Signer Labs（下称「我们」）开发了 Mac 上的助手应用 Klee（下称「应用」），并运营它背后的服务和本网站。这份隐私政策说明：哪些东西留在你的 Mac 上，哪些经过我们的服务器，我们保存什么，以及还有哪些公司参与。
- 留在你的 Mac 上
- 对话记录、文件、技能和设置。
- 经过我们的服务器，但不保存
- 你说的话，以及 Klee 为完成任务读到的内容。它们经过我们的网关发给 Anthropic 的 Claude 模型，回答再原路返回。
- 保存在我们的服务器上
- 邮箱、余额和充值记录、每次请求的用量数字、注册时的国家代码、登录记录。
- 由其他公司处理
- 模型由 Anthropic 提供，付款由 Stripe 处理，服务器托管在 Cloudflare，登录验证码由邮件发送服务商寄出。
1. 留在你 Mac 上的
下面这些只存在你自己的电脑上，在 Klee 的数据文件夹和你的工作文件夹里：
- 每个任务的对话记录和任务列表；
- Klee 读过、新建或改过的文件；
- 你添加的技能、你的设置、你贴进对话的图片；
- 让这台 Mac 保持登录状态的登录凭据。
它们会一直留在那里，直到你自己删除。我们没有副本，看不到，也没法替你恢复或删除。
2. 发给模型的
你交给 Klee 一件事的时候，应用会把下面这些内容从你的 Mac 经过我们的网关，发给 Anthropic 的 Claude 模型：
- 你输入的话，以及你附上的图片；
- Klee 做这件事时读到或产生的内容，比如它打开的文件的内容、它运行的命令的输出、它上网查到的结果；
- 同一次对话里前面说过的内容，这样模型才知道上下文。
读什么由 Klee 边做边定。如果任务需要，它可能打开你没有点名的文件，比如工作文件夹里的其他文件，包括它在那里找到的笔记或说明文件。
我们的网关确认请求来自一个已登录、余额足够的账号，把它转给 Anthropic，再把回答转回来。请求和回答的内容不写进日志，也不存进数据库。
Anthropic 为了生成回答而处理这些内容，适用它自己的条款和隐私政策。
如果任务需要上网查东西，或者用到你自己接入的工具，相应的请求会发给那个网站或工具，由它按自己的政策处理。
3. 我们的服务器保存的
我们只保存管理账号和计费所必需的信息：
- 邮箱：用来给你发一次性的登录验证码，以及就账号或充值的事联系你。
- 余额和充值记录：你还有多少额度，买过哪些额度包、什么时候买的、多少钱，以及 Stripe 给每笔付款的编号。
- 用量数字：每次请求用的是哪个模型、用了多少 token、花了多少钱、发生在什么时间，以及 Anthropic 给这次请求的编号。这里面不包含说了什么、读了什么。
- 国家代码：注册时记录的两个字母，比如 US。
- 登录记录：你的哪些 Mac 处于登录状态（应用报上来的设备名）、各自最近一次使用的时间，这样才能让某一处登录失效。一次性验证码只以不可还原的形式保存，用过或过期即作废。
我们不保存：你的对话、你的请求和 Klee 的回答、文件的名字和内容、运行过的命令。
应用或你的浏览器连接我们的服务器时，我们和托管服务商能看到连接来自哪个网络地址（IP 地址），任何互联网服务都是如此。我们用它来得出注册时记录的国家代码，以及防止滥用（比如短时间内反复请求验证码）。它不会存进你的账号。
4. 付款
付款由 Stripe 处理。你买额度时，应用会在浏览器里打开 Stripe 的付款页面，卡号等付款信息填在那里。Stripe 告诉我们这笔付款成功了、金额是多少，我们据此给你加额度。卡号不经过我们，我们也不保存。
5. 参与的其他公司
- Anthropic：提供 Claude 模型，处理第 2 节所说的内容。
- Stripe：处理付款。
- Cloudflare：托管我们的网关、数据库和本网站。
- 邮件发送服务商：把登录验证码寄到你的邮箱，因此会收到你的邮箱地址和那封邮件。
我们不出售、不出租你的个人信息，也不把它用于广告。
6. 本网站
本网站不用 cookie，没有统计和追踪，不加载任何其他公司的资源。它会把你选的语言记在浏览器的本地存储里，这个记录不会发给我们。和所有网站一样，托管服务商（Cloudflare）会为了送达页面和防止滥用而处理每次访问的网络地址和浏览器信息。
7. 保存多久
只要你的账号还在，我们就保留第 3 节所列的信息。一处登录连续 90 天没有使用，会自动失效。你要求删除账号后，我们会删除这些信息，但依法必须保留的记录（比如付款记录）除外。
8. 你可以做的
- 让 Klee 处理什么，由你决定：你说什么、选哪个工作文件夹，它就在那个范围里做事。
- 换成手动模式，每次改文件、运行命令之前都要你同意。
- 在应用里删除任务。删掉的任务会进你 Mac 的废纸篓。
- 随时退出登录。
- 写信到 wei@signerlabs.com，可以要一份我们保存的账号信息、更正邮箱，或者删除账号。
你所在地的法律可能还给了你其他权利，比如反对某些使用方式，或向数据保护机构投诉。无论你住在哪里，我们都会答复你的请求。
9. 安全，以及数据在哪里处理
应用、我们的服务器、Anthropic 和 Stripe 之间的连接都是加密的（HTTPS）。我们和上面这些公司在美国及其他国家运营，所以你的信息可能在你居住的国家以外被处理。没有哪个系统是绝对安全的；如果发生了影响到你的信息的安全事件，我们会依法通知你。
10. 年龄
Klee 只给成年人使用，不面向未满 18 岁的人，我们也不会在知情的情况下收集未满 18 岁的人的个人信息。如果你认为有未成年人向我们提供了信息，请联系我们，我们会删除。
11. 政策的变更
我们可能不时更新这份隐私政策。更新后的版本会发布在本页，并修改「最后更新」的日期。
12. 联系我们
对这份隐私政策有疑问，请联系：
这份政策有中文和英文两个版本。两个版本不一致时，以英文版为准。
Signer Labs (“we,” “us,” or “our”) makes Klee, an assistant app for the Mac (the “App”), and runs the service behind it and this website. This Privacy Policy explains what stays on your Mac, what passes through our servers, what we keep, and which other companies are involved.
- Stays on your Mac
- Your conversations, files, skills and settings.
- Passes through our servers, not kept
- What you say, and what Klee reads in order to do a task. It goes through our gateway to Anthropic's Claude models, and the answer comes back the same way.
- Kept on our servers
- Your email address, your balance and purchase records, usage figures for each request, the country code from when you signed up, and sign-in records.
- Handled by other companies
- The models are provided by Anthropic, payments are handled by Stripe, our servers are hosted by Cloudflare, and sign-in codes are sent by an email delivery provider.
1. What stays on your Mac
The following exist only on your own computer, in Klee's data folder and in your working folder:
- the conversation for each task, and your list of tasks;
- the files Klee reads, creates or changes;
- skills you add, your settings, and images you attach to a conversation;
- the sign-in credential that keeps this Mac signed in.
They stay there until you delete them. We have no copy, we cannot see them, and we cannot restore or delete them for you.
2. What is sent to the model
When you give Klee a task, the App sends the following from your Mac, through our gateway, to Anthropic's Claude models:
- what you type, and any images you attach;
- what Klee reads or produces while working on the task, such as the contents of files it opens, the output of commands it runs, and the results of anything it looks up online;
- the earlier part of the same conversation, so that the model knows what has been said.
Klee decides what to read as it works. If the task leads there, it may open files you did not name, for example other files in your working folder, including notes or instruction files it finds there.
Our gateway checks that the request comes from a signed-in account with enough balance, forwards it to Anthropic, and passes the answer back. The content of requests and answers is not written to a log or stored in a database.
Anthropic processes this content in order to produce the answer, under its own terms and privacy policy.
If a task involves looking something up online, or uses a tool you have connected yourself, the request goes to that website or tool, which handles it under its own policy.
3. What our servers keep
We keep only what is needed to run your account and to charge for usage:
- Email address: to send you a one-time sign-in code, and to contact you about your account or purchases.
- Balance and purchase records: how much credit you have, which credit packs you bought, when and for how much, and Stripe's reference for each payment.
- Usage figures: for each request, which model was used, how many tokens it used, what it cost and when, together with Anthropic's identifier for the request. None of this includes what was said or read.
- Country code: two letters, such as US, recorded when you sign up.
- Sign-in records: which of your Macs are signed in (the device name the App reports) and when each was last used, so that a sign-in can be ended. One-time codes are kept only in a form that cannot be read back, and stop working once used or expired.
We do not keep your conversations, your requests or Klee's answers, the names or contents of your files, or the commands that were run.
When the App or your browser connects to our servers, we and our hosting provider can see the network address (IP address) the connection comes from, as with any internet service. We use it to work out the country code recorded at sign-up and to limit abuse, such as repeated requests for sign-in codes. It is not stored in your account.
4. Payments
Payments are handled by Stripe. When you buy credit, the App opens Stripe's payment page in your browser, and you enter your card or other payment details there. Stripe tells us that the payment succeeded and for how much, and we add the credit to your account. Your card number never reaches us, and we do not store it.
5. Other companies involved
- Anthropic: provides the Claude models and processes the content described in Section 2.
- Stripe: handles payments.
- Cloudflare: hosts our gateway, our database and this website.
- An email delivery provider: sends the sign-in code to your inbox, and so receives your email address and that message.
We do not sell or rent your personal information, and we do not use it for advertising.
6. This website
This website uses no cookies, has no analytics or tracking, and loads nothing from other companies. It remembers the language you chose in your browser's local storage; that record is not sent to us. As with any website, the hosting provider (Cloudflare) processes the network address and browser details of each visit in order to deliver the page and protect against abuse.
7. How long we keep it
We keep the information listed in Section 3 for as long as you have an account. A sign-in that has not been used for 90 days stops working. If you ask us to delete your account, we delete this information, except for records we are required by law to keep, such as records of payments.
8. Your choices
- You decide what Klee works on: it acts on what you ask, in the working folder you choose.
- Switch to Manual mode, and every file change and every command needs your approval first.
- Delete tasks in the App. Deleted tasks go to the Trash on your Mac.
- Sign out at any time.
- Write to wei@signerlabs.com to get a copy of the account information we hold, to correct your email address, or to delete your account.
The law where you live may give you further rights, such as the right to object to certain uses of your information or to complain to a data protection authority. We will answer your request wherever you live.
9. Security, and where data is processed
Connections between the App, our servers, Anthropic and Stripe are encrypted (HTTPS). We and the companies listed above operate in the United States and other countries, so your information may be processed outside the country where you live. No system is perfectly secure; if a security incident affects your information, we will notify you as the law requires.
10. Age
Klee is for adults. It is not directed to anyone under 18, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has given us information, please contact us and we will delete it.
11. Changes to this policy
We may update this Privacy Policy from time to time. We will post the new version on this page and update the “Last updated” date.
12. Contact us
If you have questions about this Privacy Policy, please contact us:
This policy is provided in English and Chinese. If the two versions differ, the English version prevails.