Privacy Policy

Fabric is a local-first tool. When you install it, all of your data is stored in a database file on your own device. That includes your projects, agents, tasks, comments, settings, and work history. Without Sync, Fabric does not operate a server that stores this data, and the Apps do not transmit it to us.

This is not a setting you have to find. It is the default, and it is what you get by downloading the app and using it.

The following never leaves your device unless you explicitly configure it to. Turning on Sync does not change this list (see 2.2).

• Your project goals, workflow instructions, agent configurations, tasks, subtasks, comments, and worker activity history
• Access tokens for services you connect, encrypted at rest using your operating system’s secure credential store
• Browser sessions created by agent browser automation, held in a profile on your own machine
• Git clones, worktrees, and any files your agents produce

If you uninstall the App, or delete its data folder, this data is gone. On the desktop you can open that folder from the File menu, under Reveal Data Folder.

Used locally, the App makes network requests in four situations. In each one the data goes directly from your computer to the third party you chose. Fabric is not in the path and does not see the contents.

(a) Anthropic. Agents in Fabric are powered by Anthropic’s Claude models, and you supply your own Anthropic API key or account credentials. When an agent runs, the relevant task content and conversation context are sent from your computer to Anthropic to generate the response. Anthropic’s terms describe how they handle it, and we recommend you review them at https://www.anthropic.com/legal. Fabric receives nothing about these calls.

(b) Services you connect. When you connect a service such as Google, GitHub, or Linear, the resulting access tokens are stored on your device. When an agent calls that service, the request goes directly from your computer to the provider. Fabric receives none of the data returned.

(c) Update checks. The App periodically checks whether a newer version is available. Fabric operates no update server and does not log or count these checks.

(d) Browser automation. If an agent uses browser automation, your local browser loads the pages that agent visits. Nothing about the browsing is sent to Fabric.

The Apps do not include any of the following:

• No analytics, product telemetry, or usage tracking
• No advertising or ad-identifier collection
• No device fingerprinting
• No sale of your data, and no sharing of it for advertising
• No account and no sign-in, unless you turn on Sync, which requires one
• No background uploads to any Fabric-operated service, unless you turn on Sync, which exists to do exactly that with the contents described in 2.1
• No lock-in. Your data lives on your device and survives account deletion

Fabric’s use and transfer to any other app of information received from Google APIs adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We access the Drive, Docs, and Sheets files you select, files Fabric creates in a folder you designate, and your calendar events if you connect a calendar. We use that data only to provide the features you asked for. We never use it for advertising and never sell it.

Used locally, all of this happens on your own machine. If you turn on Sync, your calendar entries are copied to our servers so your devices can show them, and our servers may connect to Google on your behalf to keep them current. See 2.4. The contents of your Drive, Docs, and Sheets files are not stored on our servers in either case.

Because the Apps store your data on your device, you control retention. To delete it, delete the data folder or uninstall the App. To revoke an integration, disconnect it in Settings, and the stored tokens are removed from your device immediately.

On the desktop, access tokens are stored in your operating system’s secure credential store. On iPhone, the app’s local database is encrypted at rest, with the key available only on that device. All network requests to third-party services use TLS. Because the Apps run on your own device, the security of their data also depends on the security of that device.

Sync is optional, paid, and off by default until you turn it on. Its purpose is to let your Mac and your iPhone show the same workspace, so it copies the parts of that workspace both devices need:

• Tasks and subtasks, including their titles, descriptions, status, priority, and scheduled times
• Projects, workflows, and sections, including their names and descriptions
• Your calendar entries in Fabric, including entries brought in from a calendar you connected
• Agent configurations, meaning an agent’s name, instructions, and settings, along with comments and activity recorded against a task
• Your profile: display name, first and last name, and your profile picture
• The account email address you sign in with, and the name, platform, and last-seen time of each device you connect

We store this to deliver the service and for no other purpose. We do not sell it or share it for advertising.

Some things are excluded from Sync by design rather than by configuration. They stay on the device that created them even while Sync is on:

• Your integration credentials. The access tokens for services you connect stay in your operating system’s credential store and are never uploaded.
• References to files on your machine. A project’s reference files point at documents where they already live on your disk. The file is read only on that device, and neither the reference nor the contents is uploaded.
• Agent memory and working notes. What an agent has learned and its intermediate reasoning stay on the device that ran it.
• Git clones, worktrees, browser profiles, and generated files. These remain on your machine.

Sync requires an account, which is created and managed through our identity provider. See 2.8. Signing in gives us your email address and any name or picture you set. You manage your account details on the Website.

Each device you connect is registered so that we know where to send changes and so that you can see and remove your own devices. A device record holds a name you can recognise, the platform, and when it was last active. It holds no advertising identifier and no hardware fingerprint.

With Sync on, some of the work of keeping your calendar current moves from your Mac to our servers, so that your calendar stays up to date on your phone while your Mac is closed. Where that is the case, our servers connect to that provider on your behalf. This means Fabric holds authorization to read the data you connected, scoped to what the feature needs, and you can revoke it at any time by disconnecting the service. The same applies to issue-tracking services you connect.

Agent execution is unchanged. Agents run on your own device, and the model calls they make go directly from your device to Anthropic as described in 1.3(a).

Sync is paid. Billing is handled by Clerk, the same provider that handles your account, and the payment details are collected by Clerk and its payment processor rather than by us. Fabric does not receive or store your full card number. We keep a record of your subscription status so that we know whether your account is active.

With Sync on, the Apps may report a crash or an unrecoverable error to us through Sentry so that we can fix it. A report carries the technical details of the failure, meaning where in the code it happened and the state of the app at the time. It does not carry your task titles, project names, workspace name, comments, or file contents. We configure it to leave those out rather than relying on them not appearing, and a report is never used to build a profile of you.

Turning Sync off. Your data stays on your devices and the App keeps working locally. Your cloud copy is marked for deletion and is permanently deleted 14 days later. If you turn Sync back on within those 14 days, your workspace is restored.

Deleting your account. Deleting your account is immediate and permanent. It deletes your workspace data, your profile, and the account itself. There is no grace period and we cannot recover it afterwards. Your local copy on each device is unaffected. It is yours, and deleting the account does not reach it.

Backups and logs. Routine database backups may retain deleted data briefly before they age out. Operational logs record identifiers and timing so that we can run and debug the service. They do not record the contents of your tasks, comments, or files.

Data in transit uses TLS. Each device authenticates with a credential issued to that device alone, which you can revoke by removing the device or turning Sync off. Your workspace is scoped to your account, and a request is authorized from the credential it presents rather than from anything the request claims about itself.

On iPhone, the local copy is encrypted at rest with a key available only on that device. Sync is designed so that the smallest useful set of your data leaves your device, which is why 2.2 is a list of things that do not sync rather than a setting you have to find.

Used locally, with no account, the Apps use none of the providers below. Sync relies on the following, all in the United States:

The Website is hosted by Vercel, which receives standard request information such as IP address, user agent, and requested URL, as any web host does. The marketing pages use Google Analytics and Vercel Web Analytics to understand which pages people visit.

The pages that handle your account and connect your devices load no analytics of any kind. Those pages briefly hold credentials, and no third-party script runs on them.

Whether you joined the waitlist, created an account, or wrote to us, we use your email address for three things: to reply to you, to send the account and security messages the product depends on, and to tell you when we ship something new. Feature announcements carry an unsubscribe link, and unsubscribing affects nothing else.

We send nothing else. No onboarding sequences, drip campaigns, promotions, discounts, newsletters, or surveys. We do not sell or share your address, and we never email you on behalf of anyone else.

Fabric, LLC is based in Florida, United States. The Website and Sync are operated from the United States, so if you use them from elsewhere, that information is transferred to and processed in the United States. Used locally, the Apps run on your own device and we receive nothing to transfer.

You can export or delete your local data at any time by acting on the data folder on your device. If you use Sync, you can turn it off, in which case your cloud copy is deleted as described in 2.7, or you can delete your account outright. Depending on where you live you may have additional rights over the data we hold, such as to access it, correct it, or have it deleted. Write to us at the address below and we will honor them.

Fabric is not directed to children under 13, and we do not knowingly collect information from them. If you believe a child has provided us with information, contact us and we will delete it.

We will update this policy as Fabric changes, and we will update the date above when we do. If a change means we collect something materially new, we will tell you before it takes effect rather than after.

Questions about this policy, or about the data we hold, go to support@fabriccalendar.com.