Privacy policy
Aloft is a desktop app for Windows and macOS. This page covers the website and the app. Last updated 8 October 2026.
The website
These pages are static. The site does not create an account and does not ask you to sign in.
If a Cloudflare Web Analytics token is set, the site loads Cloudflare’s cookieless beacon. That beacon counts page views. It does not use cookies, and the site does not show a cookie banner. No other third-party script is loaded.
The app
Aloft runs on your computer. It runs the official command-line tools of each AI company: Claude Code from Anthropic, Codex from OpenAI, and Antigravity CLI from Google for Gemini. Gemini CLI from Google also works with your own Gemini API key. If you turn on experimental engines in Settings, it can also run Cursor’s CLI and xAI’s Grok CLI. Aloft does not ship an API key or a shared account. You sign in with your own account in each tool.
If one of them is missing, Aloft installs it from the official source: Anthropic’s, OpenAI’s or Google’s own installer or download (checked against its published checksum), or Homebrew, npm or winget. Sign-in happens in those tools, with each company directly; Aloft never sees your password. Aloft reads their sign-in files on your computer, such as ~/.claude/.credentials.json, ~/.codex/auth.json and ~/.gemini/ (including Antigravity’s sign-in logs), only to show whether you are signed in, with which email and on which plan. Aloft never sends or stores those tokens.
What you send to an engine, including your files, pictures and tool output, goes from that tool to its company under your own account. Each company’s own terms and privacy policy apply to it. Aloft does not receive it. Chat titles are written by the same engine, from the start of your first message. Chats, projects and settings are saved on your computer.
Aloft does not rewrite skills, MCP servers, custom commands, CLAUDE.md, AGENTS.md, settings, or CLI history.
Downloads and updates
The download buttons fetch the installer from Aloft’s public releases on GitHub. The site does not add an account step before that file.
Downloads are counted anonymously: the system (Windows or Mac), the country, and a daily device fingerprint that cannot be turned back into an IP address. The IP address itself is not stored, and the counts are kept for 90 days.
The app checks GitHub for a newer version of Aloft. That request carries no account or chat data. An update installs only when you click “Update and restart”.
While the app is open, it also keeps one quiet connection to Aloft’s server on Supabase, so a new version shows up right away. Nothing is sent over it: the server only announces new version numbers. Like any connection, Supabase sees your computer’s IP address. Aloft does not store it.
To keep the engines up to date, the app checks npm and GitHub for new versions of Claude Code and Codex, and updates them when a chat is idle. You can turn this off in Settings, under Update automatically.
The Discover page loads the public list of MCP servers from the Model Context Protocol registry. That request carries no account or chat data.
Agents
Agents are engine sessions that Aloft starts for you, in their own copy of your project or in the project folder. Their chats, tasks, routines, team chat messages, review items, action logs and notebooks are saved on your computer, not on Aloft’s servers. Notifications about them are shown by your operating system and are not sent anywhere.
A Claude agent can use your browser through the Claude in Chrome extension, with the accounts you are already signed in to. With Drafts only on, an agent cannot click, type, send or publish, and puts its drafts in your inbox for review. Without it, agents are told to post only after you approve the exact text. What an agent sends goes to those websites under your account and their terms.
When you ask an agent to deliver its work, Aloft can push to your Git remote, open a pull request with the GitHub CLI, or publish a preview with Vercel or Netlify, using the accounts already signed in on your computer.
Voice
Voice uses OpenAI. For a live voice session, the app asks Aloft’s voice server on Supabase for a short-lived OpenAI session key, then talks to OpenAI directly. Dictation goes through that server to OpenAI for transcription.
During a live voice session, OpenAI also receives what the voice needs to follow your work: your speech, the project name, what you type or attach in the chat (including pictures), short lines about what the agent is doing, its answers, screenshots the agent takes of the browser, and your Claude Code memory files (CLAUDE.md and the project memory). Close the voice session to stop this.
The voice server stores an anonymous install id with a daily count of voice sessions and dictations, to enforce the daily limit. It does not store audio, text, or pictures. If you save your own OpenAI key in Settings, it stays in your system’s password store and live voice uses it instead of the server.
Feedback
The feedback button sends a note only when you press Send. It sends only what you see before sending: the message you wrote, any screenshots you attached, and, if those boxes are still checked, the app version, your operating system, and a reply email. It goes through Aloft’s feedback server on Supabase to the Aloft team’s Slack workspace, where the team reads it. An anonymous install id is sent with it to limit how often one computer can send notes. The server does not store the note. Nothing from your chats is included unless you write it or attach it yourself.
Usage stats
During beta, Aloft can send a short anonymous note when you open the app, start a chat, or create an agent. Each note has an anonymous install id, the app version, your operating system, and the event name: app opened, chat started, or agent created.
Those notes never include your code, prompts, chat content, file names, or credentials.
The notes are stored in Supabase. IP addresses are not stored. The server keeps only a daily-salted hash of the address, and only to limit how often one computer can send notes.
To help fix bugs, Aloft also sends anonymous error reports when something goes wrong: the error type, a short error message with file paths and emails removed, the engine and model, the app version and your operating system, with the anonymous install id. They never include chat content, prompts, file contents or project names, and are kept for 90 days.
This is on during beta. Turn it off in Settings, under Share anonymous usage stats. When that switch is off, the app does not send these notes or error reports.
Crash reports
Crash reports are off unless you turn them on in Settings. When they are on, they are saved in a folder on your computer. Aloft does not send them.
Who runs Aloft
Ofri Mishali, Israel. Contact [email protected].
Your rights
You can ask for access, correction, and deletion under Israel’s Privacy Protection Law and the GDPR, via [email protected].