Data & privacy · 2 min
Your data stays on your Mac.
APM Explorer is built around a hard boundary: it records broad activity totals, not the content or context of your input. There is no account, telemetry, network entitlement, or cloud sync.
The collection boundary
Counted in aggregate
- Physical key downs
- Mouse-button downs
- Reduced scroll gestures or bursts
- Time when monitoring was available
Never recorded
- Keys or typed content
- Pointer locations or scroll deltas
- Application or window identity
- Clipboard contents or individual events
Reduction happens at the capture boundary. Key codes, characters, coordinates, deltas, and application identity never enter the app’s data model. Key repeats and scroll momentum are discarded.
What is stored locally
| Local data | Contents | Retention |
|---|---|---|
| Session summaries | Start, last activity, end, aggregate action count, timeout, and end reason | 48 hours |
| Hourly aggregates | UTC hour boundary, aggregate action count, and aggregate monitoring duration | Rolling 60 days |
| Preferences | Launch-at-login state only; never activity payloads | Until changed |
Delete activity data
Open Settings → Privacy and data, then choose “Delete Activity Data…”. After confirmation, APM Explorer closes the current session, deletes local session and hourly history, and resets the displayed metrics. Your launch-at-login preference is kept.
No network path
The macOS app is sandboxed and has no network entitlement. It cannot transmit, upload, or otherwise send activity data online. This documentation site is separate from the app and does not receive activity data from it.