Your economy stays on your Mac.

In short

• Economic runs on your Mac. Your economy (tasks, conversations, agent results, files and credentials) stays on your Mac.
• Agent work is sent to OpenAI through the official Codex CLI on your own ChatGPT account, under your agreement with OpenAI.
• Michael Callow receives data only when you choose to: a diagnostics report you send, or an email.
• There are no ads, no tracking pixels in the app, and no sale of personal data.

What stays on your Mac

The economy database, saved artifacts, drafts, agent transcripts, browser screenshots and downloads are stored in your user Library (~/Library/Application Support/com.michaelcallow.economic) and beside the economy you choose. Economic’s local helper listens only on a private, owner-only Unix socket on your Mac.

Site logins and payment cards you store for agents are kept in your macOS login Keychain. A private file holds only their names, usernames, the last four card digits and the sites they may be used on. Economic types them into the matching field itself; they are not sent to the model, saved in results or included in diagnostics. If you allow agents to enter credentials directly, a password they type or that appears on screen can reach the model like any other page content.

Model work through your OpenAI account

When you ask Economic to do work, it sends the relevant instructions, files, page text and screenshots to OpenAI through the Codex CLI that you installed and signed in to. OpenAI processes that data under the terms and privacy policy you accepted with OpenAI. Economic does not receive copies of that traffic.

When agents browse the web

Agents browse in a separate, private copy of Chrome that Economic runs in the background, from your Mac and your internet connection. Websites they visit see your IP address and the requests the agents make, as with any browser. Each agent gets an isolated browser profile that is deleted when the browser stops; your own Chrome profile, cookies and saved passwords are never used. Local Mac and network access are off by default. You can explicitly allow services on this Mac with browser_local_access=this_mac, or your local network with browser_local_access=network. Link-local and cloud-metadata addresses stay blocked.

If no Chrome-family browser is installed, Economic downloads Google’s Chrome for Testing once from Google’s servers.

Public page scripts are off by default. Enabling browser_allow_page_scripts gives workers arbitrary page actions, including form submissions and purchases through signed-in sites, outside typed-action purchase checks. Stored credentials and public scripts cannot share a tab family.

When agents use Mac apps

Native app control is off by default. You choose allowed apps with computer_use_apps and grant Accessibility to Economic in System Settings. App text and screenshots can be sent to the model as task context, including private content visible in an allowed app. Screen Recording is needed for screenshots and coordinate clicks; screenshots require macOS 14 or later.

A named app grant can permit editing, messages, purchases and other actions that app exposes. Native app actions do not use browser purchase approval. Window screenshots leave focus alone unless the worker explicitly requests activate: true, which briefly brings a hidden window forward. Unknown input outcomes remain held for a new observation.

economic.run, updates and downloads

The website and the Economic download are served by Vercel. Like most hosts, Vercel processes standard request data such as IP address, user agent and the pages requested, to deliver and secure the site.

Economic for Mac checks economic.run/releases/stable.json about once a day to tell you when a newer release exists. That request includes your IP address and an app-version user agent and no identifier. You can turn the check off in Settings.

Diagnostics you choose to send

When something goes wrong, “Report a problem” builds a diagnostics report on your Mac: app, engine and macOS versions, setup and connection state, recent error messages and counts of events. It does not include prompts, conversations, agent results, page contents, file contents, credentials or account tokens, and obvious secrets are removed again before upload. You can read the whole report before sending.

Nothing is uploaded unless you choose “Send”. When delivery is available, a sent report goes to economic.run and is delivered by email to Michael Callow using Resend, an email service. Reports are kept only as long as needed to fix the problem, normally no more than 12 months. To have a report deleted, email the address below with its report ID.

Email

If you email callowmichaelt@gmail.com, your message and address are used to reply and to fix the problem you describe.

Your choices

• Delete your economy by deleting its folder; uninstalling the app removes the app but keeps your data until you delete it.
• Remove stored site logins and cards with economic browser credential-remove NAME; this also deletes the Keychain entry. Withdraw payment approval with economic config set browser_allow_payments false.
• Ask for a copy or deletion of anything you sent, by email.

Children

Economic is not directed to children under 13 and is not meant for them.

Changes and contact

This page will be updated if Economic’s data handling changes, with a new date at the top. Questions: callowmichaelt@gmail.com.