded.
What stays on your Mac
- Dictation. Your voice is transcribed on your Mac’s Neural Engine. The audio is held in memory while it is processed and is not saved or uploaded. If there is no text field to put the words in, Rhythm saves the text in Clips so you don’t lose it. Where the text goes after that is up to you: see “Text you send to an agent” in the table below.
- Agent activity. To show what your coding agents are doing, Rhythm adds a hook to Claude Code’s settings (
~/.claude/settings.json) with your consent, and to Codex’s if you turn that on. Events reach Rhythm over a local socket. It also reads session files on your Mac, including Claude Code’s and Synara’s. Rhythm keeps session information on your Mac and does not send it anywhere. - Clips. Your notes, spells, and the screenshots and copied images you choose to import stay in Rhythm’s local database. Text in screenshots is read on your Mac with Apple’s Vision framework. Automatic clips are deleted after 7 days unless you change that in Settings.
- Text expansion. If you turn it on, Rhythm watches what you type so it can expand your abbreviations. This happens on your Mac and is not sent anywhere.
- Codex usage. Rhythm reads Codex’s rate-limit numbers from Codex’s own session files. No network call is made, and the conversation text in those files is not read.
- Your commit history. Rhythm counts your commits in local git repositories, in common folders such as
~/Projectsand~/Code, matched to your git name and email. The counts stay on your Mac. - System readings. CPU, GPU, memory and temperature are read and shown locally.
What leaves your Mac
Each row is one thing Rhythm sends. Anything not listed here is not sent.
| Feature | Who receives it | What is sent | When, and how to stop it |
|---|---|---|---|
| Update checks | GitHub, which hosts the update feed and downloads | Your IP address, and Rhythm’s name and version. No system profile is sent. | Automatically, about once a day. Updates download and install automatically. There is no setting to turn this off. |
| Voice model download | Hugging Face | Your IP address and the names of the model files. No audio or text. | Once, when you turn voice on (about 600 MB). If you never turn voice on, it never happens. |
| Claude usage | Anthropic | The Claude Code sign-in token that Rhythm reads from your Keychain, and your Claude Code version. Anthropic replies with your usage figures. The token is held in memory only and goes only to Anthropic. | When Rhythm starts, if it can read your Claude Code sign-in, then about once a minute. There is no setting to turn this off; signing out of Claude Code stops it. |
| Claude usage, fallback | Anthropic | The same token and a one-word test message (“x”) to Claude Haiku, limited to one token of reply. Rhythm reads your limits from the response headers. None of your own text is included. This counts as a real, very small request on your plan. | Only when Anthropic’s usage endpoint refuses Rhythm. At most every 10 minutes, while an agent session is active or the usage panel is open, or when you press connect or retry. |
| Antigravity and Gemini CLI usage | The sign-in token that Rhythm finds in your Keychain or in those tools’ files in your home folder, and your Google Cloud project ID. When the token has expired, Rhythm sends the saved refresh token and client details to Google for a new one. Google replies with your quota figures. | When Rhythm starts, if such a sign-in exists on your Mac, then about once a minute. There is no setting to turn this off; signing out of those tools stops it. | |
| Text you send to an agent | Anthropic, through your own Claude Code account | The prompt you type or dictate into a session you start in Rhythm. Rhythm runs the claude tool on your Mac and hands it the prompt. Text you dictate into other apps goes wherever those apps send it. | Only when you send a prompt. |
| Team Board | The teammates in your lobby | Your display name, status, cards and their history, messages, and a small JPEG (about 480 pixels) of any screenshot you add to a card. Each teammate keeps a copy on their Mac. Connections are encrypted between Macs. | Only after you go live, and at each launch once you have. Set your status to Offline to stop. |
| Team voice and screen | The teammates in your lobby | Your microphone while you hold to talk or have joined voice, and the window or display you choose to share. It is sent live, encrypted between Macs, and Rhythm does not record it. | Only while you are holding to talk, in voice, or sharing. |
| Finding teammates on your network | Everyone on your local network | Your display name, a random device ID, and hashes of your lobby code. If you turn on Visible on Wi-Fi for a lobby, also the lobby’s name and its code, readable by anyone on that network. | While you are live. Set your status to Offline to stop. |
| Connecting over the internet | Rhythm’s introduction service, a small Cloudflare Worker run for Rhythm | Your IP address, a hash of your lobby code, and sealed connection details. Those details are encrypted with a key from your lobby code, so the service passes them along without reading them. Rooms are held in memory and not stored. Cloudflare keeps request logs for the service. | While you are live, on by default. Turn off Connect over the internet in Settings › Connection. |
| Address lookup (STUN) | Cloudflare | Your IP address, so your Mac can learn how it appears to the internet. No content. | Whenever Rhythm opens a WebRTC connection to a teammate, including on the same network. Set your status to Offline to stop. |
| Relay (TURN) | Cloudflare | Your IP address and your encrypted board, voice and screen traffic. Cloudflare passes it along and can see how much is sent, but not what it says. | Only when a network blocks a direct connection. Turning off Connect over the internet stops it. |
| Tailscale | Your teammates, over your own Tailscale network | The same board, voice and screen data, carried directly between Macs and encrypted by Tailscale. Rhythm reads your Tailscale status on your Mac. Tailscale’s own service sees your devices under its own privacy policy, as it does with any Tailscale use. | While you are live, if Tailscale is installed and signed in. Turn off Sync over Tailscale in Settings › Connection. |
| GitHub contributions | GitHub, through your own gh sign-in | A request for your own contribution calendar. GitHub replies with your username and daily counts. Nothing from your local repositories is sent. | Only if gh is installed and signed in, when the Board’s Completed column is on screen, at most every 30 minutes. Sign out of gh to stop it. |
Lobby codes
Anyone with a lobby’s code can join that lobby and see its board. Treat the code like a password, and share it only with people you want in. Removing a lobby from your list does not delete what teammates already have.
What other services do with your data
When Rhythm talks to Anthropic, Google, GitHub, Hugging Face, Cloudflare or Tailscale, that company handles the request under its own privacy policy. Rhythm doesn’t receive a copy of anything sent to them.
Permissions
macOS asks before Rhythm can use the microphone, the local network, Accessibility, Input Monitoring, Screen Recording, or the folders where your screenshots are saved. You can change these at any time in System Settings. Reading your Claude Code sign-in does not always show a prompt, because Rhythm uses Apple’s security tool, which Claude Code’s Keychain item may already allow.
Deleting your data
Rhythm’s data is on your Mac, in ~/Library/Application Support/com.silca.rhythm. Deleting that folder removes your clips and boards from this Mac. It does not remove copies your teammates hold. Rhythm’s developer holds no copy of your data, so there is nothing else to delete.
This website
This site is static. It sets no cookies and has no analytics. Its fonts are loaded from Google Fonts, so Google receives your IP address when you visit.
Cloudflare hosts this site, so it receives your IP address when you visit.
Changes
If Rhythm starts sending anything new, this page will change first and the date at the top will show it.
Contact
Rhythm is in private preview. For any question about this page, ask the person who invited you.