Privacy

Rook is a notes app made for code, built by Maryam TB. This page explains what we collect, why, and how to remove your data.

The app itself

Rook is local-first. Your notes are stored on your Mac in Rook's application support folder. We don't send your notes anywhere.

Starting with version 1.2, the app collects two types of anonymous data:

• ·Anonymous usage events via Aptabase (EU-hosted): app launches and feature usage, tagged with the app version. No note content, no IP, no identifiers.
• ·Crash reports via Sentry (EU-hosted): when Rook crashes, the stack trace and macOS version are sent so we can fix the bug. No note content, no screenshots, no IP, no captured URLs.

The app also checks a public URL on each launch to see if a new version is available (auto-update). That check is read-only. No data is sent.

The MCP helper

In version 1.3.0, we added a local helper that lets Claude, Codex, Cursor, and Gemini save notes to Rook. It's off by default. You can turn it on or pause it in Settings → MCP.

When it's on, connected AI tools can save notes to your Rook inbox. Rook only receives the final saved note. It doesn't receive chat history, prompts, or conversation context.

All saves stay on your Mac. We don't sync or transmit them anywhere.

The helper is sandboxed by macOS: it runs offline, only accesses Rook's shared folder, and can't read your existing notes. It only writes new ones.

You can view recent saves inside Rook, including which AI sent them, when, the title, and a short preview. Turning MCP off blocks new saves. Past saves stay in your inbox.

The helper's source code is on GitHub.

The website (userook.app)

We use cookieless analytics, so we don't track you across sessions or identify individual visitors. We collect aggregate data only:

• ·Page views and approximate referral source (Reddit, X, direct, etc.)
• ·Download events
• ·Sign-up form events
• ·Approximate geography (country level)

No tracking cookies, cross-site tracking, or fingerprinting.

Tools we use:

• ·Vercel for hosting and analytics
• ·PostHog (cookieless mode) for events

For specifics on what runs in your browser, see the cookies page.

When you sign up

If you sign up for updates, we collect:

• ·Your email address
• ·The date you signed up
• ·Which list you joined

We use this to send you product updates and major announcements. We don't sell your email, share it with anyone, or use it for anything else.

Email addresses are stored in Supabase (supabase.com). Email delivery is handled by Resend (resend.com).

We process your email based on your consent, which you can withdraw at any time using the unsubscribe link in any email or by emailing [email protected].

How long we keep your data

• ·Email: until you unsubscribe (link in every email) or email us to delete
• ·Analytics events: retained per the providers' defaults (up to 1 year). Email us to delete events tied to your address sooner.
• ·App telemetry: retained per Aptabase and Sentry defaults (typically 30 to 90 days). Since events are anonymous, we can't reliably identify or isolate individual events, but we can purge the entire dataset.

Your rights

Email [email protected] to:

• ·See what data we have associated with your email
• ·Delete your data
• ·Stop receiving emails (or use the unsubscribe link in any email)

We aim to respond within 7 days.

Children

Rook is not directed at children under 13. We don't knowingly collect data from children.

Changes

If we materially change what we collect or how we use it, we'll update this page and note the change. Existing email subscribers will be notified before any change that affects them.

Contact

Built by Maryam TB.
[email protected]