Stored on your Mac
Teams, projects, conversation history and run records are stored in local app data. Project files stay in your chosen folder or an enabled run worktree. Your license key is stored in Keychain; it is not added to workspace exports or mobile snapshots.
Network connections
| Connection | What it is used for |
|---|---|
| Claude Code / Codex | Task instructions and relevant project context are processed by your selected provider’s model. |
| MCP services | Data needed by the tools you select may be sent to those services. |
| Lemon Squeezy | Payment, license activation, validation and device activation. |
| Updates | Version manifests, the Sparkle update feed and app downloads. |
| Optional iCloud | When enabled, mobile snapshots, commands and relevant attachments move through your private CloudKit database. |
| Apple Speech | Voice input uses on-device recognition when supported; on-device processing is not guaranteed for every language and device. |
Choices you control
- Choose the provider, model and project folder.
- Enable MCP connections when needed and review their access and service terms.
- Review the plan and approval mode. File scopes are not operating-system sandboxes.
- Check your provider’s and connected services’ current data terms before sending sensitive information.
Order and refund notifications
Order and refund notifications sent from Lemon Squeezy to Arenor’s Cloudflare Worker may contain a customer name, email address and receipt URL. The raw content is processed temporarily in memory to verify the notification’s signature and order state.
Cloudflare stores only an HMAC-derived pseudonymous order token, event type, order/refund state category and source dates. Records expire 60 days after the source update timestamp. The raw notification, name, email, receipt URL, full order ID, amount and license key are not written to this audit record.
These records track order notifications; they do not provide a complete accounting ledger, revenue measurement or attribution of sales to organic search.
Website and support
The website is served through Cloudflare; Cloudflare Web Analytics measures traffic separately. The site Worker stores approximate daily request totals without IP addresses, user identifiers, User-Agent strings or query parameters in those counters. A download request is not an installation; a checkout visit is not a payment. These counters do not report verified purchases.
For questions about your data or a deletion request, contact help@arenor.app. Information you include in a support message goes to the support channel. Do not send passwords, API keys, full license keys or private project contents. Reduce and anonymize examples before sharing them.
Scope of this explanation
This page describes technical flows reviewed on October 2, 2026. Consult each provider’s current documentation for retention, training, processing location and account terms. Arenor does not promise that all AI processing happens offline or that no data leaves your Mac.
The mobile companion is for the developer’s local use and is not part of the public Mac download.
Questions
Does a worktree isolate my data from the internet?
No. A worktree provides a separate working directory. It does not itself block network access or context sent to a model provider.