Eney Privacy Notice
Welcome to Eney
Eney is a proactive AI assistant that helps you get things done on your Mac and iPhone and across the apps you connect to it.
To do that, Eney works with some of your data: what you ask for, and the content it needs to complete a task. This Privacy Notice explains, in plain language, what data Eney uses and why, where it’s processed (on your device or in the cloud by our AI providers), who we share it with, how long we keep it, and what choices you have.
You decide what Eney can access and you can change these permissions at any time in Settings.
This Notice applies to Eney for Mac and iPhone, including when you try Eney before creating an account, and to the eney.ai website. Eney for Mac is distributed through Setapp, MacPaw’s app platform. Your Setapp account, subscription, and payments are covered by the Setapp Privacy Notice.
Eney keeps evolving. When we add features that change how your data is used, we’ll update this Notice and let you know about significant changes.
Please read this Notice together with the Eney’s Terms of Service.
I. About Us and Applicability
The data controller of Your Personal Data is MacPaw Way Ltd. (hereinafter “We/we”, “Us/us”, “Our/our” or “MacPaw”), registration number 428214, registered address: 25 Serifou, Allure Center 11, Office No. 11-12, 2nd Floor, 3046 Zakaki, Limassol, Cyprus.
[email protected]
macpaw.com
By You we mean anyone who uses Eney, with or without Setapp account, as well as any Developer (Vendor) if you are a party to the License Agreement with us and, where applicable, individuals who participate in meetings recorded using Meeting Assistant (see “Information for Meeting Participants”).
This Privacy Notice applies to Eney for Mac, the Eney iOS app and to eney.ai website. This Privacy Notice does not apply to:
- Third-party services. Third-party services that you use through Eney (for example, connected apps and services, web search and maps) process the data they receive under their own terms and privacy policies. Sections V and VII explain what Eney sends to them; and
- Personal Data that we process about you when you interact as a user with other products/services or our branded social media pages under the brand name “MacPaw”. In such cases, the relevant privacy notice for each product/service you interact with will apply accordingly.
- Your use of and interactions with our website, MacPaw (Website or Site). The Site’s policy can be found by following this link. When you use the Website, we collect and use cookies and other tracking technologies; the relevant Cookie Notice can be found here.
- Your use of and interactions with our Setapp website. The Site’s policy can be found by following this link. When you use the Setapp website, we collect and use cookies and other tracking technologies; the relevant Cookie Policy can be found by following this link
- Anonymized data.
You can stop using Eney at any time. You can also ask us to delete your personal data, as described in Section XI “Your Rights”.
II. AI Outputs and Human Review
Short summary: Eney uses AI and can make mistakes. If an answer looks wrong or unexpected, tell us via App Settings - Share Feedback.
Eney’s answers and suggestions are generated by AI models. They may be inaccurate, incomplete or out of date, so please check important information before you rely on it. We regularly improve Eney and may change the AI model used for a feature without an app update.
Eney does not make any decisions that produce legal effects concerning you or similarly significantly affect you. Its answers and suggestions are for guidance only. If you have concerns about an AI-generated output, you can ask for a review by our team via App Settings - Share Feedback or by contacting us (Section XIII). We will get back to you within 30 days.
III. Your Data and Vocabulary
To help you understand and navigate this Privacy Notice, here are short explanations of key terms we use:
Account information – your email (when you want to contact us or provide feedback), Unique Account ID, username, or sign in with a token. Eney is part of the Setapp platform, so your existing account details for Setapp are also held by us. You may be able to try Eney for a limited number of requests before you create or sign in to a Setapp account. During this time, Eney identifies your installation with a random installation identifier to count your free requests and record your privacy choices; your requests are processed as described in Section IV. When you sign in, Setapp shares your Setapp ID with Eney to authenticate you, and we link this information to your account. Those are covered by the Setapp Privacy Notice, but relevant parts are summarized here for convenience. If you use the Eney iOS app without signing in, Eney identifies your installation with a random installation identifier instead of your Setapp ID.
User Input – the requests you give Eney: text you type, requests you dictate by voice, and images, screenshots and files you add to a chat. Images and screenshots may show information about other peoplet.
User Interaction – information about how you use Eney (e.g., clicks, task requests, usage patterns).
Device Data – basic technical info about your computer or iPhone, like its operating system version, installed apps, IP, and system logs, running processes, CPU, memory and disk usage, crash reports, and the app you are using. This data is used to make Eney work better for you and helps us diagnose compatibility issues. Our servers receive your IP address when Eney connects to them. We use it to provide the service and protect it from abuse, for example to limit excessive requests, and keep it for that purpose. We do not add your IP address to analytics data, and the Mac app replaces it with a placeholder in error reports. Some services receive your IP address directly from your device: DuckDuckGo (web search), websites Eney opens for you, services you connect through MCP, and Apple (Maps, Dictation).
Mac – an Apple computer running macOS, on which you use the Eney application for Mac.
iOS – Apple’s operating system for iPhone, on which you use the Eney application for iPhone.
Usage Logs and Metadata is a basic usage information that helps us monitor system performance and usage trends. These data may include timestamps of requests, the features you use, and performance metrics (e.g. response time, success/failure flags).
Vendor Extension Data – the data we collect when you, as a vendor, integrate your application through extensions (plug-ins). This data includes Vendor app metadata (such as app name and bundle identifier), commands, command parameters, command execution status, command output, and command execution logs. Please follow the Vendor Extension attached below.
Feedback and Bug Reports: if you choose to send us feedback via the website or with Share Feedback or the feedback buttons in the app, we will collect whatever information you provide. This might include screenshots, error messages, or your comments about Eney’s performance. If you choose to attach logs, they may contain parts of your chats. We use this solely to fix performance, human review, and improve Eney. We encourage you not to share information that you want to keep private.
Task Execution – tracks whether your request is processed directly on your device (On-Device Processing) or sent to LLMs (Remote Processing).
Third-Party Integration Data which includes any data that we access, retrieve, transmit, or modify in external services or platforms that you choose to connect to Eney. It also includes the access tokens for the services you connect, which we store on our servers.
Output Data means the information Eney receives back after processing your request with remote LLMs (like OpenAI). This data helps Eney to give you useful responses and perform the actions you asked for. This data may, for example, contain output text (message), converted User Input, extracted files, autocompleted phrases, etc.
Skills Orchestration is the process of converting natural language into the command Eney is able to execute. We operate Skills Orchestration to execute actions provided by external vendors’ applications. You will find more about external vendors’ integrations in section Third-Party Apps’ Integrations and Service Providers.
Spell Check Data – the text you type in other applications that the spell check feature reads to check spelling and grammar. Spell Check works only after you accept the offer to turn it on and you can turn it off at any time in Settings. Before you turn it on, Eney does not read what you type. When the feature is on, we send only the text being checked to our AI provider (Anthropic) through our AI gateway: the sentences you finish as you write or, when you ask for a check with the keyboard shortcut, the contents of the text field you are in, up to 8,000 characters per request. The feature does not check password fields, fields labelled as containing secrets (such as card numbers, verification codes or API keys), content without letters, or excluded applications such as terminals, password managers and System Settings. Eney is designed to detect and not send a card number or a Social Security number. Other personal details you type in ordinary text, such as passwords, addresses or health information, may be included in the text sent for checking. We do not keep the text you check in our logs (we log only counts and lengths) and do not use it to train models. Spell Check uses your credits.
Memory Data - information Eney saves about you to make its answers more relevant (for example, preferences you mention in a chat), including memories you import from a file.
Meeting Data - the audio of meetings you record with Meeting Assistant, which includes the voices of all participants, the transcript, AI-generated notes and meeting title, notes you type during the meeting, and the event title and attendee names from a matching calendar event.
Clipboard Data - content you copy while clipboard history or clipboard suggestions are turned on.
Credits and Purchase Data - your credit balance,the credits used by your requests, trial credits and their expiry date, and the credit packages you buy. You buy credits on Setapp, which processes your payment details under the Setapp Privacy Notice. Eney does not receive your card details.
Attribution Data - iinformation that shows which of our ads or web pages led you to download Eney: a download identifier linked to the identifier used on eney.ai or macpaw.com/eney, and events such as download, sign-up, trial start and purchase.
Usage and Analytics Data
Short summary: We use usage and analytics data to understand how Eney is used, find errors and improve Eney. This data includes the text of your requests and Eney’s replies. Before analytics events leave your device, Eney applies automated filtering designed to remove certain direct identifiers, such as names, email addresses, phone numbers, postal addresses, payment card numbers and IP addresses. The filtering does not catch everything: for example, it does not remove file names, names of organisations or passwords you type into a chat. The events are linked to your installation ID and, for some events, to your Setapp and Eney account IDs, so we treat them as personal data and handle it in accordance with this Privacy Notice. We rely on our legitimate interests for this processing; you can object at any time (Section XI). We do not use this data to train third-party AI models.
The in-app Usage and Analytics data is used exclusively for internal analytics. This data allows us to understand how Eney is used, fix issues, and improve its core functions. To do so, we collect and process the following types of data:
- Service and Performance data. In most cases, it is non-personal, technical data used to monitor the stability and performance of the app. It includes unique app and session identifiers (random IDs; some events also contain your Setapp and Eney account ID), and app status data (version of app and features used).
- AI Processing Data. We use it to help Eney understand your User input, User Interaction Data, and generate accurate Output Data. In particular, this data includes text input and query embedding (i.e. numerical format of User Input used by Eney to understand the context).
- Contextual File Data. When you explicitly ask Eney to perform a task with your files, images, documents, or folders. Eney may also read file details without a separate request, for example when it runs read-only tools during a task or checks your Downloads folder (see Section IV.A).
- Vendor Extension Data. This data is only collected if you integrate a third-party app with Eney (as a Vendor Extension) and includes string identifiers to track commands, status, and logs for that specific app integration.
We analyse Usage and Analytics Data in MacPaw’s own analytics system. We run this system ourselves; it is not a third-party analytics service. It may be hosted by our cloud infrastructure providers (see “Service Providers” above), who process the data only on our behalf.
IV. How Eney Works
Eney processes your requests by sending them to a Large Language Model (LLM) — an AI that understands and generates natural language. We route these requests through our secure backend and the Setapp AI gateway, which also counts the credits you use to one of our trusted third-party AI language model providers, currently: Anthropic Claude, Google Gemini, or OpenAI GPT, ElevenLabs (speech-to-text) and Respeecher (text-to-speech). Each provider acts as our data processor, bound by contract to handle your data on our behalf only.
Cloud processing is on by default; Eney does not currently use a local model to answer your requests. What Eney sends to the AI provider depends on the task: your request and the conversation, relevant memories, and the results of the tools Eney used for the task (for example, emails, calendar events, file contents or content from connected services). On Mac, the model depends on the mode you choose (Fast or More thorough).
To learn more about it, refer to the Data we disclose to service partners, purposes, and data transfer mechanisms below. Please make sure you are familiar with LLM’s terms and privacy commitments.
Data training: training on our data is switched off in our accounts with the AI providers. Providers may keep requests and outputs for a limited time, for example for abuse monitoring (see Section X). Please make sure you are familiar with LLMs terms and privacy commitments regarding training data.
In the table below, we provide you with information about LLMs and other AI providers, what data is processed, and for what purposes.
Created by | Purposes | Input data | Output data |
OpenAI | Mac: understands your request, chooses the tools to use and writes the answer (Fast mode). Mac and iOS: converts memories and memory searches into numerical form (embeddings) to find relevant memories | User Input, conversation, Memory Data, results of tools (e.g. emails, calendar events, files, content from connected services), AI Processing Data, Contextual File Data | Output text, Usage Logs and Metadata |
| Anthropic | Mac: More thorough mode; iOS: default model. Background tasks: chat titles, meeting labels, summaries of scheduled tasks, suggested next requests. Meeting notes and titles. Spell Check | As for OpenAI, plus meeting transcripts and your meeting notes, and Spell Check Data | Output text, Usage Logs and Metadata |
| Іmage generation | The text of your image request and the aspect ratio. Your own images are not sent | Generated image | |
| ElevenLabs | Transcription of Meeting Assistant recordings | Meeting audio, including the voices of all participants | Transcript |
| Respeecher | Read Aloud | Text of Eney’s answer, the voice you chose | Audio |
The list of Services is not exhausted and may be updated. We will amend this Privacy Notice accordingly.
Actions that involve your device — reading files, running commands, searching your data — happen locally on your Mac through Eney's built-in tools. The results of these actions (for example, the content of a file Eney read or your search results) are sent to the AI provider when Eney needs them to answer your request.
Some functions use Apple frameworks on your device and do not send data to us or to AI providers: reading text from images (OCR), detecting names to remove them from analytics, detecting the language of copied text, and matching your requests to suggested workflows. Dictation uses Apple’s speech recognition, which may process audio on Apple’s servers under Apple’s terms. Memories are stored in a local database on your device.
For the tasks and actions that require your permission (i.e. access to files, access to the application), Eney will explicitly ask for your permission. You can always withdraw your permissions in settings. Eney asks for your permission before it acts on your behalf. Once you have given macOS or iOS access to your data, or connected a service, Eney does not ask again before actions that only read data (read-only tools), such as searching your Mac, reading a file or reading content in a connected service. Before other actions, such as creating, changing, sending or deleting something, Eney asks you first, unless you have allowed such actions for the current chat or for all actions in Settings.
IV.A Eney features and the data they use
Chat history and sync. When you are signed in, Eney stores your chats on our servers so that you can use them on your Mac and iPhone. Sync is always on while you are signed in. A synced chat includes your messages, Eney’s replies and the results of the tools Eney used for your request, for example the text of a file, an email or a calendar event that Eney read. The files themselves are not uploaded. Chats are encrypted on our servers, but they are not end-to-end encrypted. Access is limited to authorised staff and only where necessary to handle a request you send us, investigate a security incident or comply with the law.
Memory. Eney can save information you share in chats (for example, your preferences) to make its answers more relevant, and you can see when Eney saves, updates or deletes a memory. Memories are stored on your device. To find the relevant memories, the text of your memories and of memory searches is sent to OpenAI to create embeddings, and relevant memories are added to your requests to the AI provider. You can import memories from a file and export them. Memory may contain sensitive information if you share it in a chat; you can delete memories at any time.
Meeting Assistant. When you record a meeting, Eney captures your microphone and the sound of the meeting app, so the recording contains the voices of all participants. The audio is sent through our servers and the Setapp AI gateway to ElevenLabs for transcription; the transcript and your notes are then sent to Anthropic to create the meeting notes and title. Our servers and the gateway pass these requests through without storing their content. If a calendar event matches the recording, Eney stores the event title and attendee names (not their email addresses) with the meeting. Eney does not identify who is speaking. The recording is deleted from your device after the notes are saved; the transcript, notes and attendee names stay on your device until you delete them. Meeting Data is not used to train AI models. Before you record a meeting, you are responsible for telling the other participants and, where the law requires it, for getting their consent.
Apple Mail, Calendar, Reminders, Contacts and Search Mac. With your macOS permission, Eney can read your emails, calendar events, reminders and contacts, and search your apps and files, to do what you ask. The content Eney finds is sent to the AI provider when it is needed for your request. Eney may also read these sources when it runs a scheduled task you have set up.
Connected services. You can connect Eney to other services (listed in Section V). Eney then reads and, depending on the service, creates, edits, deletes or sends content there on your behalf. We store your access tokens on our servers. Content from these services is sent to the AI provider when it is needed for your request. Google services are connected through servers we operate, which process your Google data only in memory for each request and do not store it.
Clipboard history and suggestions. Eney keeps the last 50 items you copy so that you can paste them again. The history is kept only in your Mac’s memory: it is not written to disk, not sent to us and is cleared when you quit Eney. Eney also analyses copied text on your Mac to suggest actions such as Summarize, Translate or Add to Calendar (macOS 26 or later); you can turn these suggestions off in Settings - Proactivity - Clipboard. Copied content is sent to our AI provider only when you paste it into a chat and send it, tap a suggestion, or ask Eney in a chat to work with what you copied. Items that password managers mark as confidential are not used for suggestions, but they appear in the history. Other copied passwords or codes are treated like any other text, so please do not send them to Eney.
Eney Wand. Wand works only when you start it, with the keyboard shortcut, by shaking the cursor or from the + menu, and needs macOS Screen Recording permission. Wand captures the area of the screen you select and recognises text in it on your Mac. Translate and Create calendar event send the recognised text to our AI provider; Ask Eney sends your question and the screenshot. Other actions work on your Mac or place the content in the chat field, from where it is sent only if you send the message. Screenshots may show information about other people. Wand is on by default; you can turn it off in Settings - Eney Wand.
Proactive suggestions. To suggest helpful actions, Eney analyses the following on your Mac:
– the names, types, sizes and dates of files in one folder (Downloads by default), and file fingerprints (hashes) to find duplicates;
– running processes, CPU, memory and disk usage, and crash reports;
– text you copy (see Clipboard history and suggestions);
– the app you are using and, if you have given Eney Accessibility access, the domain (not the full address) of the active browser tab;
– meeting notes when they are ready.
This analysis takes place on your device. This data is sent to our AI provider only when you tap a suggestion or ask Eney about it in a chat. Proactive suggestions are on by default; you can turn them off in Settings - Proactivity.
Scheduled tasks. You can ask Eney to run tasks on a schedule, for example to send you a news overview or an overview of your day. A scheduled task works like a request you make in a chat: Eney uses the same tools (for example, Mail, Calendar, Reminders, search on your Mac, connected services and web search) and sends their results to the AI provider to prepare the result. Summaries of scheduled tasks are created by Anthropic (see Section IV).
Images. Images and screenshots you add to a chat are sent to the AI provider so Eney can understand them. When you ask Eney to create an image, only your text request is sent to Google; the image is saved on your device. Images created by Eney are generated by AI.
Voice. Dictation uses Apple’s speech recognition. Read Aloud sends the text of Eney’s answer to Respeecher to create natural-sounding speech; if it is unavailable, your device’s built-in voice is used.
Maps. To show a place or route, Eney sends the place names and the start and end points of the route to Apple Maps. Eney does not request your device location for this.
Web search. Eney searches the web through DuckDuckGo, which receives the search query and your IP address directly from your Mac, and through Brave Search, which receives the query from our servers and does not see your IP address.
Trial and credits. After you sign in to Setapp, you receive trial credits for a limited period. After that, you need to buy credit packages on Setapp to keep using Eney. The Setapp AI gateway records the credits each request uses. Your credit balance and purchases are covered by the Setapp Privacy Notice. Events about your use of Eney features are also recorded in our usage analytics (see “Usage and Analytics Data” in Section III).
Eney iOS app. The iOS app also uses Google Firebase for push notifications, crash reports and remote configuration, and AppsFlyer to measure which advertising campaigns lead to installs. AppsFlyer starts only after the App Tracking Transparency prompt, and the advertising identifier (IDFA) is read only if you allow tracking. If you use the internet speed test, it runs against Measurement Lab (M-Lab) servers, which publish test results, including your IP address, as open data.
Eney Spell (spell check). Checks spelling and grammar in the text you type in other apps on your Mac, after you turn it on. See “Spell Check Data” in Section III.
V. Third-Party Apps’ Integrations and Service Providers
Short Summary: Eney integrates with both third-party applications and external service providers to perform specific tasks and enhance functionality. Third-party applications and service providers are listed, along with links to their respective privacy policies. The use of these third-party tools is governed by their own terms and conditions. We update this list when we add or change providers.
Eney is a part of Setapp, which includes a variety of integrated applications. Eney may interact with third-party apps to perform specific tasks, enhance functionality, or connect with external apps. Please be aware that the use of the Third-Party Apps is subject to their own terms and conditions of use and privacy policies.
Name of Third-Party App | Link to their privacy policies |
Downie | |
Permute | |
CleanMyMac | |
ClearVPN | |
| Apple Mail, Calendar, Reminders, Contacts | https://www.apple.com/legal/privacy/ |
This list is not exhaustive. We may add, update, or remove third-party integrations as Eney evolves.
We engage trusted third-party service providers to help deliver specific features based on your requests. Please be aware that the use of the Third Party Service is subject to their own terms and conditions of use and privacy policies.
Name of Third Party Service | Purpose/Task | Link to their privacy policies |
Open Exchange Rates API | To get exchange rates (our servers load the rates; your text and amounts are not sent) | |
Brave Search API | Web search (requests are sent from our servers, so Brave does not see your IP address) | |
Duckduckgo | Web search (requestssearchrequests are sent directly from your Mac, so DuckDuckGo receives your IP address) | |
Google Services (Calendar, Drive, Gmail, etc.) | We offer integration with Google services via the Eney app. Requests go through servers we operate, which process your Google data only in memory for each request and do not store it. Please note: your data will be accessed only with your consent We do not use your Google data for advertising, profiling, selling, building user profiles, or training external AI models | |
| Apple Maps | Places and routes shown in the chat | https://www.apple.com/legal/privacy/ |
| Measurement Lab (M-Lab) | Іnternet speed test in the iOS app (test results, including your IP address, are published as open data) | https://www.measurementlab.net/privacy/ |
This list is not exhaustive. We may add, update, or remove third-party services as Eney evolves.
In addition, our tool supports connections to third-party services via the Model Context Protocol (MCP), a standard that allows our tool to securely interact with external platforms on your behalf. Depending on the service, Eney can read, create, edit, delete or send content there (for example, post messages in Slack or delete files in Google Drive). Please be aware that the use of the Third Party Service is subject to their own terms and conditions of use and privacy policies.
Notion | |
Linear | |
Atlassian (Jira, Confluence) | |
Figma | |
| Slack | https://slack.com/privacy-policy |
| TickTick | https://ticktick.com/privacy |
| Dropbox | https://www.dropbox.com/privacy |
| Fireflies | https://fireflies.ai/privacy-policy |
| Lucid | https://lucid.co/privacy |
| Canva | https://www.canva.com/policies/privacy-policy/ |
| Read AI | https://read.ai/privacy-policy |
| Wiley | https://www.wiley.com/en-us/privacy |
This list is not exhaustive. We may add, update, or remove third-party services as Eney evolves.
VI. Purposes and legal grounds
Short summary: This section outlines the specific purposes for which your data is processed, alongside the legal grounds that permit this processing. The full list of all purposes and their corresponding legal grounds is prepared in the table below.
Purpose | Data Category | Legal Ground |
To offer you the Eney app, Collection and pre-processing of data for internal analytics, and improve Eney | Account information, User Input, User Interaction, Feedback and bug reports, Task Execution data, Device data | To perform Terms of Service; legitimate interests, provided that they do not override your rights and freedoms; |
To execute your tasks with cloud AI providers | User Input, Output Data, Service and Performance Data, AI Processing Data, Memory Data, Contextual File Data, Third-Party Integration Data | To perform Terms of Service |
Remote LLMs training |
We do not use your personal data to train third-party AI models. | |
Tasks recommendation generation | Task Execution, User Input, Service, and Performance Data | To perform Terms of Service legitimate interests (for our internal analytics purposes) |
Storage and feedback analysis for continuous learning and product improvement | Feedback and Bug Reports, Usage Logs and Metadata, Service and Performance Data | To perform Terms of Service per your consent when submitting the feedback form |
Searching your Mac (apps, files, calendar, contacts) | User Input, Task Execution, Device Data, Contextual File Data | To perform Terms of Service |
Web contextual search | User Input, Output Data, Service and Performance Data, AI Processing Data | To perform Terms of Service; Legitimate interests (for our internal analytics purposes) |
To offer integrations with third-party services via MCP | Account information, User Input, User Interaction, Third-Party Integration Data, Feedback and bug reports, Task Execution data, Device data | To perform Terms of Service. |
| Checking spelling and grammar in the text you type in other applications (Eney Spell) | Spell Check Data, Output Data, Usage Logs and Metadata (counts and lengths only, no text) | To perform Terms of Service. |
Setapp Vendor extensions (see Vendor Extensions for more details) | Vendor Extension Data | Vendor License Agreement |
| Chat history and sync between your devices | User Input, Output Data | To perform Terms of Service |
| Memory | Memory Data, User Input | To perform Terms of Service |
| Meeting Assistant | Meeting Data | To perform Terms of Service; for other meeting participants: legitimate interests (enabling you to keep notes of meetings you take part in) |
| Clipboard history and suggestions, Eney Wand, proactive suggestions and scheduled tasks | Clipboard Data, User Input, Contextual File Data, Device Data, Third-Party Integration Data, User Interaction | Legitimate interests (to offer you relevant suggestions). You can turn this off in Settings or object (Section XI) |
| Dictation, Read Aloud and image understanding and generation | User Input, Output Data | To perform Terms of Service |
| Credits and billing | Credits and Purchase Data, Account information | To perform Terms of Service |
| Crash reports and diagnostics | Device Data, Usage Logs and Metadata | Legitimate interests (keeping Eney stable and secure) |
| Measuring which advertising campaigns lead to installs of the iOS app | Attribution Data, Device Data, IP address | Your consent |
| Letting you try Eney without an account | Device Data (installation identifier), User Input, Output Data | To perform the Terms of Service |
| Managing your trial and credits | Account information, Credits and Purchase Data | To perform the Terms of Service |
| Measuring our ads (website attribution and sharing with Meta/Google) | Attribution Data | Your consent |
| Running the internet speed test in the iOS app at your request (the test runs against Measurement Lab (M-Lab) servers, which publish test results, including your IP address, as open data) | Device Data (IP address), speed test results | To perform Terms of Service |
This list is not exhaustive. We may add, update, or remove third-party integrations as Eney evolves.
VII. Data we disclose to Service Partners
Short Summary: We do not sell your data. We only share it with AI providers to process your requests within MacPaw with service providers that help us run Eney and, only if you agree, with Meta and Google to measure our ads, in line with the choices you make in the app and in our cookie settings. We might also need to share it during a merger or acquisition, or when legally required to do so.
Disclosure to others: in addition to our AI providers, we share personal data in the following cases:
- Within MacPaw: Eney team and other departments within MacPaw may access data as needed to operate the service, preserving its stability and functionality, and for internal analytics purposes. For example, when you share Account information for sign-in with a Setapp token, or when you integrate with third-party apps available within the Setapp, like CleanMyMac or ClearVPN, belonging to MacPaw.
- Service Providers: We use trusted service providers for cloud infrastructure (servers), analytics, error tracking, AI usage monitoring, speech processing, push notifications and app configuration, measuring app installs (iOS) and for processing your Feedback and Bug Reports. All such providers are bound by confidentiality and data protection obligations via contracts.
- Services you use through Eney: When you use web search, maps, the speed test or connected services, those services receive the data needed for the request directly and process it under their own privacy policies (see Sections IV.A and V).
- Legal Requirements: We may disclose or allow government and law enforcement officials access to your data, in response to a subpoena, search warrant, or court order (or similar requirement), or in compliance with applicable laws and regulations. Such disclosure or access may occur if we believe in good faith that: (a) we are legally compelled to do so; (b) disclosure is appropriate in connection with efforts to investigate, prevent, or take action regarding actual or suspected illegal activity, fraud, or other wrongdoing; or (c) such disclosure is required to protect our legitimate business interests, including the security or integrity of our products and services.
- Merger/Acquisition: If our company is ever involved in a merger, financing, reorganization, or sale, your data may be transferred as part of that deal (under appropriate confidentiality and legal safeguards). You would be notified of any change in data handling due to such an event.
- Communicating with You: We may send you essential service communications related to Eney. For instance, if we update this Privacy Notice or if there’s a significant change (like an important bugfix or the availability of a new version), we might email or notify you through the Eney app. We won’t send marketing emails unless you separately opted in to those via the main marketplace platform – and you can opt out anytime. We have external communication partners that provide us with infrastructure and services for the delivery of communications to you. To learn more, refer to Setapp Privacy Notice.
- Advertising partners (only with your consent): Meta and Google, to measure our ads (see Section IV.A)
We do not sell your data. We share data with advertising partners only to measure our ads and only with your consent. On iOS, if you allow tracking, we use AppsFlyer to measure our own advertising campaigns.
In the table below, we provide information about third-party LLMs and Service Partners we share your data with, the purposes of such sharing, and the transfer mechanisms we rely on to ensure secure data transmission.
Third Party | Purposes and Legal basis | Transfer mechanism and Contractual commitments | |||
OpenAI’s OpenAI Inc. 3180 18th Street, Suite 100, San Francisco, CA 94110, United States | To provide Eney’s remote processing; to perform Terms of Service, and for our legitimate interests (for internal analytics) | Data Processing Addendum following this link | |||
Anthropic Anthropic Ireland, Limited 6th Floor South Bank House, Barrow Street, Dublin 4, Dublin, Ireland | To provide Eney’s remote processing; to perform Terms of Service, and for our legitimate interests (for internal analytics) | Data Processing Addendum following this link | |||
Google Gemini Google LLC (USA) | (1) Google Gemini: to provide Eney’s remote processing; to perform Terms of Service, and for our legitimate interests (internal analytics). (2) Google Firebase (iOS app only): push notifications, crash reports and remote configuration; to perform Terms of Service and for our legitimate interests (app stability and service communications) | Data Processing Agreement following this link | |||
Eleven Labs Inc. 169 Madison Ave #2484, New York, NY 10016, United States | Transcription of Meeting Assistant recordings; to perform Terms of Service | Eleven Labs Inc. is certified under the EU-U.S. Data Privacy Framework; certification can be found here Data Processing Addendum following this link | |||
Respeecher, Inc. 303 N Glenoaks Blvd Suite 200 Burbank, CA 91502 | Read Aloud; to perform Terms of Service | Data Processing Agreement concluded with us pursuant to Article 28 GDPR. Transfers are based on the Standard Contractual Clauses adopted by the European Commission (Implementing Decision (EU) 2021/914), incorporated into the agreement. You can request a copy of the relevant safeguards by contacting us at [email protected] or [email protected]. | |||
Google Cloud EMEA Limited 70 Sir John Rogerson's Quay, Dublin 2, D02 R296, Ireland | Hosting of the Eney backend (account data, connector access tokens, uploaded files, chat sync, Google connector servers); to perform Terms of Service | Cloud Data Processing Addendum available following this link. Where Personal Data is transferred outside the EEA (including to Google LLC and its sub-processors), transfers are safeguarded by Standard Contractual Clauses as approved by the European Commission and by Google LLC’s certification under the EU-U.S. DPF, UK Extension to the EU-U.S. DPF, and Swiss-U.S. DPF can be found here. | |||
Langfuse Cloud platform Gethsemanestr. 4, 10437 Berlin, Germany | Remote LLM usage tracking platform for Remote Processing operations; for our legitimate interests (for Usage and Analytics data); per consent, when required | Data Processing Agreement following this link | |||
Functional Software, Inc. d/b/a Sentry Sentry, 45 Fremont Street, 8th Floor, San Francisco, CA 94105 | Our SaaS partner in development, maintenance, and error fixing, for our legitimate interests, and for security reasons | Standard Contractual Clauses as approved by the European Commission (EU-US DPF). EU-U.S. DPF, UK Extension to the EU-U.S. DPF, and Swiss-U.S. DPF Certification can be found here | |||
Zendesk 989 Market Street, San Francisco, California 94103 United States | Our customer service solution provider to provide You with information upon your requests; to perform the Terms of Service with You and comply with legal obligations set forth by applicable Data Protection Laws | Privacy and data protection commitments can be found here; Binding Corporate Rules can be found here | |||
AppsFlyer 14 Maskit St., Herzliya, Israel 4673314 EU representative: AppsFlyer Germany GmbH, Kurfürstendamm 11, c/o WeWork, 10719 Berlin, Germany. | iOS app: measuring which advertising campaigns lead to installs; per your consent | Data Processing Agreement available following this link. AppsFlyer Ltd. is established in Israel, which is recognized by the European Commission as providing an adequate level of data protection. Onward transfers to the United States are governed by Standard Contractual Clauses as approved by the European Commission; AppsFlyer is also certified under the EU-U.S. DPF, UK Extension to the EU-U.S. DPF, and Swiss-U.S. DPF. | |||
Campaign Monitor Marigold 11 Lea Ave Nashville, TN 37210 | E-mail marketing partner, per your consent, and our legitimate interests, where applicable | Privacy Statement can be found here | |||
Survey Monkey 70 Sir John Rogerson's Quay, Dublin 2, D02 R296, Ireland | Customer and external audience surveys partner, per your consent | Data Processing Agreement is available here | |||
Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland | Measuring the effectiveness of our ads (Meta Pixel on our websites); your consent. We and Meta are joint controllers for collecting this data and transmitting it to Meta. After that, Meta processes it as an independent controller under its own privacy policy. | Meta Business Tools Terms and Meta Controller Addendum here. Data may be transferred to Meta Platforms, Inc. (USA), which is certified under the EU-U.S. Data Privacy Framework. | |||
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland | Measuring the effectiveness of our ads (Google Ads conversion tracking, including enhanced conversions); your consent. For enhanced conversions, Google acts as our processor. For other Google Ads conversion data, Google acts as an independent controller. | Google Ads Data Processing Terms here and Google Ads Controller-Controller Data Protection Terms here. Data may be transferred to Google LLC (USA), which is certified under the EU-U.S. Data Privacy Framework. | |||
Since Eney operates within the architecture of Setapp, most of Setapp’s service providers are shared. To learn more about them, follow Setapp Privacy Notice. | |||||
VIII. AI Limitations
Short Summary: Eney is not a professional advisor and might produce inaccurate results. Always use your judgment and avoid sharing confidential or sensitive information related to health, finances, etc. If you encounter any inappropriate or harmful content, please report it to us. You may also use App Settings to submit your request or complaint.
Eney can answer questions and help with tasks, but it has certain limitations:
- It may occasionally give incorrect or irrelevant answers. Always double-check important information in User Input Data and Files, based on your own understanding of what you consider important for you.
- It is not a professional advisor. Do not rely on it for medical, legal, financial, mental health, or other critical decisions.Eney is not designed to process sensitive data. However, if your requests, files, emails, meetings or memories contain sensitive data, Eney processes it to perform your request.We kindly ask you to avoid sharing any sensitive (such as health details, political opinions, or similar) and personal information (to the extent you prefer not to share with us). When using Eney. We also encourage you not to share your confidential information, based on your own understanding of what you consider confidential. If you believe we have inadvertently processed your sensitive data or confidential data, please contact our Customer Support or submit a request using this form, and we will promptly review and delete this data.
- We do our best to filter out offensive or inappropriate content, but Eney might inadvertently generate unsuitable responses. If you see any, please let us know by using this form or go to App Settings -> Share Feedback -> write a message and attach files if needed. Use your own judgment when acting on the AI’s suggestions.
IX. Security
Short summary: We’re ISO 27001 certified and protect your data through strict access controls (MFA), real-time threat detection, secure data handling, and on-device model protection. We continuously improve our data security and privacy practices. If a data breach occurs, we’ll follow our response plan and notify you and the relevant regulatory authorities.
We are committed to protecting the privacy and security of your data. MacPaw has achieved ISO 27001 certification, demonstrating our dedication to maintaining a high standard of information security management. This internationally recognized standard sets requirements for establishing, implementing, maintaining, and continually improving an Information Security Management System (ISMS).
Here’s how we ensure the security and confidentiality of your data:
- Protection of Processing Environment: Our systems and the AI services we use are protected against unauthorized access and data leakage.
- Access Control: We carefully manage who has access to our systems and regularly review permissions.
- Application & Development Security: All code is reviewed and tested for vulnerabilities before release. We follow secure software development practices and use advanced tools to detect and fix security issues early.
- Threat Detection: We monitor our systems in real time for suspicious activity and respond quickly to potential threats.
- Network & Endpoint Protection: Our infrastructure is protected by firewalls, intrusion prevention systems, and secure device policies. All company devices are encrypted and centrally managed.
- Data Handling: We securely back up data, manage software components responsibly, and follow strict procedures for data deletion and leakage prevention.
- Authentication: We use a centralized identity system and enforce multi-factor authentication (MFA) to protect employees’ accounts who work with your data.
If, despite our safeguards, a data breach were to occur that poses a risk to your rights (for example, unintended exposure of personal data), we will notify you and regulators as required by law. We have an incident response plan in place for such situations.
We keep improving the privacy and security of Eney. No system is completely secure, so please think before sharing sensitive or confidential information with Eney.
X. Data Retention and Deletion
Short Summary: We retain your data only for as long as needed for the Purposes listed above, or as required by law. You have the right to request deletion or anonymization of your personal data, and we will do so, unless we are required to keep it. Below, we outline the types of data we retain, why we retain it, and for how long.
We retain your personal data only as long as necessary for the purposes described in this notice (or as required by law). In general:
- User Input and text input: We keep your chats on our servers while your account is active. When you delete a chat in Eney, it is removed from your devices and hidden; it is permanently deleted from our servers when you ask us to delete your data (Section XI).
- Remote Processing by LLMs and other AI providers: (1) The content of your requests (inputs and outputs) is retained on OpenAI’s servers by default up to 30 days; (2) Google might store User Input Data and the Output Data for up to 30 days for debugging and quality purposes; (3) Anthropic automatically deletes User Input Data and the Output Data within 30 days of receipt or generation; 4) ElevenLabs the audio and the resulting transcript are deleted from ElevenLabs’ systems immediately after the transcription is completed; backup copies may persist for up to 30 days before they are permanently erased. ElevenLabs does not use this data to train its models.; (5) Respeecher, Inc. acts as our processor to convert Eney’s text responses into speech. It processes the text only to generate the audio, may keep it for as long as needed to provide the service and to prevent abuse under our agreement, and may not use it to train or improve its models.
- Memory Data and Meeting Data: memories, meeting transcripts, notes and attendee names are stored on your device until you delete them. Meeting recordings are deleted from your device after the notes are saved.
- Connected services: we keep your access tokens until you disconnect the service or delete your account.
- Usage Logs and Metadata: We keep basic metadata and technical logs (for example, timestamps of requests, the features used and performance metrics) for as long as needed to monitor the stability of Eney, analyse usage trends and troubleshoot issues, and in any case no longer than 90 days. Records of remote AI requests kept in our LLM usage tracking tool (such as the model used, token usage, cost and the feature involved are automatically deleted after 90 days. Crash reports are kept for no longer than 90 days by Functional Software, Inc. d/b/a Sentry (Mac app). For the iOS app, crash reports collected through Firebase Crashlytics are kept by Google for 90 days, after which Google begins deleting them from its live and backup systems. Eney also keeps a diagnostic log on your device to help diagnose errors. It stays on your device unless you choose to attach it when you send us feedback through App Settings - Share Feedback; in that case it is kept as described for Feedback and Bug Reports. Error reports may contain parts of the request that caused the error, including the text of your request and search terms.
- Account Information: If the AI assistant is tied to your account on the Setapp platform, we retain your account data as long as your account is active. You can delete your account at any time, which will remove personal info like your name, email, etc. from our live systems (except information we are required to keep for legal reasons, which we’ll isolate and protect).
- Feedback and Bug Reports: We keep feedback and bug reports you send us for as long as we need them to handle your request and to improve Eney, and no longer than 3 years after your request is closed. Logs and screenshots you attach are kept for no longer than 18 months after your request is closed, because they may contain parts of your chats. Any personal identifiers in feedback will be removed upon your request or when we no longer need them. We may keep aggregated, anonymised notes from feedback to improve Eney.
- Usage and Analytics Data: to improve the accuracy, safety, and overall quality of Eney, we may retain your data for internal analytics and development purposes for up to 5 years. These efforts are essential and strictly necessary to enhance the AI’s capabilities. You may request that we delete your data.
- Data from use without an account: If you do not create or sign in to a Setapp account, we keep the identifier linked to your download and the record of your free requests only as long as needed to provide the free requests and prevent abuse of the offer, and then delete or anonymize it. If you sign in, this data becomes part of your account data.
- Attribution Data and ad measurement records: We keep identifiers used to link your download, sign-up and purchases to our ads (such as your download identifier and ad click identifiers), and records of data sent to advertising partners, for as long as we need them to measure and verify the performance of our advertising campaigns, to reconcile results with our advertising partners and to troubleshoot data transfers, for as long as your Setapp/Eney account is active and for 12 months after it is closed, unless you ask us to delete it earlier or withdraw your consent. When this data is no longer needed for these purposes, we delete it or anonymize it so that it no longer identifies you, and may keep aggregated reports that do not identify you. If you withdraw your consent, we stop sending your data to advertising partners from that point on; this does not affect data already shared before the withdrawal. Advertising partners keep the data they receive under their own privacy policies.
- Consent records: we keep a record of your privacy choices for as long as we need to prove your consent.
- Spell Check Data: We do not store the text you check on our servers. Our AI provider processes it as described above for Remote Processing by LLMs.
- Data from the pre-release (beta) version: Feedback, bug reports and analytics data we collected during the pre-release stage are kept under the retention periods in this Section. You can ask us to delete them at any time (Section XI).
Deletion: When the retention periods above end, or upon your request, we will delete or anonymize your personal data, unless we must keep it by law. If you stop using Eney, you can request that we erase data you provided, and we will do so (to the extent we control it and it’s not required to keep by law). Our policy is to anonymize or delete data that we no longer need for the purposes for which it was collected.
XI. Your Rights
Short Summary: You have the right to access your personal data, request a correction, ask for deletion, or object to processing. If you have concerns about AI-generated outputs or believe Eney has produced harmful, inaccurate, or unexpected results, you may request a Human Loop. To exercise any of these rights, contact us as outlined below; we typically respond within one month. Where necessary, we may extend this by two further months and will tell you why. Where we rely on legitimate interests, you can object at any time.
You have rights over your personal data, and we’re committed to helping you exercise them. Here's what you can do:
- Access & Portability: You can ask for a copy of the personal data we hold about you. We'll send it in a commonly used, readable format.
- Correction: If something we hold about you is wrong—like your account details—you can request a correction. Some information can be updated directly in your Setapp profile settings.
- Deletion: You can ask us to delete your personal data, including Account Information, User Input Data, files, and Feedback. In some cases, we may keep limited data (e.g., to comply with legal obligations), but we’ll let you know if that’s the case. Once deleted, your data can’t be recovered.
- Restriction: You can request that we temporarily stop using your data, for example, if you’re verifying its accuracy. We’ll restrict access and only use it if absolutely necessary until the issue is resolved.
- Objection: If we use your data to improve the service or for other purposes you disagree with, you can ask us to stop. We'll honor your objection unless we have a valid reason not to, which we’ll explain.
- Withdrawing consent: Where we rely on your consent (for example, tracking on iOS), you can withdraw it at any time in your device settings or by contacting us. This does not affect processing before the withdrawal.
- Request Human Review: If you have concerns about an AI-generated output that significantly affects your rights and freedoms, you can request a human loop. To learn more, refer to Section II (AI Outputs and Human Review).
- You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU/EEA country where you live or work or where you believe an infringement took place. Our lead supervisory authority is the Commissioner for Personal Data Protection of Cyprus.
To make a request, please contact us using the details in the section Contact us below. We may ask for confirmation to protect your data from unauthorized access. We usually respond within one month. Where necessary, we may extend this by two further months and will tell you why.
If someone else contacts us on your behalf (like an authorized agent), we’ll need proof of their permission and identity before proceeding.
XII. Changes to this Notice
As Eney evolves, we might update this Privacy Notice to reflect improvements in our practices. If we make significant changes, we will notify you (for example, via an in-app alert or email). The “Last Updated” date at the top will always indicate when the latest changes were made. The updated Privacy Notice applies from the date shown at the top. If an update introduces processing that requires your consent, we will ask for it separately in the app before that processing begins. Continuing to use Eney does not by itself mean that you consent to such processing. If you have questions or disagree with any changes, please contact us (see Section XIII).
XIII. Contact Us
Short Summary: for all inquiries, contact us at [email protected] or [email protected]. We always welcome your feedback. You can also use the in-app feature: App Settings -> Share Feedback. For data requests, please include your associated email or Setapp account.
We value your privacy and are here to address any questions or concerns you have. Сontact us at:
Email: [email protected],
[email protected] (dedicated Data Protection Specialist e-mail).
We always welcome your feedback to help improve Eney.
You can easily submit a request, file a complaint, or provide feedback directly within the Eney app by going to App Settings -> Share Feedback, then writing your message and attaching any necessary files.
When contacting us about your data, please include the email or Setapp account you used with Eney so we can locate your records. We will verify your identity to protect your privacy.
Information for Meeting Participants
This section is for you if you took part in a call or meeting where someone used Eney’s Meeting Assistant to take notes. You don’t need to use Eney yourself to read it.
What happens. The Eney user’s Mac records the meeting audio, including your voice and what you say. Eney does not join the meeting as a participant, so your meeting app may not show that the meeting is being recorded. Before their first recording, Eney asks its users to let other participants know and to get their consent where the law requires it.
After the recording ends, two things happen:
the audio is sent to a speech-to-text service, which turns it into a written transcript;
the transcript is then sent to an AI model, which creates meeting notes for the Eney user.
Who is responsible. MacPaw Way Ltd., 25 Serifou, Allure Center 11, Office No. 11-12, 2nd Floor, 3046 Zakaki, Limassol, Cyprus, is the controller of your personal data processed through Meeting Assistant. This means we decide how and why the meeting audio is transcribed and how the notes are created. We use service providers (ElevenLabs and Anthropic) that process the data only on our behalf and on our instructions. The Eney user decides whether to record the meeting and is responsible for telling you about it and, where the law requires it, for getting your consent. You can contact us at [email protected] or [email protected].
What data.
The meeting audio, meaning your voice and what you say.
The transcript text, which may include your name if it is spoken and anything discussed in the meeting.
The notes created from the transcript. The Eney user’s own notes may be included when the notes are created.
We do not use voices to identify individual speakers, and we do not create voiceprints.
Who receives it.
Audio and text pass through MacPaw’s backend and Setapp AI Gateway, which do not store their content. They are then sent to two service providers, both acting as our processors under contract:
ElevenLabs receives the audio and turns it into a transcript. It does nothing else with the audio.
Anthropic (Claude) receives the transcript text, together with the Eney user’s own notes, and creates the meeting notes. It does not receive the audio.
Neither provider uses this data to train its models. We do not sell this data or use it for advertising.
International transfers.
ElevenLabs (Eleven Labs Inc.) processes the audio in the United States. The transfer relies on the EU-U.S. Data Privacy Framework, under which Eleven Labs Inc. is certified. Anthropic processes the transcript under our contract with Anthropic Ireland, Limited and its Data Processing Addendum. See Section VII for details.
How long it’s kept.
Audio on the Eney user’s Mac: deleted once the notes are saved.
Audio and transcript at ElevenLabs: deleted as soon as the transcript is returned.
Transcript text at Anthropic: deleted within 30 days.
Transcript and notes: stored only on the Eney user’s Mac, for as long as that user keeps them. MacPaw has no access to them.
Your rights.
If you don’t want to be recorded, tell the Eney user. They can stop the recording, and they can delete the transcript and notes from their Mac at any time.
You also have the right to access, correct, erase or restrict your data and to object to its processing. We do not keep recordings or transcripts and do not identify speakers, so we usually cannot find data about you on our side. If that is the case, we will tell you.
You can contact us at [email protected] or [email protected]. You can also complain to a data protection authority, for example the Cyprus Commissioner for Personal Data Protection or the authority where you live.
No automated decisions with legal or similarly significant effects are made about you.
SKILLS ORCHESTRATION
APPLICABLE ONLY TO SETAPP VENDOR INTEGRATIONS
Vendor Extension
A. Processing operations:
a. All commands, command parameters, and vendor metadata manifests are transmitted over TLS to and stored on MacPaw’s servers (where they’re also processed by LLM).
b. Execution status codes and error messages from all vendor plugins are sent to MacPaw’s servers for Skills Orchestration purposes and troubleshooting.
B. Vendor app data transmitted to Eney:
a. String identifiers
b. Vendor app metadata
C. Data storage:
a. Any data we send to Vendor apps is processed and stored by those Vendors under their own control and subject to their privacy commitments.
b. Applications and files used in parameters and command outputs are stored locally in the iOS/macOS file system on the user device.
c. Logs data created when Eney performs a task are retained only for as long as needed to execute command outputs and stored only on the user’s device
Important:
Eney only transmits commands and parameters to the Vendor’s Extension, meaning that:
- All data processing and task execution happen entirely within the Vendor’s application.
- Command outputs are stored only on the user’s device.
- Vendors are responsible for how their applications process data and must comply with their own privacy practices and policies.