Privacy in Pullback

Your screen history is yours.

Pullback remembers what you did on your Mac, so you don’t have to. That only works if you can trust it with everything you see. Here is, plainly, how it works.

  1. 01

    It stays on your Mac.

    screenpipe records your screen and audio and keeps them on your disk. Pullback reads them through screenpipe, on your Mac. There is no Pullback account, and no Pullback server keeps your history.

  2. 02

    Claude reads text, and only what it needs.

    To fill your to-do, Claude reads a condensed text of your recent activity. To answer a question, the lines that match. Never a screenshot, never a sound.

    With an invite code, that text goes through our proxy, which counts usage and never keeps content. With your own API key or Claude Code, it goes straight to Anthropic.

  3. 03

    Secrets are hidden first.

    Before your history is sent to fill your to-do or answer a question, API keys, tokens and passwords are masked. For a question, email addresses and phone numbers too.

    Agent mode is different, and opt-in: what the agent reads in your browser, clipboard or connectors for its task goes to Claude as it is.

  4. 04

    Some things are left out.

    Your to-do, your search and your questions never read password managers or banking. Chat apps (WhatsApp, Messages, Signal, Telegram…) keep their window name, nothing more.

    When you run agent mode, the agent can search your screenpipe history for its task, so these filters don’t apply to it. That’s why it’s off until you turn it on.

  5. 05

    Nothing goes out without you.

    Pullback’s own agent drafts. Sending, posting, publishing, paying or deleting waits for your click, on a card that shows what, to whom, and the full content. Drafts, notes, reminders and your own calendar events don’t ask.

  6. 06

    Your agents, your keys.

    Agent mode is off until you turn it on. It then uses your own Anthropic key, kept in a config file on your Mac and sent only to Anthropic, and the connectors you already set up in Claude.

  7. 07

    You can stop it any time.

    Quit Pullback and nothing runs. Pause screenpipe from its own menu to stop recording. Pullback’s files live in two folders you can delete: ~/Library/Application Support/Pullback and ~/Documents/Pullback, plus a Warp launch file and a pullback entry in Claude Code’s MCP list if you set them up.

  8. 08

    Not for sale.

    We don’t sell your data, we don’t show ads, and we don’t train anything on it. Period.

    Requesting access stores your email and your platform, only to send you a build.