Privacy policy

Last updated: 2026-11-01

This policy covers Black, the macOS app by kod.systems for running AppleScript and JXA scripts.

Black does not collect, sell or share your personal data. It has no accounts, no ads, no analytics and no crash reporting.

What stays on your Mac

Black keeps everything it stores on your Mac:

Your scripts, in ~/Library/Application Support/Black/Scripts or another folder you choose in Settings.
Settings, in Black's standard macOS preferences. Webhook and AI access tokens and your MongoDB connection string are kept in your macOS Keychain.
Run history: the last 2,000 runs, including their arguments and what your scripts printed, in ~/Library/Application Support/Black/history.jsonl. You can clear it in the app with Clear history….
Secrets you add, in your macOS Keychain. Black hands them to your scripts as environment variables when they run.
Warden's audit log, only if you turn on Audit Log, in /Library/Application Support/Black/Warden.

None of this is sent to kod.systems.

Update checks. When Black launches (at most once an hour) and when you choose Check for Updates…, it downloads https://apps.kod.systems/black/updates.json. The request contains no identifiers. Like any web request, it shows the server your IP address and a standard header with the app's build number and your macOS version. If an update is available, Black opens its download link in your browser.
MongoDB, only if you choose it. If you switch script storage to MongoDB, your scripts are stored in the database you set up: on your Mac, on your own server, or with a hosted service such as MongoDB Atlas. That provider's privacy policy applies.
Webhook API docs, only if you open them. The optional API docs page (off by default) loads the Swagger UI files from unpkg.com in your browser.
Your own scripts. A script does whatever you write it to do, including network requests. Black doesn't monitor or log that traffic. The starter templates contain example addresses (example.com, httpbin.org) that are only contacted if you run them.

Black makes no other connections to the internet.

The webhook server and the AI access (MCP) server are off by default. When you turn them on, they listen only on your Mac (127.0.0.1), so other devices on your network can't reach them. You can require a token for each.
If you turn on AI access, the AI agents you connect can see the scripts you mark as visible, their run history, and Black's settings (with any MongoDB password hidden), and can run those scripts. Scripts an agent creates or changes need your approval before they run. Whatever an agent sends to its own service is covered by that service's privacy policy.
Warden (off by default) lets connected agents ask to run a command as root. Each request needs your approval with Touch ID or your password, unless you turn on Auto Approval. macOS handles Touch ID and your password; Black never sees them.

Automation: macOS asks the first time a script controls another app, such as Mail or Finder. You can change this in System Settings ▸ Privacy & Security ▸ Automation.
Notifications: to tell you when a script fails.
Login Items: only if you choose to open Black at login, or install Warden's helper.
Folders: Black watches only the folders you pick for folder triggers.

If this policy changes, this page and the date above will be updated.

Questions about privacy: hi@kod.systems. For help with the app, see support.