Privacy Policy

Anonymous Usage Data

Both apps send anonymous counts of what you use to PostHog, an analytics service. This is on unless you turn it off: on the Mac, Settings > General > Share anonymous usage data; on the iPhone, Settings > Share Anonymous Usage Data.

• What's sent: which features you use, like opening a Claude tab, starting an agent, pairing an iPhone, sending a reply, or answering a permission prompt, plus simple counts such as how many projects you have. Each install gets a random ID that isn't linked to you.
• What's never sent: your code, prompts, messages, file names, project or branch names, or your name or email.
• What's left out: location, time zone, language, and device name are removed before anything is sent, and PostHog is set to discard IP addresses.

The Mac App

Workbench runs on your Mac and keeps its settings and project list there. Besides the usage data above, it connects to:

• GitHub, to check for updates. If you install the GitHub CLI, Workbench also uses it to show your pull requests, checks, and deploys.
• Anthropic, using Claude Code's own sign-in, to read your plan's usage limits for the rings in the sidebar. Recaps, the one-line summaries of finished work, are written by Claude Code on your plan.
• Workbench's push service, when your iPhone has notifications or the Lock Screen dashboard turned on (see below). If you add your own Apple push key in Settings > iPhone, your Mac sends to Apple directly instead.

Claude Code, which you install separately, talks to Anthropic under Anthropic's own terms and privacy policy. Workbench doesn't change what Claude Code sends.

The iPhone App

The iPhone app connects directly to Workbench on your own Mac, over your own Tailscale network. Your projects, sessions, and code go from your Mac to your phone without passing through our servers.

• Camera: used only to scan the pairing code Workbench shows on your Mac. Nothing is recorded or saved.
• Pairing details: stored in your phone's keychain.
• Notifications: off unless you turn them on, and only for the projects you choose on your Mac. Your phone's notification token goes to your own Mac. Your Mac encrypts each notification's text so only your phone can read it, then sends it through Workbench's push service to Apple. The service and Apple only see "Open Workbench to see what happened." The service doesn't store or log anything.
• Lock Screen dashboard: if you turn it on, your Mac sends its updates through the same push service to Apple. These updates aren't encrypted yet: they include your Mac's name, project names, and a short line about each session, like what Claude is doing or asking. Nothing is stored or logged. Turn the dashboard off and these updates stop.

Children

Workbench isn't directed at children and doesn't knowingly collect information from anyone.

Changes to This Policy

If this policy changes, the new version will be posted here with a new date.

Questions?

Email matt@birchtree.me.