Privacy policy

Last updated: 29 October 2026

The short version: Sparehand runs on your own computers. It sends no telemetry, and your code, files and jobs never pass through me. It does contact a few outside services, listed below: three on its own (your licence, updates and the AI model list), and the others only when you set up a feature that uses them. Several of those features (Crew, Studio, members, cloud machines and cloud AI providers) are in beta.

Who we are

Sparehand is made and sold by Mumin Mohamed ("I", "me"). I am responsible for this policy.

What Sparehand does with your data

• It runs locally. The app, the dashboard and the sparehand command run on your own computers. There is no Sparehand cloud service, and I have no servers that receive your data.
• No telemetry. Sparehand does not send usage data, crash reports, analytics or tracking information to me or to anyone else.
• Your jobs go between your own machines. When you run a command, your project files and the command go from your main computer (the hub) to your other computers (workers), and the output comes back, over SSH, a private encrypted connection. They never pass through me.
• .env files and files that git ignores are not copied to your other computers, unless you change that setting.
• Records stay on your hub. Sparehand keeps a log and job history on your own computer so you can see what ran. I cannot see them.
• The Sessions tab reads Claude Code's transcripts on your hub to show your sessions. They are not copied anywhere.

What Sparehand contacts on its own

These requests happen without you starting them. Each one carries the basic technical details of any internet request, such as your IP address.

• Lemon Squeezy (api.lemonsqueezy.com), the reseller and merchant of record, to activate your licence and check it again every few days. This sends your licence key and a random label for this Mac (not its name). Lemon Squeezy handles this under its own privacy policy.
• This website, once a day, to check for a new version of the app (the Sparkle update framework). This sends the app's version, as any download does.
• ollama.com (ollama.com and registry.ollama.ai), once a day, to read the list of new and popular AI models for the dashboard's model library. Nothing about you or your machines is sent. Turn it off with "aiLatest": false in the dashboard's app.json.

What Sparehand contacts when you ask

• GitHub (github.com, api.github.com): when you install the local AI server (sparehand ai install), Sparehand looks up Ollama's latest release and downloads it from GitHub. Models you choose are then downloaded by Ollama from Ollama's registry.
• Studio's setup (sparehand studio install): the programs and models Studio uses are downloaded from their publishers, mainly GitHub, Hugging Face (huggingface.co), PyTorch (download.pytorch.org) and Astral (astral.sh, for uv), plus the package registries those tools use (PyPI, npm and, on Linux, your distribution's package mirrors). The list, with each licence, is in the Studio guide.

Outside services you set up

Some features work with services you sign up for and connect yourself, with your own account or API key. Sparehand sends them only what the feature needs, directly from your hub, and their own privacy policies and terms apply. If you don't set a feature up, Sparehand doesn't contact its services.

• Studio (video production) sends a production's scripts, prompts and pictures to the services you pick for it: Google's Gemini API (generativelanguage.googleapis.com: writing, voices, pictures, music and clips), ElevenLabs (api.elevenlabs.io: voices, music and sound effects), and Pexels, Pixabay and Freesound (api.pexels.com, pixabay.com, freesound.org: searches for stock footage, pictures and sounds). If you connect a YouTube channel, it signs in with Google (accounts.google.com, oauth2.googleapis.com) and uploads the finished video, its title, captions and thumbnail through the YouTube Data API (www.googleapis.com). A production set to local only refuses every request that leaves your computers.
• Crew (AI coding agents) sends a task and the code it works on to the agents you add: the Anthropic API (api.anthropic.com), Kimi Code (api.kimi.com), Moonshot's Kimi API (api.moonshot.ai), or any other API address you enter. Agents that run a coding tool you installed (Claude Code, OpenAI's Codex CLI, Google's Antigravity or Gemini CLI) send it to that tool's provider under your own login. A cloud agent works in Claude Code on the web on a copy of the repository's GitHub remote, and its results come back as branches pushed to that remote.
• People invites: when you invite someone by e-mail from the People tab, the dashboard asks Tailscale's API (api.tailscale.com), with your API token, to send the invitation. This sends their e-mail address to Tailscale.
• Notifications on your phone (Web Push) go through your browser's push service: Apple's, Google's, Mozilla's or Microsoft's, depending on the device. Each notification is encrypted for your device, so the push service can't read it; it sees the device's push address, the time and the size. Turn them off with "push": false.
• Work items: if you connect Jira or Azure DevOps (dev.azure.com), the dashboard reads your work items directly from them with your token.
• Cloud AI providers (the AI hub's cloud models): the local AI address, localhost:11434, answers from your own machines. Once you add a provider's key (Local AI → Cloud providers…, or sparehand ai cloud key), a chat that asks for one of its models by name, or that auto sends there because none of your machines can answer, is forwarded to that provider, with your key: the messages of that conversation, the files or pictures attached to it, and the model's name. The providers are Groq (api.groq.com), Cerebras (api.cerebras.ai), Google Gemini (generativelanguage.googleapis.com), OpenRouter (openrouter.ai), Mistral (api.mistral.ai), NVIDIA (integrate.api.nvidia.com), SambaNova (api.sambanova.ai), Cloudflare Workers AI (api.cloudflare.com), GitHub Models (models.github.ai), Cohere (api.cohere.ai), Hugging Face (router.huggingface.co) and xAI (api.x.ai), plus any OpenAI-compatible server you add yourself under "aiEndpoints". Mistral and xAI bill you; the others have free tiers with limits the hub counts. Nothing goes to any of them until you add its key, answers from the cloud are marked ☁, and members of your dashboard never use them unless you allow it ("aiCloudMembers"). The hub also reads each provider's list of models from the same address.
• Pictures in the chat: the 🖼 button next to Send makes a picture on your own machines (Studio's ComfyUI), or, when you pick a cloud maker and have its key, sends the prompt to Cloudflare (api.cloudflare.com, FLUX.1 schnell), Hugging Face (router.huggingface.co, FLUX.1 schnell) or Google (generativelanguage.googleapis.com, Gemini, paid, with Studio's Gemini key). The picture comes back to your hub and is kept there.
• Cloud machines: if you add a machine in the cloud as a worker (Add a machine → Cloud provider, or sparehand cloud add), Sparehand creates, starts, stops and deletes it through the provider's API with the credential you give it, and reads the provider's catalogue and prices: Runpod (api.runpod.io), Amazon Web Services (EC2 and its price list, *.amazonaws.com), Microsoft Azure (management.azure.com, login.microsoftonline.com, prices.azure.com) or Google Cloud (the Compute Engine and billing APIs, *.googleapis.com, or Google's gcloud tool and your own Google login). To let only your hub in, Sparehand asks checkip.amazonaws.com for your public address and puts it in the machine's firewall rule. The machine is then a worker like any other: your project files and jobs go to it over SSH, and Studio's programs and models may be downloaded onto it. The provider bills you directly, and its own privacy policy applies to what it keeps.
• Tailscale: to use the dashboard from your phone, you publish it with Tailscale, which you install and sign in to yourself. Tailscale's privacy policy applies to Tailscale.

What the hub keeps about other people

If you let other people use your dashboard (the People tab), your hub keeps, for each person: their Tailscale login (an e-mail address), the name and note you give them, their role, when they last visited, the invitation sent to them, and their API keys (as a one-way hash only). For members it also keeps their saved chats, their credit ledger (what they were given and what they spent), and their Studio productions and Crew tasks with the files they added. All of it stays on your hub, in folders only your user account can read, and none of it is sent to me. You are responsible for this data and for telling the people you add what you keep.

Keys and tokens

Sparehand keeps the secrets you give it in your Mac's Keychain on the hub, never in its settings files: your licence key, the API keys for Studio's services (Gemini, ElevenLabs, Pexels, Pixabay, Freesound, Higgsfield), your YouTube app's client secret and each channel's sign-in token, Crew's API keys, the cloud AI providers' keys, the cloud machine providers' credentials, the Tailscale API token, Jira and Azure DevOps tokens, and the passwords of shared folders on your workers. On a hub that isn't a Mac they are kept in files only your user account can read, or in environment variables. Programs running as your user on the hub can read these items. None of them is sent to me.

Buying

Lemon Squeezy sells Sparehand to you as merchant of record. It collects and processes your payment details, name, email address and billing country, and handles tax. I do not receive your card details. I may receive limited order information, such as your name, email address and country, so I can provide support and licences. Lemon Squeezy's privacy policy applies to what it collects.

This website

This website is plain pages. It sets no cookies and has no analytics or advertising. Our host may keep ordinary server logs (such as IP addresses) for security and operation, including for the app's daily update check.

Your rights

Depending on where you live, you may have rights to access, correct or delete personal data held about you. Since Sparehand sends me nothing itself, the only data I may hold is the order information above. To use these rights, contact me through the support address given on your order receipt. For data held by Lemon Squeezy or by a service you connected, contact that service.

Changes

If this policy changes, the new version will be posted here with a new date.