Privacy Policy
Last updated September 29, 2026
m’kay lets you talk, from a browser or phone, to the AI agent apps on your own Mac (Claude, ChatGPT/Codex and Cursor). It is operated by SaltedMango, Inc. (“we”). This policy explains what we collect, why, who processes it, and what we do not keep. Questions: max@mkay.ai.
In short
- We do not record your voice and do not store your conversations or what your agent apps show. They pass through our servers and the providers listed below only while a session runs.
- We keep your account: email address, credits, the Macs you linked, and when and for how long you used voice sessions.
- No advertising, and we do not sell data. Our public website (mkay.ai) uses Google Analytics to count visits; the app and voice sessions do not.
What we collect
Your account
When you sign up we keep your email address, an account ID, when you signed up and last signed in. Sign-in itself is handled by Google’s Firebase Authentication: your password (if you use one) is held by Firebase, not by us, and signing in with Google or GitHub goes through those services.
Credits
A record of the credits you received and used: one entry per started minute of a voice session, with the session’s ID and time, and when each session started and ended. We also note when you last signed in or opened your account page.
Your linked Macs
For each Mac you link: its name (as your Mac reports it), when it was linked and last connected. Each Mac holds its own access token; we store only a one-way hash of it. You can unlink a Mac on your account page at any time.
Voice sessions
While you talk, the service needs to hear you, understand you, act on your Mac and answer. During a session:
- your audio travels between your browser and our server through Daily, which carries the call (we do not record calls);
- your speech is turned into text by Deepgram (we opt out of Deepgram’s model improvement program);
- the text of the conversation, together with what the agent apps on your Mac return (for example project and chat names, and agents’ replies), is sent to a language model from OpenAI or Anthropic, which decides what to do and writes the answer;
- answers are spoken by Cartesia or Fish Audio.
These providers process this data to deliver the session, under their own terms and policies. We do not store audio, transcripts, messages or agent content. Our server logs record how sessions run (account ID, session times, which tools were used, errors, and the length of messages, not their text) and are kept for at most 30 days.
On your Mac
The connector you run on your Mac is open source
(github.com/maxipesfix/mkay). It
connects out to our server, and uses macOS Accessibility to read and operate the agent
apps when a session of your account asks it to. It does not send anything else from
your Mac. Nothing is sent to an agent unless you confirm it by voice after hearing it
read back, and the connector’s --read-only option refuses sending
altogether.
Visits to our website
Our public website at mkay.ai (this page, the terms and the home page) uses Google Analytics to understand how visitors use it: pages viewed, how visitors arrived, approximate location, device and browser. Google processes this data under its own terms. The account and voice pages at app.mkay.ai do not use it.
The home page’s Download for Mac and GitHub links pass through app.mkay.ai, which counts each click: which link and when, nothing about you (no address, cookie or browser details are kept).
Cookies and browser storage
One cookie keeps you signed in (mkay_session, for 14 days). Firebase
keeps sign-in state in your browser while you sign in, and the voice page remembers
the voice you chose in your browser. On mkay.ai, Google Analytics sets its own cookies
(_ga and _ga_*) to tell visits apart. We use no other cookies.
Where it is processed
Our server and database run on Google Cloud in the United States (Oregon). The providers above may process data in other countries under their terms.
Sharing
We share data only with the providers named above, to run the service and our website, and when the law requires it. We do not sell or rent personal data.
How long we keep it
Account, credit and Mac records are kept while your account exists. Server logs are kept for at most 30 days. Database backups are kept for 7 days.
Your choices
You can unlink Macs and stop the connector at any time. To get a copy of your data, correct it, or delete your account and its data, email max@mkay.ai from your account’s address.
Security
Connections are encrypted (HTTPS and secure WebSockets), Mac tokens are stored only as hashes, the database is reachable only from our private network, and each voice session runs in its own process that can reach only your own Mac.
Children
m’kay is not intended for anyone under 16, and we do not knowingly collect their data.
Changes
We will post changes here and update the date above; for significant changes we will also tell you by email.