At a glance
- Workspaces are encrypted locally with keys protected by the device or user account. The keys and recovery options differ by edition.
- Connected assistants receive the request and context you approve. Their own permissions and retention apply.
- Exports and argument exchange files are unencrypted; review them before sharing.
Who is responsible
Commonroom is created by Tristin Hassell and published through Gathered Commons Press LLC. The party responsible for this policy is Gathered Commons Press LLC. Contact us through Commonroom support page or at hello@gatheredcommonspress.com.
Local work and storage keys
The Mac workspace is encrypted with its key in the login Keychain. The iPhone workspace is also encrypted with a device-bound Keychain key; that key does not migrate to another phone. Android protects its workspace key with Android Keystore. Windows encrypts the workspace with a key protected for the signed-in Windows account. These editions do not fall back to a readable workspace when protected storage is unavailable.
Encrypted previous saves are retained. Android and Windows do not yet provide a separate button for restoring that previous save. Mac, Android and Windows support passphrase-encrypted backup archives. iPhone recovery depends on its original device key. Text and SKILL.md exports are readable copies, not encrypted workspace backups. Losing the relevant key or backup passphrase can make saved work inaccessible.
Optional Mac assistant requests
Review selected documents, quotations, instructions, conversation and destination before sending. ChatGPT/Codex and Claude use their existing sign-in; their services receive submitted text under their own terms. Direct Ollama requests stay on a fixed loopback address on this Mac, without redirects, a proxy or an online fallback. The configured model service controls its own processing. A separate local OpenClaw route requires its installed runtime and model service; response verification for that route is still incomplete. An existing OpenClaw agent keeps its own tools and permissions, which Commonroom cannot constrain.
iPhone response tests
When a compatible iPhone has an available Apple on-device model, approved tests are processed on that device. There is no cloud fallback in this edition. Skill and profile editing remains available when the model is not. iPhone hardware use has not yet been confirmed by our checks.
Windows and Android model services
Windows sends the approved skill, profile directions and test material to the model service you configure on the same PC. Android can send them to a private numeric address on your local network after you explicitly approve the unencrypted HTTP connection. Android refuses public addresses, DNS names, redirects and proxy connections. A local address alone does not establish how the server processes a request; its configuration controls any later processing. No model is included or downloaded automatically.
Skills, profiles and test cases
Skill drafts, saved versions, profile directions, test cases, reviewed requests, replies and your ratings are saved with the Commonroom workspace. A test request includes the selected skill, profile instructions and test material, and goes to the connection shown in the preview only after you approve it. The same provider and temporary-file rules described here apply. Mac local-only projects block online test connections. A Windows or Android test is a separate request to the configured server; review its address and processing before approving it.
Skill exports and learning
SKILL.md exports are unencrypted text. They can contain the instructions, examples and other material you entered. Exporting does not install a skill globally or send it to another app. Changing a profile or rating a reply does not train the underlying model or automatically change a saved skill.
Temporary files and shared copies
Assistant runs can create readable temporary request and response files locally. Normal completion and stopping clean them; an interrupted process can leave files behind. Text exports, copied content and argument exchange files are unencrypted. Provider and recipient copies are not deleted when local work is removed.
Your choices
The apps send no analytics. Mac local-only projects block online routes. Argument Workshop does not contact assistants or execute generated code. The private Mac edition is not an operating-system-sandboxed app. Encryption protects saved bytes and does not hide content from an unlocked app process. Exported copies and provider or server copies must be managed where they are kept.
Messages you send us
If you write to us through the contact form or by email, we receive your name, email address and message and use them only to reply and to improve the app. The website privacy policy explains how long we keep these messages. Please leave passwords, access keys and other people’s private records out of your message.
Your requests
Use the storage, export and deletion options described above for this app. Removing local material does not remove copies you exported or shared. Information held by a service you connect is controlled by them, as described above. To ask about information you have sent us, or to have it deleted, contact us as above. We respond within 30 days. California residents have these rights under California law, and we extend them to everyone.
Changes to this policy
If a future version changes what the app stores or sends, we will update this page before that version is released and change the date above.
Commonroom · Support · Terms